Traffic Trace Info
DumpFile: 201004150515.dump
FileSize: 1733.48MB
Id: 201004150515
StartTime: Thu Apr 15 05:15:01 2010
EndTime: Thu Apr 15 05:30:01 2010
TotalTime: 900.07 seconds
TotalCapSize: 1358.18MB CapLen: 96 bytes
# of packets: 24594612 (15193.93MB)
AvgRate: 141.61Mbps stddev:11.01M
IP flow (unique src/dst pair) Information
# of flows: 1296841 (avg. 18.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.8% 1.4% 1.0% 1.0% 0.9% 0.9% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 751730
Top 10 bandwidth usage (bytes/total in %):
20.8% 10.7% 8.7% 7.4% 6.9% 6.1% 2.8% 2.5% 2.3% 2.1%
# of IPv6 addresses: 992
Top 10 bandwidth usage (bytes/total in %):
26.0% 15.2% 10.5% 7.2% 6.2% 5.6% 4.9% 4.5% 4.4% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004150515.pktlen.png)
detailed numbers
[ 32- 63]: 3890026
[ 64- 127]: 6813212
[ 128- 255]: 2143640
[ 256- 511]: 1416419
[ 512- 1023]: 629028
[ 1024- 2047]: 9702287
Protocol Breakdown
![[protocol breakdown chart]](201004150515.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24594612 (100.00%) 15931992369 (100.00%) 647.78
ip 24529215 ( 99.73%) 15922409264 ( 99.94%) 649.12
tcp 14061456 ( 57.17%) 10250508978 ( 64.34%) 728.98
http(s) 6156316 ( 25.03%) 8559880921 ( 53.73%) 1390.42
http(c) 3264618 ( 13.27%) 250735246 ( 1.57%) 76.80
squid 288231 ( 1.17%) 106053150 ( 0.67%) 367.94
smtp 496775 ( 2.02%) 103515054 ( 0.65%) 208.37
ftp 5718 ( 0.02%) 644055 ( 0.00%) 112.64
pop3 7652 ( 0.03%) 4590871 ( 0.03%) 599.96
imap 671 ( 0.00%) 127504 ( 0.00%) 190.02
telnet 2272 ( 0.01%) 164672 ( 0.00%) 72.48
ssh 854993 ( 3.48%) 125056111 ( 0.78%) 146.27
dns 56192 ( 0.23%) 3833294 ( 0.02%) 68.22
bgp 150 ( 0.00%) 62346 ( 0.00%) 415.64
napster 3 ( 0.00%) 186 ( 0.00%) 62.00
rtsp 328 ( 0.00%) 88313 ( 0.00%) 269.25
icecast 8635 ( 0.04%) 570557 ( 0.00%) 66.07
other 2918899 ( 11.87%) 1095186518 ( 6.87%) 375.21
udp 6721483 ( 27.33%) 3783379038 ( 23.75%) 562.88
dns 775420 ( 3.15%) 132511088 ( 0.83%) 170.89
rip 1 ( 0.00%) 109 ( 0.00%) 109.00
realaud 48 ( 0.00%) 4347 ( 0.00%) 90.56
halflif 180 ( 0.00%) 31133 ( 0.00%) 172.96
starcra 239 ( 0.00%) 31269 ( 0.00%) 130.83
everque 509 ( 0.00%) 90561 ( 0.00%) 177.92
unreal 230 ( 0.00%) 40209 ( 0.00%) 174.82
quake 49 ( 0.00%) 4553 ( 0.00%) 92.92
cuseeme 7 ( 0.00%) 688 ( 0.00%) 98.29
other 5944127 ( 24.17%) 3650419239 ( 22.91%) 614.12
icmp 915362 ( 3.72%) 164598166 ( 1.03%) 179.82
ipip 324 ( 0.00%) 37092 ( 0.00%) 114.48
ipsec 5589 ( 0.02%) 2709018 ( 0.02%) 484.71
ip6 2811968 ( 11.43%) 1715275358 ( 10.77%) 609.99
other 13033 ( 0.05%) 5901614 ( 0.04%) 452.82
frag 2357 ( 0.01%) 2259959 ( 0.01%) 958.83
ip6 65397 ( 0.27%) 9583105 ( 0.06%) 146.54
tcp6 26520 ( 0.11%) 2583487 ( 0.02%) 97.42
http(s) 69 ( 0.00%) 39805 ( 0.00%) 576.88
http(c) 5394 ( 0.02%) 487085 ( 0.00%) 90.30
smtp 308 ( 0.00%) 116352 ( 0.00%) 377.77
ftp 4300 ( 0.02%) 438096 ( 0.00%) 101.88
ssh 3239 ( 0.01%) 268934 ( 0.00%) 83.03
dns 109 ( 0.00%) 33662 ( 0.00%) 308.83
bgp 115 ( 0.00%) 19628 ( 0.00%) 170.68
other 12986 ( 0.05%) 1179925 ( 0.01%) 90.86
udp6 31811 ( 0.13%) 6071841 ( 0.04%) 190.87
dns 31617 ( 0.13%) 6041604 ( 0.04%) 191.09
other 194 ( 0.00%) 30237 ( 0.00%) 155.86
icmp6 6931 ( 0.03%) 828813 ( 0.01%) 119.58
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 105 ( 0.00%) 94884 ( 0.00%) 903.66
tcpdump file: 201004150515.dump.gz (631.52 MB)