Traffic Trace Info
DumpFile: 201004150545.dump
FileSize: 1713.41MB
Id: 201004150545
StartTime: Thu Apr 15 05:45:01 2010
EndTime: Thu Apr 15 06:00:01 2010
TotalTime: 899.93 seconds
TotalCapSize: 1342.87MB CapLen: 96 bytes
# of packets: 24283167 (15171.74MB)
AvgRate: 141.41Mbps stddev:12.68M
IP flow (unique src/dst pair) Information
# of flows: 1135951 (avg. 21.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.5% 1.3% 1.2% 1.1% 1.0% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 591602
Top 10 bandwidth usage (bytes/total in %):
22.5% 12.1% 7.6% 6.7% 5.9% 5.6% 2.6% 2.2% 2.2% 1.9%
# of IPv6 addresses: 886
Top 10 bandwidth usage (bytes/total in %):
28.0% 18.1% 12.9% 6.7% 5.9% 5.4% 5.2% 4.6% 4.4% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004150545.pktlen.png)
detailed numbers
[ 32- 63]: 3457077
[ 64- 127]: 6701247
[ 128- 255]: 2246343
[ 256- 511]: 1528471
[ 512- 1023]: 656091
[ 1024- 2047]: 9693938
Protocol Breakdown
![[protocol breakdown chart]](201004150545.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24283167 (100.00%) 15908721463 (100.00%) 655.13
ip 24219663 ( 99.74%) 15899814000 ( 99.94%) 656.48
tcp 13134443 ( 54.09%) 9678680247 ( 60.84%) 736.89
http(s) 5890299 ( 24.26%) 8152921718 ( 51.25%) 1384.13
http(c) 3117948 ( 12.84%) 244418367 ( 1.54%) 78.39
squid 224989 ( 0.93%) 76962227 ( 0.48%) 342.07
smtp 436796 ( 1.80%) 79504288 ( 0.50%) 182.02
ftp 7822 ( 0.03%) 860656 ( 0.01%) 110.03
pop3 7454 ( 0.03%) 4227965 ( 0.03%) 567.21
imap 650 ( 0.00%) 111609 ( 0.00%) 171.71
telnet 1997 ( 0.01%) 147039 ( 0.00%) 73.63
ssh 744535 ( 3.07%) 100652173 ( 0.63%) 135.19
dns 59001 ( 0.24%) 4168785 ( 0.03%) 70.66
bgp 487 ( 0.00%) 320655 ( 0.00%) 658.43
napster 47 ( 0.00%) 6220 ( 0.00%) 132.34
realaud 3 ( 0.00%) 184 ( 0.00%) 61.33
rtsp 290 ( 0.00%) 75639 ( 0.00%) 260.82
icecast 8485 ( 0.03%) 561675 ( 0.00%) 66.20
other 2633633 ( 10.85%) 1013739943 ( 6.37%) 384.92
udp 7216613 ( 29.72%) 4129148239 ( 25.96%) 572.17
dns 686122 ( 2.83%) 119788255 ( 0.75%) 174.59
realaud 5976 ( 0.02%) 3680717 ( 0.02%) 615.92
halflif 144 ( 0.00%) 22381 ( 0.00%) 155.42
starcra 222 ( 0.00%) 22798 ( 0.00%) 102.69
everque 436 ( 0.00%) 76900 ( 0.00%) 176.38
unreal 189 ( 0.00%) 31549 ( 0.00%) 166.93
quake 37 ( 0.00%) 3222 ( 0.00%) 87.08
cuseeme 10 ( 0.00%) 926 ( 0.00%) 92.60
other 6522865 ( 26.86%) 4005245488 ( 25.18%) 614.03
icmp 863412 ( 3.56%) 146156163 ( 0.92%) 169.28
ipip 316 ( 0.00%) 36808 ( 0.00%) 116.48
ipsec 2377 ( 0.01%) 676398 ( 0.00%) 284.56
ip6 2989893 ( 12.31%) 1938731210 ( 12.19%) 648.43
other 12609 ( 0.05%) 6384935 ( 0.04%) 506.38
frag 2530 ( 0.01%) 2510810 ( 0.02%) 992.42
ip6 63504 ( 0.26%) 8907463 ( 0.06%) 140.27
tcp6 27203 ( 0.11%) 2656750 ( 0.02%) 97.66
http(s) 29 ( 0.00%) 15982 ( 0.00%) 551.10
http(c) 4578 ( 0.02%) 418575 ( 0.00%) 91.43
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 258 ( 0.00%) 138094 ( 0.00%) 535.25
ftp 4100 ( 0.02%) 419532 ( 0.00%) 102.32
ssh 3239 ( 0.01%) 268922 ( 0.00%) 83.03
dns 115 ( 0.00%) 41240 ( 0.00%) 358.61
bgp 116 ( 0.00%) 16356 ( 0.00%) 141.00
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 14765 ( 0.06%) 1337827 ( 0.01%) 90.61
udp6 29363 ( 0.12%) 5361362 ( 0.03%) 182.59
dns 29165 ( 0.12%) 5326827 ( 0.03%) 182.64
other 198 ( 0.00%) 34535 ( 0.00%) 174.42
icmp6 6836 ( 0.03%) 820288 ( 0.01%) 120.00
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 71 ( 0.00%) 64847 ( 0.00%) 913.34
tcpdump file: 201004150545.dump.gz (616.09 MB)