Traffic Trace Info
DumpFile: 201004150015.dump
FileSize: 2154.61MB
Id: 201004150015
StartTime: Thu Apr 15 00:15:00 2010
EndTime: Thu Apr 15 00:30:01 2010
TotalTime: 900.21 seconds
TotalCapSize: 1682.74MB CapLen: 96 bytes
# of packets: 30923801 (18982.28MB)
AvgRate: 176.88Mbps stddev:17.60M
IP flow (unique src/dst pair) Information
# of flows: 1272709 (avg. 24.30 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 1.4% 1.4% 0.8% 0.6% 0.6% 0.6% 0.6% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 666283
Top 10 bandwidth usage (bytes/total in %):
14.4% 7.9% 7.4% 6.9% 6.6% 6.2% 2.9% 2.8% 2.8% 2.5%
# of IPv6 addresses: 1043
Top 10 bandwidth usage (bytes/total in %):
28.8% 8.1% 6.8% 5.8% 4.5% 4.4% 4.1% 3.3% 3.2% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004150015.pktlen.png)
detailed numbers
[ 32- 63]: 5587727
[ 64- 127]: 8745064
[ 128- 255]: 2057744
[ 256- 511]: 1584934
[ 512- 1023]: 945473
[ 1024- 2047]: 12002859
Protocol Breakdown
![[protocol breakdown chart]](201004150015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30923801 (100.00%) 19904365917 (100.00%) 643.66
ip 30867041 ( 99.82%) 19895676823 ( 99.96%) 644.56
tcp 19310314 ( 62.44%) 14419838632 ( 72.45%) 746.74
http(s) 8511787 ( 27.53%) 11574789972 ( 58.15%) 1359.85
http(c) 4748760 ( 15.36%) 511353556 ( 2.57%) 107.68
squid 376170 ( 1.22%) 175675855 ( 0.88%) 467.01
smtp 390303 ( 1.26%) 100398775 ( 0.50%) 257.23
nntp 57 ( 0.00%) 4636 ( 0.00%) 81.33
ftp 19151 ( 0.06%) 1833590 ( 0.01%) 95.74
pop3 11587 ( 0.04%) 8266794 ( 0.04%) 713.45
imap 6869 ( 0.02%) 1913719 ( 0.01%) 278.60
telnet 7383 ( 0.02%) 5265418 ( 0.03%) 713.18
ssh 1339447 ( 4.33%) 203655094 ( 1.02%) 152.04
dns 56180 ( 0.18%) 3869329 ( 0.02%) 68.87
bgp 166 ( 0.00%) 64785 ( 0.00%) 390.27
napster 8 ( 0.00%) 496 ( 0.00%) 62.00
realaud 6 ( 0.00%) 712 ( 0.00%) 118.67
rtsp 208449 ( 0.67%) 168773073 ( 0.85%) 809.66
icecast 8478 ( 0.03%) 560024 ( 0.00%) 66.06
hotline 44 ( 0.00%) 5023 ( 0.00%) 114.16
other 3625467 ( 11.72%) 1663407661 ( 8.36%) 458.81
udp 7751969 ( 25.07%) 3802298913 ( 19.10%) 490.49
dns 803264 ( 2.60%) 139708812 ( 0.70%) 173.93
realaud 498 ( 0.00%) 32992 ( 0.00%) 66.25
halflif 212 ( 0.00%) 30034 ( 0.00%) 141.67
starcra 356 ( 0.00%) 40636 ( 0.00%) 114.15
everque 6373 ( 0.02%) 3026487 ( 0.02%) 474.89
unreal 192 ( 0.00%) 33861 ( 0.00%) 176.36
quake 34 ( 0.00%) 2897 ( 0.00%) 85.21
cuseeme 2 ( 0.00%) 203 ( 0.00%) 101.50
other 6940708 ( 22.44%) 3659225814 ( 18.38%) 527.21
icmp 942310 ( 3.05%) 152267896 ( 0.76%) 161.59
ipip 357 ( 0.00%) 42234 ( 0.00%) 118.30
ipsec 875 ( 0.00%) 219674 ( 0.00%) 251.06
ip6 2608842 ( 8.44%) 1488682643 ( 7.48%) 570.63
other 252374 ( 0.82%) 32326831 ( 0.16%) 128.09
frag 1681 ( 0.01%) 1743507 ( 0.01%) 1037.18
ip6 56760 ( 0.18%) 8689094 ( 0.04%) 153.08
tcp6 19206 ( 0.06%) 2059196 ( 0.01%) 107.22
http(s) 146 ( 0.00%) 162352 ( 0.00%) 1112.00
http(c) 9289 ( 0.03%) 789278 ( 0.00%) 84.97
smtp 119 ( 0.00%) 73292 ( 0.00%) 615.90
ftp 2133 ( 0.01%) 220811 ( 0.00%) 103.52
imap 451 ( 0.00%) 51850 ( 0.00%) 114.97
ssh 3268 ( 0.01%) 276844 ( 0.00%) 84.71
dns 82 ( 0.00%) 20596 ( 0.00%) 251.17
bgp 117 ( 0.00%) 15601 ( 0.00%) 133.34
other 3601 ( 0.01%) 448572 ( 0.00%) 124.57
udp6 30435 ( 0.10%) 5740469 ( 0.03%) 188.61
dns 29741 ( 0.10%) 5661975 ( 0.03%) 190.38
other 694 ( 0.00%) 78494 ( 0.00%) 113.10
icmp6 7049 ( 0.02%) 852650 ( 0.00%) 120.96
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 40 ( 0.00%) 32699 ( 0.00%) 817.48
tcpdump file: 201004150015.dump.gz (819.75 MB)