Traffic Trace Info
DumpFile: 201004150715.dump
FileSize: 1604.19MB
Id: 201004150715
StartTime: Thu Apr 15 07:15:01 2010
EndTime: Thu Apr 15 07:30:00 2010
TotalTime: 899.81 seconds
TotalCapSize: 1261.97MB CapLen: 96 bytes
# of packets: 22426678 (14100.10MB)
AvgRate: 131.44Mbps stddev:11.73M
IP flow (unique src/dst pair) Information
# of flows: 811303 (avg. 27.64 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 2.4% 2.1% 2.0% 1.6% 1.2% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 448239
Top 10 bandwidth usage (bytes/total in %):
24.6% 15.1% 4.9% 4.7% 4.5% 4.1% 3.0% 3.0% 2.9% 2.8%
# of IPv6 addresses: 898
Top 10 bandwidth usage (bytes/total in %):
30.5% 11.2% 7.4% 7.3% 6.4% 5.8% 5.5% 4.2% 4.0% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004150715.pktlen.png)
detailed numbers
[ 32- 63]: 2794555
[ 64- 127]: 6249614
[ 128- 255]: 2248935
[ 256- 511]: 1535698
[ 512- 1023]: 576726
[ 1024- 2047]: 9021150
Protocol Breakdown
![[protocol breakdown chart]](201004150715.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22426678 (100.00%) 14785022648 (100.00%) 659.26
ip 22372284 ( 99.76%) 14776953926 ( 99.95%) 660.50
tcp 11476322 ( 51.17%) 8505285057 ( 57.53%) 741.12
http(s) 5052468 ( 22.53%) 6935490350 ( 46.91%) 1372.69
http(c) 2859064 ( 12.75%) 241756871 ( 1.64%) 84.56
squid 268171 ( 1.20%) 105548620 ( 0.71%) 393.59
smtp 353012 ( 1.57%) 63227324 ( 0.43%) 179.11
ftp 4127 ( 0.02%) 423135 ( 0.00%) 102.53
pop3 8429 ( 0.04%) 5456640 ( 0.04%) 647.37
imap 2795 ( 0.01%) 2492625 ( 0.02%) 891.82
telnet 1059 ( 0.00%) 87956 ( 0.00%) 83.06
ssh 596974 ( 2.66%) 88654907 ( 0.60%) 148.51
dns 54497 ( 0.24%) 3780663 ( 0.03%) 69.37
bgp 147 ( 0.00%) 49393 ( 0.00%) 336.01
napster 346 ( 0.00%) 188101 ( 0.00%) 543.64
rtsp 232 ( 0.00%) 52335 ( 0.00%) 225.58
icecast 8397 ( 0.04%) 558453 ( 0.00%) 66.51
hotline 18 ( 0.00%) 1589 ( 0.00%) 88.28
other 2266581 ( 10.11%) 1057515349 ( 7.15%) 466.57
udp 6596330 ( 29.41%) 3868143249 ( 26.16%) 586.41
dns 625124 ( 2.79%) 112113915 ( 0.76%) 179.35
realaud 11 ( 0.00%) 1371 ( 0.00%) 124.64
halflif 174 ( 0.00%) 28024 ( 0.00%) 161.06
starcra 266 ( 0.00%) 32153 ( 0.00%) 120.88
everque 498 ( 0.00%) 94265 ( 0.00%) 189.29
unreal 202 ( 0.00%) 37311 ( 0.00%) 184.71
quake 41 ( 0.00%) 3539 ( 0.00%) 86.32
cuseeme 9 ( 0.00%) 753 ( 0.00%) 83.67
other 5969634 ( 26.62%) 3755624141 ( 25.40%) 629.12
icmp 787181 ( 3.51%) 140498863 ( 0.95%) 178.48
ipip 356 ( 0.00%) 42828 ( 0.00%) 120.30
ipsec 3889 ( 0.02%) 733354 ( 0.00%) 188.57
ip6 3479130 ( 15.51%) 2239480274 ( 15.15%) 643.69
other 29076 ( 0.13%) 22770301 ( 0.15%) 783.13
frag 1668 ( 0.01%) 1711423 ( 0.01%) 1026.03
ip6 54394 ( 0.24%) 8068722 ( 0.05%) 148.34
tcp6 19488 ( 0.09%) 2127228 ( 0.01%) 109.16
http(s) 46 ( 0.00%) 27182 ( 0.00%) 590.91
http(c) 4012 ( 0.02%) 363226 ( 0.00%) 90.53
smtp 529 ( 0.00%) 218292 ( 0.00%) 412.65
ftp 5282 ( 0.02%) 524226 ( 0.00%) 99.25
ssh 3241 ( 0.01%) 269082 ( 0.00%) 83.02
dns 81 ( 0.00%) 21602 ( 0.00%) 266.69
bgp 113 ( 0.00%) 15190 ( 0.00%) 134.42
napster 4 ( 0.00%) 356 ( 0.00%) 89.00
other 6180 ( 0.03%) 688072 ( 0.00%) 111.34
udp6 27666 ( 0.12%) 5026539 ( 0.03%) 181.69
dns 27050 ( 0.12%) 4959130 ( 0.03%) 183.33
other 616 ( 0.00%) 67409 ( 0.00%) 109.43
icmp6 7154 ( 0.03%) 860744 ( 0.01%) 120.32
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 56 ( 0.00%) 50131 ( 0.00%) 895.20
tcpdump file: 201004150715.dump.gz (557.78 MB)