Traffic Trace Info
DumpFile: 201004150645.dump
FileSize: 1571.31MB
Id: 201004150645
StartTime: Thu Apr 15 06:45:01 2010
EndTime: Thu Apr 15 07:00:00 2010
TotalTime: 899.48 seconds
TotalCapSize: 1233.85MB CapLen: 96 bytes
# of packets: 22115469 (13492.02MB)
AvgRate: 125.83Mbps stddev:11.13M
IP flow (unique src/dst pair) Information
# of flows: 985565 (avg. 22.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 2.0% 1.4% 1.3% 1.2% 1.2% 1.2% 1.1% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 517061
Top 10 bandwidth usage (bytes/total in %):
25.7% 16.8% 6.7% 5.3% 4.8% 4.5% 3.0% 2.4% 2.3% 2.0%
# of IPv6 addresses: 877
Top 10 bandwidth usage (bytes/total in %):
29.6% 13.5% 8.0% 7.0% 6.5% 6.4% 5.5% 4.6% 4.6% 4.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004150645.pktlen.png)
detailed numbers
[ 32- 63]: 2894565
[ 64- 127]: 6072590
[ 128- 255]: 2433550
[ 256- 511]: 1548622
[ 512- 1023]: 557832
[ 1024- 2047]: 8608310
Protocol Breakdown
![[protocol breakdown chart]](201004150645.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22115469 (100.00%) 14147403191 (100.00%) 639.71
ip 22058047 ( 99.74%) 14138943713 ( 99.94%) 640.99
tcp 10682200 ( 48.30%) 7629826762 ( 53.93%) 714.26
http(s) 4600206 ( 20.80%) 6249438762 ( 44.17%) 1358.51
http(c) 2386933 ( 10.79%) 205779966 ( 1.45%) 86.21
squid 214680 ( 0.97%) 68420681 ( 0.48%) 318.71
smtp 358653 ( 1.62%) 80173604 ( 0.57%) 223.54
ftp 6824 ( 0.03%) 842626 ( 0.01%) 123.48
pop3 9371 ( 0.04%) 7140010 ( 0.05%) 761.93
imap 1341 ( 0.01%) 592765 ( 0.00%) 442.03
telnet 1829 ( 0.01%) 178081 ( 0.00%) 97.37
ssh 707495 ( 3.20%) 99210849 ( 0.70%) 140.23
dns 56807 ( 0.26%) 3900000 ( 0.03%) 68.65
bgp 148 ( 0.00%) 58103 ( 0.00%) 392.59
napster 22 ( 0.00%) 1951 ( 0.00%) 88.68
realaud 144 ( 0.00%) 13168 ( 0.00%) 91.44
rtsp 295 ( 0.00%) 71698 ( 0.00%) 243.04
icecast 8476 ( 0.04%) 565348 ( 0.00%) 66.70
hotline 10 ( 0.00%) 927 ( 0.00%) 92.70
other 2328965 ( 10.53%) 913438163 ( 6.46%) 392.21
udp 6852511 ( 30.99%) 3907088409 ( 27.62%) 570.17
dns 640983 ( 2.90%) 113623867 ( 0.80%) 177.27
realaud 20 ( 0.00%) 2858 ( 0.00%) 142.90
halflif 171 ( 0.00%) 23689 ( 0.00%) 138.53
starcra 228 ( 0.00%) 25300 ( 0.00%) 110.96
everque 990 ( 0.00%) 122984 ( 0.00%) 124.23
unreal 169 ( 0.00%) 30211 ( 0.00%) 178.76
quake 31 ( 0.00%) 2753 ( 0.00%) 88.81
cuseeme 9 ( 0.00%) 777 ( 0.00%) 86.33
other 6209615 ( 28.08%) 3793081253 ( 26.81%) 610.84
icmp 779608 ( 3.53%) 140772060 ( 1.00%) 180.57
ipip 351 ( 0.00%) 41316 ( 0.00%) 117.71
ipsec 1353 ( 0.01%) 374366 ( 0.00%) 276.69
ip6 3659787 ( 16.55%) 2386712327 ( 16.87%) 652.15
other 82237 ( 0.37%) 74128473 ( 0.52%) 901.40
frag 1591 ( 0.01%) 1643117 ( 0.01%) 1032.76
ip6 57422 ( 0.26%) 8459478 ( 0.06%) 147.32
tcp6 22478 ( 0.10%) 2489960 ( 0.02%) 110.77
http(s) 70 ( 0.00%) 51839 ( 0.00%) 740.56
http(c) 4752 ( 0.02%) 427285 ( 0.00%) 89.92
smtp 672 ( 0.00%) 423377 ( 0.00%) 630.03
ftp 4940 ( 0.02%) 488042 ( 0.00%) 98.79
ssh 3235 ( 0.01%) 268610 ( 0.00%) 83.03
dns 53 ( 0.00%) 13495 ( 0.00%) 254.62
bgp 110 ( 0.00%) 15335 ( 0.00%) 139.41
other 8646 ( 0.04%) 801977 ( 0.01%) 92.76
udp6 28064 ( 0.13%) 5115194 ( 0.04%) 182.27
dns 27868 ( 0.13%) 5083064 ( 0.04%) 182.40
other 196 ( 0.00%) 32130 ( 0.00%) 163.93
icmp6 6812 ( 0.03%) 821632 ( 0.01%) 120.62
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 37 ( 0.00%) 28476 ( 0.00%) 769.62
tcpdump file: 201004150645.dump.gz (552.88 MB)