Traffic Trace Info
DumpFile: 201004150345.dump
FileSize: 1870.80MB
Id: 201004150345
StartTime: Thu Apr 15 03:45:01 2010
EndTime: Thu Apr 15 04:00:01 2010
TotalTime: 900.26 seconds
TotalCapSize: 1469.77MB CapLen: 96 bytes
# of packets: 26281529 (16680.17MB)
AvgRate: 155.43Mbps stddev:13.63M
IP flow (unique src/dst pair) Information
# of flows: 1300739 (avg. 20.21 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.7% 1.0% 0.8% 0.7% 0.7% 0.7% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 740383
Top 10 bandwidth usage (bytes/total in %):
20.0% 11.8% 7.8% 6.6% 6.0% 6.0% 3.3% 3.1% 2.4% 1.9%
# of IPv6 addresses: 914
Top 10 bandwidth usage (bytes/total in %):
29.8% 14.0% 13.9% 7.1% 5.9% 5.9% 2.9% 2.8% 2.8% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004150345.pktlen.png)
detailed numbers
[ 32- 63]: 4132457
[ 64- 127]: 7080275
[ 128- 255]: 2051361
[ 256- 511]: 1712616
[ 512- 1023]: 637265
[ 1024- 2047]: 10667555
Protocol Breakdown
![[protocol breakdown chart]](201004150345.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26281529 (100.00%) 17490422743 (100.00%) 665.50
ip 26222621 ( 99.78%) 17482032839 ( 99.95%) 666.68
tcp 14833290 ( 56.44%) 11381074372 ( 65.07%) 767.27
http(s) 6881177 ( 26.18%) 9436312831 ( 53.95%) 1371.32
http(c) 3450558 ( 13.13%) 269739219 ( 1.54%) 78.17
squid 279504 ( 1.06%) 84466279 ( 0.48%) 302.20
smtp 297778 ( 1.13%) 55180727 ( 0.32%) 185.31
ftp 9536 ( 0.04%) 944062 ( 0.01%) 99.00
pop3 9732 ( 0.04%) 6901209 ( 0.04%) 709.13
imap 658 ( 0.00%) 103773 ( 0.00%) 157.71
telnet 2356 ( 0.01%) 167310 ( 0.00%) 71.01
ssh 793763 ( 3.02%) 109523256 ( 0.63%) 137.98
dns 229973 ( 0.88%) 274063875 ( 1.57%) 1191.72
bgp 138 ( 0.00%) 44761 ( 0.00%) 324.36
realaud 11 ( 0.00%) 763 ( 0.00%) 69.36
rtsp 1318 ( 0.01%) 1196403 ( 0.01%) 907.74
icecast 8346 ( 0.03%) 550082 ( 0.00%) 65.91
hotline 3 ( 0.00%) 186 ( 0.00%) 62.00
other 2868438 ( 10.91%) 1141879576 ( 6.53%) 398.08
udp 6875807 ( 26.16%) 3831660482 ( 21.91%) 557.27
dns 707442 ( 2.69%) 124293455 ( 0.71%) 175.69
realaud 41 ( 0.00%) 4259 ( 0.00%) 103.88
halflif 252 ( 0.00%) 34138 ( 0.00%) 135.47
starcra 218 ( 0.00%) 23711 ( 0.00%) 108.77
everque 477 ( 0.00%) 116645 ( 0.00%) 244.54
unreal 146 ( 0.00%) 20020 ( 0.00%) 137.12
quake 14 ( 0.00%) 1679 ( 0.00%) 119.93
cuseeme 4 ( 0.00%) 354 ( 0.00%) 88.50
other 6166716 ( 23.46%) 3706914874 ( 21.19%) 601.12
icmp 1101268 ( 4.19%) 187719166 ( 1.07%) 170.46
ipip 341 ( 0.00%) 42542 ( 0.00%) 124.76
ipsec 10606 ( 0.04%) 5043020 ( 0.03%) 475.49
ip6 3391161 ( 12.90%) 2073167443 ( 11.85%) 611.34
other 10148 ( 0.04%) 3325814 ( 0.02%) 327.73
frag 1948 ( 0.01%) 2015409 ( 0.01%) 1034.60
ip6 58908 ( 0.22%) 8389904 ( 0.05%) 142.42
tcp6 24495 ( 0.09%) 2495692 ( 0.01%) 101.89
http(s) 94 ( 0.00%) 63401 ( 0.00%) 674.48
http(c) 5610 ( 0.02%) 516898 ( 0.00%) 92.14
smtp 226 ( 0.00%) 99347 ( 0.00%) 439.59
ftp 1323 ( 0.01%) 133404 ( 0.00%) 100.83
ssh 3242 ( 0.01%) 269168 ( 0.00%) 83.03
dns 135 ( 0.00%) 39206 ( 0.00%) 290.41
bgp 115 ( 0.00%) 15262 ( 0.00%) 132.71
other 13750 ( 0.05%) 1359006 ( 0.01%) 98.84
udp6 27240 ( 0.10%) 4995665 ( 0.03%) 183.39
dns 26590 ( 0.10%) 4928808 ( 0.03%) 185.36
other 650 ( 0.00%) 66857 ( 0.00%) 102.86
icmp6 7098 ( 0.03%) 859436 ( 0.00%) 121.08
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 45 ( 0.00%) 35031 ( 0.00%) 778.47
tcpdump file: 201004150345.dump.gz (683.60 MB)