Traffic Trace Info
DumpFile: 201004150615.dump
FileSize: 1597.85MB
Id: 201004150615
StartTime: Thu Apr 15 06:15:00 2010
EndTime: Thu Apr 15 06:30:00 2010
TotalTime: 899.65 seconds
TotalCapSize: 1253.36MB CapLen: 96 bytes
# of packets: 22576049 (13862.57MB)
AvgRate: 129.25Mbps stddev:11.19M
IP flow (unique src/dst pair) Information
# of flows: 1013771 (avg. 22.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.6% 1.4% 1.2% 1.1% 1.0% 1.0% 1.0% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 593711
Top 10 bandwidth usage (bytes/total in %):
24.7% 14.6% 6.8% 6.1% 5.5% 5.4% 3.0% 2.5% 1.9% 1.8%
# of IPv6 addresses: 947
Top 10 bandwidth usage (bytes/total in %):
27.4% 16.5% 11.4% 6.9% 6.5% 5.8% 5.2% 4.5% 4.0% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004150615.pktlen.png)
detailed numbers
[ 32- 63]: 3263329
[ 64- 127]: 6140988
[ 128- 255]: 2206283
[ 256- 511]: 1540887
[ 512- 1023]: 575705
[ 1024- 2047]: 8848857
Protocol Breakdown
![[protocol breakdown chart]](201004150615.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22576049 (100.00%) 14535961064 (100.00%) 643.87
ip 22509995 ( 99.71%) 14526867303 ( 99.94%) 645.35
tcp 11731388 ( 51.96%) 8389533521 ( 57.72%) 715.14
http(s) 4895675 ( 21.69%) 6708616005 ( 46.15%) 1370.31
http(c) 2645294 ( 11.72%) 209125877 ( 1.44%) 79.06
squid 231321 ( 1.02%) 74802697 ( 0.51%) 323.37
smtp 381651 ( 1.69%) 61301592 ( 0.42%) 160.62
ftp 12575 ( 0.06%) 1173243 ( 0.01%) 93.30
pop3 12314 ( 0.05%) 10186794 ( 0.07%) 827.25
imap 926 ( 0.00%) 340814 ( 0.00%) 368.05
telnet 9876 ( 0.04%) 5381706 ( 0.04%) 544.93
ssh 786208 ( 3.48%) 115755388 ( 0.80%) 147.23
dns 55890 ( 0.25%) 3834819 ( 0.03%) 68.61
bgp 139 ( 0.00%) 43678 ( 0.00%) 314.23
napster 3 ( 0.00%) 186 ( 0.00%) 62.00
realaud 2 ( 0.00%) 124 ( 0.00%) 62.00
rtsp 253 ( 0.00%) 56645 ( 0.00%) 223.89
icecast 8451 ( 0.04%) 560004 ( 0.00%) 66.26
hotline 2 ( 0.00%) 132 ( 0.00%) 66.00
other 2690805 ( 11.92%) 1198353637 ( 8.24%) 445.35
udp 6776495 ( 30.02%) 3851816636 ( 26.50%) 568.41
dns 686328 ( 3.04%) 121325525 ( 0.83%) 176.77
realaud 15 ( 0.00%) 1643 ( 0.00%) 109.53
halflif 206 ( 0.00%) 30953 ( 0.00%) 150.26
starcra 282 ( 0.00%) 34542 ( 0.00%) 122.49
everque 1142 ( 0.01%) 143201 ( 0.00%) 125.39
unreal 212 ( 0.00%) 38933 ( 0.00%) 183.65
quake 44 ( 0.00%) 3793 ( 0.00%) 86.20
cuseeme 9 ( 0.00%) 757 ( 0.00%) 84.11
other 6087935 ( 26.97%) 3730060147 ( 25.66%) 612.70
icmp 821842 ( 3.64%) 143766337 ( 0.99%) 174.93
ipip 339 ( 0.00%) 40190 ( 0.00%) 118.55
ipsec 1490 ( 0.01%) 425276 ( 0.00%) 285.42
ip6 3164283 ( 14.02%) 2133055268 ( 14.67%) 674.10
other 14158 ( 0.06%) 8230075 ( 0.06%) 581.30
frag 1510 ( 0.01%) 1542058 ( 0.01%) 1021.23
ip6 66052 ( 0.29%) 9093641 ( 0.06%) 137.67
tcp6 30422 ( 0.13%) 2914830 ( 0.02%) 95.81
http(s) 43 ( 0.00%) 22839 ( 0.00%) 531.14
http(c) 8954 ( 0.04%) 756182 ( 0.01%) 84.45
smtp 427 ( 0.00%) 180317 ( 0.00%) 422.29
ftp 4463 ( 0.02%) 447925 ( 0.00%) 100.36
ssh 3241 ( 0.01%) 269082 ( 0.00%) 83.02
dns 115 ( 0.00%) 40036 ( 0.00%) 348.14
bgp 115 ( 0.00%) 15237 ( 0.00%) 132.50
other 13064 ( 0.06%) 1183212 ( 0.01%) 90.57
udp6 28404 ( 0.13%) 5288163 ( 0.04%) 186.18
dns 28247 ( 0.13%) 5264362 ( 0.04%) 186.37
other 157 ( 0.00%) 23801 ( 0.00%) 151.60
icmp6 7158 ( 0.03%) 851018 ( 0.01%) 118.89
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 38 ( 0.00%) 35550 ( 0.00%) 935.53
tcpdump file: 201004150615.dump.gz (573.09 MB)