Traffic Trace Info
DumpFile: 201004150630.dump
FileSize: 1555.60MB
Id: 201004150630
StartTime: Thu Apr 15 06:30:00 2010
EndTime: Thu Apr 15 06:45:01 2010
TotalTime: 900.76 seconds
TotalCapSize: 1220.68MB CapLen: 96 bytes
# of packets: 21948616 (13346.92MB)
AvgRate: 124.29Mbps stddev:11.44M
IP flow (unique src/dst pair) Information
# of flows: 964293 (avg. 22.76 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 1.7% 1.6% 1.3% 1.3% 1.2% 1.0% 0.9% 0.9% 0.7%
IP address Information
# of IPv4 addresses: 517225
Top 10 bandwidth usage (bytes/total in %):
25.2% 15.6% 6.1% 5.2% 4.7% 4.4% 2.9% 2.9% 2.2% 2.1%
# of IPv6 addresses: 906
Top 10 bandwidth usage (bytes/total in %):
28.9% 12.6% 8.7% 6.9% 6.1% 6.0% 5.4% 4.1% 3.9% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004150630.pktlen.png)
detailed numbers
[ 32- 63]: 2959459
[ 64- 127]: 5981031
[ 128- 255]: 2422783
[ 256- 511]: 1484189
[ 512- 1023]: 628064
[ 1024- 2047]: 8473090
Protocol Breakdown
![[protocol breakdown chart]](201004150630.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21948616 (100.00%) 13995259010 (100.00%) 637.64
ip 21886194 ( 99.72%) 13986586146 ( 99.94%) 639.06
tcp 10888774 ( 49.61%) 7838648962 ( 56.01%) 719.88
http(s) 4532127 ( 20.65%) 6182728290 ( 44.18%) 1364.20
http(c) 2366964 ( 10.78%) 196309931 ( 1.40%) 82.94
squid 222753 ( 1.01%) 74142197 ( 0.53%) 332.84
smtp 356192 ( 1.62%) 71817827 ( 0.51%) 201.63
ftp 31221 ( 0.14%) 23461333 ( 0.17%) 751.46
pop3 6900 ( 0.03%) 3983440 ( 0.03%) 577.31
imap 1854 ( 0.01%) 508208 ( 0.00%) 274.11
telnet 5939 ( 0.03%) 3026469 ( 0.02%) 509.59
ssh 762323 ( 3.47%) 114258198 ( 0.82%) 149.88
dns 55925 ( 0.25%) 3820088 ( 0.03%) 68.31
bgp 538 ( 0.00%) 369286 ( 0.00%) 686.41
napster 4 ( 0.00%) 252 ( 0.00%) 63.00
realaud 4 ( 0.00%) 252 ( 0.00%) 63.00
rtsp 354 ( 0.00%) 103511 ( 0.00%) 292.40
icecast 8455 ( 0.04%) 561320 ( 0.00%) 66.39
hotline 2 ( 0.00%) 132 ( 0.00%) 66.00
other 2537217 ( 11.56%) 1163558108 ( 8.31%) 458.60
udp 6718137 ( 30.61%) 3792085214 ( 27.10%) 564.45
dns 655439 ( 2.99%) 115134940 ( 0.82%) 175.66
realaud 25 ( 0.00%) 2780 ( 0.00%) 111.20
halflif 161 ( 0.00%) 24006 ( 0.00%) 149.11
starcra 287 ( 0.00%) 32892 ( 0.00%) 114.61
everque 458 ( 0.00%) 91023 ( 0.00%) 198.74
unreal 183 ( 0.00%) 31400 ( 0.00%) 171.58
quake 36 ( 0.00%) 3051 ( 0.00%) 84.75
cuseeme 15 ( 0.00%) 1344 ( 0.00%) 89.60
other 6061203 ( 27.62%) 3676574475 ( 26.27%) 606.58
icmp 847663 ( 3.86%) 157303800 ( 1.12%) 185.57
ipip 329 ( 0.00%) 41622 ( 0.00%) 126.51
ipsec 1255 ( 0.01%) 343794 ( 0.00%) 273.94
ip6 3406128 ( 15.52%) 2186577208 ( 15.62%) 641.95
other 23908 ( 0.11%) 11585546 ( 0.08%) 484.59
frag 1858 ( 0.01%) 1951765 ( 0.01%) 1050.47
ip6 62422 ( 0.28%) 8672864 ( 0.06%) 138.94
tcp6 26375 ( 0.12%) 2569276 ( 0.02%) 97.41
http(s) 24 ( 0.00%) 11087 ( 0.00%) 461.96
http(c) 8295 ( 0.04%) 705391 ( 0.01%) 85.04
smtp 393 ( 0.00%) 189371 ( 0.00%) 481.86
ftp 5031 ( 0.02%) 502261 ( 0.00%) 99.83
ssh 3225 ( 0.01%) 267410 ( 0.00%) 82.92
dns 87 ( 0.00%) 20616 ( 0.00%) 236.97
bgp 122 ( 0.00%) 25248 ( 0.00%) 206.95
other 9198 ( 0.04%) 847892 ( 0.01%) 92.18
udp6 27443 ( 0.13%) 5049172 ( 0.04%) 183.99
dns 27272 ( 0.12%) 5022188 ( 0.04%) 184.15
other 171 ( 0.00%) 26984 ( 0.00%) 157.80
icmp6 8480 ( 0.04%) 970262 ( 0.01%) 114.42
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 94 ( 0.00%) 80074 ( 0.00%) 851.85
tcpdump file: 201004150630.dump.gz (553.01 MB)