Traffic Trace Info
DumpFile: 201004150115.dump
FileSize: 1944.50MB
Id: 201004150115
StartTime: Thu Apr 15 01:15:01 2010
EndTime: Thu Apr 15 01:30:00 2010
TotalTime: 899.57 seconds
TotalCapSize: 1520.81MB CapLen: 96 bytes
# of packets: 27766714 (16148.13MB)
AvgRate: 150.57Mbps stddev:15.07M
IP flow (unique src/dst pair) Information
# of flows: 1341765 (avg. 20.69 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.1% 1.1% 1.1% 0.9% 0.5% 0.5% 0.5% 0.5% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 730580
Top 10 bandwidth usage (bytes/total in %):
16.9% 7.7% 7.6% 5.8% 5.3% 5.3% 3.7% 2.7% 1.8% 1.7%
# of IPv6 addresses: 988
Top 10 bandwidth usage (bytes/total in %):
23.5% 21.8% 21.8% 6.4% 5.6% 5.1% 3.7% 3.6% 2.6% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004150115.pktlen.png)
detailed numbers
[ 32- 63]: 4678677
[ 64- 127]: 8184848
[ 128- 255]: 2496589
[ 256- 511]: 1596083
[ 512- 1023]: 785920
[ 1024- 2047]: 10024597
Protocol Breakdown
![[protocol breakdown chart]](201004150115.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27766714 (100.00%) 16932537989 (100.00%) 609.81
ip 27707905 ( 99.79%) 16921905578 ( 99.94%) 610.72
tcp 16721731 ( 60.22%) 11897359842 ( 70.26%) 711.49
http(s) 7064048 ( 25.44%) 9454456782 ( 55.84%) 1338.39
http(c) 4022538 ( 14.49%) 418209611 ( 2.47%) 103.97
squid 462119 ( 1.66%) 233191918 ( 1.38%) 504.61
smtp 423574 ( 1.53%) 124162651 ( 0.73%) 293.13
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 19759 ( 0.07%) 2157019 ( 0.01%) 109.17
pop3 11342 ( 0.04%) 7871608 ( 0.05%) 694.02
imap 2110 ( 0.01%) 765026 ( 0.00%) 362.57
telnet 859 ( 0.00%) 74325 ( 0.00%) 86.53
ssh 1348233 ( 4.86%) 196377708 ( 1.16%) 145.66
dns 57743 ( 0.21%) 3904227 ( 0.02%) 67.61
bgp 174 ( 0.00%) 64028 ( 0.00%) 367.98
napster 32 ( 0.00%) 2551 ( 0.00%) 79.72
realaud 8 ( 0.00%) 929 ( 0.00%) 116.12
rtsp 10518 ( 0.04%) 2972950 ( 0.02%) 282.65
icecast 8386 ( 0.03%) 552756 ( 0.00%) 65.91
hotline 10 ( 0.00%) 924 ( 0.00%) 92.40
other 3290273 ( 11.85%) 1452594529 ( 8.58%) 441.48
udp 7536505 ( 27.14%) 3469472129 ( 20.49%) 460.36
dns 792714 ( 2.85%) 144956053 ( 0.86%) 182.86
rip 12 ( 0.00%) 934 ( 0.00%) 77.83
realaud 20 ( 0.00%) 3016 ( 0.00%) 150.80
halflif 198 ( 0.00%) 29485 ( 0.00%) 148.91
starcra 362 ( 0.00%) 39797 ( 0.00%) 109.94
everque 749 ( 0.00%) 128306 ( 0.00%) 171.30
unreal 165 ( 0.00%) 29099 ( 0.00%) 176.36
quake 52 ( 0.00%) 4523 ( 0.00%) 86.98
cuseeme 6 ( 0.00%) 1212 ( 0.00%) 202.00
other 6741833 ( 24.28%) 3324076619 ( 19.63%) 493.05
icmp 971350 ( 3.50%) 155606460 ( 0.92%) 160.20
ipip 375 ( 0.00%) 44500 ( 0.00%) 118.67
ipsec 871 ( 0.00%) 159458 ( 0.00%) 183.07
ip6 2403318 ( 8.66%) 1310579856 ( 7.74%) 545.32
other 73755 ( 0.27%) 88683333 ( 0.52%) 1202.40
frag 7573 ( 0.03%) 8864338 ( 0.05%) 1170.52
ip6 58809 ( 0.21%) 10632411 ( 0.06%) 180.80
tcp6 21977 ( 0.08%) 4113658 ( 0.02%) 187.18
http(s) 53 ( 0.00%) 31173 ( 0.00%) 588.17
http(c) 5560 ( 0.02%) 586202 ( 0.00%) 105.43
smtp 271 ( 0.00%) 130292 ( 0.00%) 480.78
ftp 2196 ( 0.01%) 227719 ( 0.00%) 103.70
imap 354 ( 0.00%) 41488 ( 0.00%) 117.20
ssh 3239 ( 0.01%) 268922 ( 0.00%) 83.03
dns 143 ( 0.00%) 36698 ( 0.00%) 256.63
bgp 117 ( 0.00%) 16160 ( 0.00%) 138.12
other 10044 ( 0.04%) 2775004 ( 0.02%) 276.28
udp6 29428 ( 0.11%) 5596990 ( 0.03%) 190.19
dns 28697 ( 0.10%) 5513233 ( 0.03%) 192.12
starcra 1 ( 0.00%) 113 ( 0.00%) 113.00
other 730 ( 0.00%) 83644 ( 0.00%) 114.58
icmp6 7338 ( 0.03%) 886015 ( 0.01%) 120.74
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 36 ( 0.00%) 31668 ( 0.00%) 879.67
tcpdump file: 201004150115.dump.gz (742.73 MB)