Traffic Trace Info
DumpFile: 201004150500.dump
FileSize: 1834.03MB
Id: 201004150500
StartTime: Thu Apr 15 05:00:01 2010
EndTime: Thu Apr 15 05:15:01 2010
TotalTime: 899.41 seconds
TotalCapSize: 1437.75MB CapLen: 96 bytes
# of packets: 25969636 (16362.59MB)
AvgRate: 152.60Mbps stddev:14.25M
IP flow (unique src/dst pair) Information
# of flows: 1144727 (avg. 22.69 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.8% 1.6% 1.3% 1.3% 0.9% 0.9% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 619109
Top 10 bandwidth usage (bytes/total in %):
21.4% 9.7% 8.7% 6.0% 5.6% 5.2% 3.7% 3.3% 2.4% 2.3%
# of IPv6 addresses: 1003
Top 10 bandwidth usage (bytes/total in %):
25.6% 16.1% 11.4% 8.1% 6.1% 5.6% 4.8% 4.4% 4.4% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004150500.pktlen.png)
detailed numbers
[ 32- 63]: 3788440
[ 64- 127]: 7317419
[ 128- 255]: 2263481
[ 256- 511]: 1438623
[ 512- 1023]: 641001
[ 1024- 2047]: 10520672
Protocol Breakdown
![[protocol breakdown chart]](201004150500.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25969636 (100.00%) 17157414948 (100.00%) 660.67
ip 25902566 ( 99.74%) 17147651549 ( 99.94%) 662.01
tcp 15025230 ( 57.86%) 11102471042 ( 64.71%) 738.92
http(s) 6237364 ( 24.02%) 8642401174 ( 50.37%) 1385.59
http(c) 3394637 ( 13.07%) 263912123 ( 1.54%) 77.74
squid 284407 ( 1.10%) 105072680 ( 0.61%) 369.44
smtp 465677 ( 1.79%) 88826783 ( 0.52%) 190.75
ftp 7913 ( 0.03%) 1151389 ( 0.01%) 145.51
pop3 7272 ( 0.03%) 3796899 ( 0.02%) 522.13
imap 635 ( 0.00%) 119259 ( 0.00%) 187.81
telnet 2872 ( 0.01%) 221695 ( 0.00%) 77.19
ssh 985967 ( 3.80%) 143538141 ( 0.84%) 145.58
dns 54248 ( 0.21%) 3734067 ( 0.02%) 68.83
bgp 157 ( 0.00%) 54303 ( 0.00%) 345.88
napster 143 ( 0.00%) 10390 ( 0.00%) 72.66
rtsp 426 ( 0.00%) 109147 ( 0.00%) 256.21
icecast 8460 ( 0.03%) 558974 ( 0.00%) 66.07
hotline 33 ( 0.00%) 3396 ( 0.00%) 102.91
other 3574994 ( 13.77%) 1848959122 ( 10.78%) 517.19
udp 7076018 ( 27.25%) 4179535362 ( 24.36%) 590.66
dns 798136 ( 3.07%) 135437763 ( 0.79%) 169.69
realaud 24 ( 0.00%) 2282 ( 0.00%) 95.08
halflif 170 ( 0.00%) 25230 ( 0.00%) 148.41
starcra 294 ( 0.00%) 31402 ( 0.00%) 106.81
everque 483 ( 0.00%) 79552 ( 0.00%) 164.70
unreal 209 ( 0.00%) 37236 ( 0.00%) 178.16
quake 47 ( 0.00%) 3847 ( 0.00%) 81.85
cuseeme 4 ( 0.00%) 413 ( 0.00%) 103.25
other 6276268 ( 24.17%) 4043712831 ( 23.57%) 644.29
icmp 1012642 ( 3.90%) 182835045 ( 1.07%) 180.55
ipip 360 ( 0.00%) 44134 ( 0.00%) 122.59
ipsec 1973 ( 0.01%) 541850 ( 0.00%) 274.63
ip6 2779425 ( 10.70%) 1681147801 ( 9.80%) 604.85
other 6918 ( 0.03%) 1076315 ( 0.01%) 155.58
frag 2689 ( 0.01%) 3188949 ( 0.02%) 1185.92
ip6 67070 ( 0.26%) 9763399 ( 0.06%) 145.57
tcp6 27749 ( 0.11%) 2628027 ( 0.02%) 94.71
http(s) 41 ( 0.00%) 18295 ( 0.00%) 446.22
http(c) 5546 ( 0.02%) 500864 ( 0.00%) 90.31
smtp 159 ( 0.00%) 80418 ( 0.00%) 505.77
ftp 4195 ( 0.02%) 422772 ( 0.00%) 100.78
ssh 3218 ( 0.01%) 266828 ( 0.00%) 82.92
dns 91 ( 0.00%) 24475 ( 0.00%) 268.96
bgp 140 ( 0.00%) 23988 ( 0.00%) 171.34
other 14359 ( 0.06%) 1290387 ( 0.01%) 89.87
udp6 32088 ( 0.12%) 6204248 ( 0.04%) 193.35
dns 31876 ( 0.12%) 6169192 ( 0.04%) 193.54
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
other 211 ( 0.00%) 34949 ( 0.00%) 165.64
icmp6 7120 ( 0.03%) 860742 ( 0.01%) 120.89
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 83 ( 0.00%) 66302 ( 0.00%) 798.82
tcpdump file: 201004150500.dump.gz (666.87 MB)