Traffic Trace Info
DumpFile: 201004150700.dump
FileSize: 1554.43MB
Id: 201004150700
StartTime: Thu Apr 15 07:00:00 2010
EndTime: Thu Apr 15 07:15:01 2010
TotalTime: 900.38 seconds
TotalCapSize: 1220.01MB CapLen: 96 bytes
# of packets: 21916056 (13597.74MB)
AvgRate: 126.69Mbps stddev:10.11M
IP flow (unique src/dst pair) Information
# of flows: 893972 (avg. 24.52 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.8% 1.4% 1.3% 1.3% 1.1% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 517648
Top 10 bandwidth usage (bytes/total in %):
26.6% 15.8% 6.2% 5.6% 5.4% 4.9% 2.6% 2.4% 1.9% 1.8%
# of IPv6 addresses: 907
Top 10 bandwidth usage (bytes/total in %):
30.8% 11.3% 7.9% 7.3% 6.6% 5.8% 5.6% 4.3% 3.5% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004150700.pktlen.png)
detailed numbers
[ 32- 63]: 2948364
[ 64- 127]: 5873175
[ 128- 255]: 2340573
[ 256- 511]: 1478099
[ 512- 1023]: 569305
[ 1024- 2047]: 8706540
Protocol Breakdown
![[protocol breakdown chart]](201004150700.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21916056 (100.00%) 14258260691 (100.00%) 650.59
ip 21861502 ( 99.75%) 14250141157 ( 99.94%) 651.84
tcp 10672165 ( 48.70%) 7780125393 ( 54.57%) 729.01
http(s) 4835790 ( 22.07%) 6521018463 ( 45.74%) 1348.49
http(c) 2551856 ( 11.64%) 212955152 ( 1.49%) 83.45
squid 225900 ( 1.03%) 68147951 ( 0.48%) 301.67
smtp 322986 ( 1.47%) 65007524 ( 0.46%) 201.27
ftp 7783 ( 0.04%) 829067 ( 0.01%) 106.52
pop3 15581 ( 0.07%) 7540138 ( 0.05%) 483.93
imap 1662 ( 0.01%) 825690 ( 0.01%) 496.81
telnet 1410 ( 0.01%) 126177 ( 0.00%) 89.49
ssh 617093 ( 2.82%) 91611033 ( 0.64%) 148.46
dns 53584 ( 0.24%) 3696092 ( 0.03%) 68.98
bgp 149 ( 0.00%) 61196 ( 0.00%) 410.71
realaud 15 ( 0.00%) 977 ( 0.00%) 65.13
rtsp 228 ( 0.00%) 50460 ( 0.00%) 221.32
icecast 8459 ( 0.04%) 563767 ( 0.00%) 66.65
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 2029665 ( 9.26%) 807691466 ( 5.66%) 397.94
udp 6789200 ( 30.98%) 4029886820 ( 28.26%) 593.57
dns 627439 ( 2.86%) 112188286 ( 0.79%) 178.80
realaud 27 ( 0.00%) 2824 ( 0.00%) 104.59
halflif 159 ( 0.00%) 24475 ( 0.00%) 153.93
starcra 197 ( 0.00%) 22336 ( 0.00%) 113.38
everque 462 ( 0.00%) 88177 ( 0.00%) 190.86
unreal 207 ( 0.00%) 37831 ( 0.00%) 182.76
quake 24 ( 0.00%) 2159 ( 0.00%) 89.96
cuseeme 8 ( 0.00%) 720 ( 0.00%) 90.00
other 6160361 ( 28.11%) 3917368276 ( 27.47%) 635.90
icmp 825013 ( 3.76%) 155925554 ( 1.09%) 189.00
ipip 346 ( 0.00%) 42440 ( 0.00%) 122.66
ipsec 1215 ( 0.01%) 340350 ( 0.00%) 280.12
ip6 3539298 ( 16.15%) 2258731415 ( 15.84%) 638.19
other 34265 ( 0.16%) 25089185 ( 0.18%) 732.21
frag 1466 ( 0.01%) 1497272 ( 0.01%) 1021.33
ip6 54554 ( 0.25%) 8119534 ( 0.06%) 148.83
tcp6 19741 ( 0.09%) 2176145 ( 0.02%) 110.23
http(s) 28 ( 0.00%) 15907 ( 0.00%) 568.11
http(c) 4261 ( 0.02%) 405972 ( 0.00%) 95.28
smtp 517 ( 0.00%) 258557 ( 0.00%) 500.11
ftp 5363 ( 0.02%) 533544 ( 0.00%) 99.49
ssh 3224 ( 0.01%) 267324 ( 0.00%) 82.92
dns 173 ( 0.00%) 43915 ( 0.00%) 253.84
bgp 124 ( 0.00%) 19019 ( 0.00%) 153.38
other 6051 ( 0.03%) 631907 ( 0.00%) 104.43
udp6 27888 ( 0.13%) 5076444 ( 0.04%) 182.03
dns 27523 ( 0.13%) 5035556 ( 0.04%) 182.96
other 365 ( 0.00%) 40888 ( 0.00%) 112.02
icmp6 6850 ( 0.03%) 826567 ( 0.01%) 120.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 45 ( 0.00%) 36298 ( 0.00%) 806.62
tcpdump file: 201004150700.dump.gz (544.91 MB)