Traffic Trace Info
DumpFile: 201004150915.dump
FileSize: 1809.86MB
Id: 201004150915
StartTime: Thu Apr 15 09:15:01 2010
EndTime: Thu Apr 15 09:30:01 2010
TotalTime: 900.16 seconds
TotalCapSize: 1416.19MB CapLen: 96 bytes
# of packets: 25799165 (14673.56MB)
AvgRate: 136.77Mbps stddev:13.11M
IP flow (unique src/dst pair) Information
# of flows: 915089 (avg. 28.19 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 2.2% 2.1% 1.3% 1.2% 1.2% 1.1% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 499627
Top 10 bandwidth usage (bytes/total in %):
22.8% 11.3% 4.2% 3.8% 3.7% 3.3% 2.9% 2.8% 2.4% 2.2%
# of IPv6 addresses: 1018
Top 10 bandwidth usage (bytes/total in %):
22.6% 16.1% 8.5% 8.3% 6.5% 5.9% 5.4% 5.2% 4.8% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004150915.pktlen.png)
detailed numbers
[ 32- 63]: 4575730
[ 64- 127]: 7202373
[ 128- 255]: 2558104
[ 256- 511]: 1550372
[ 512- 1023]: 765449
[ 1024- 2047]: 9147137
Protocol Breakdown
![[protocol breakdown chart]](201004150915.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25799165 (100.00%) 15386341294 (100.00%) 596.39
ip 25737510 ( 99.76%) 15375257945 ( 99.93%) 597.39
tcp 14662334 ( 56.83%) 9520537371 ( 61.88%) 649.32
http(s) 5606255 ( 21.73%) 7429639302 ( 48.29%) 1325.24
http(c) 4537934 ( 17.59%) 553496696 ( 3.60%) 121.97
squid 216072 ( 0.84%) 82964811 ( 0.54%) 383.97
smtp 323370 ( 1.25%) 78582141 ( 0.51%) 243.01
ftp 8578 ( 0.03%) 895120 ( 0.01%) 104.35
pop3 479046 ( 1.86%) 37829834 ( 0.25%) 78.97
imap 2136 ( 0.01%) 325291 ( 0.00%) 152.29
telnet 421 ( 0.00%) 48314 ( 0.00%) 114.76
ssh 671698 ( 2.60%) 99327862 ( 0.65%) 147.88
dns 51967 ( 0.20%) 3600315 ( 0.02%) 69.28
bgp 140 ( 0.00%) 42941 ( 0.00%) 306.72
napster 32 ( 0.00%) 3276 ( 0.00%) 102.38
realaud 7 ( 0.00%) 845 ( 0.00%) 120.71
rtsp 370 ( 0.00%) 91601 ( 0.00%) 247.57
icecast 9803 ( 0.04%) 643260 ( 0.00%) 65.62
hotline 443 ( 0.00%) 407570 ( 0.00%) 920.02
other 2754058 ( 10.67%) 1232637952 ( 8.01%) 447.57
udp 7528526 ( 29.18%) 4040969912 ( 26.26%) 536.75
dns 723804 ( 2.81%) 145255088 ( 0.94%) 200.68
realaud 229 ( 0.00%) 48293 ( 0.00%) 210.89
halflif 162 ( 0.00%) 24209 ( 0.00%) 149.44
starcra 235 ( 0.00%) 28842 ( 0.00%) 122.73
everque 508 ( 0.00%) 85396 ( 0.00%) 168.10
unreal 243 ( 0.00%) 43213 ( 0.00%) 177.83
quake 40 ( 0.00%) 3466 ( 0.00%) 86.65
cuseeme 4 ( 0.00%) 374 ( 0.00%) 93.50
other 6801467 ( 26.36%) 3894720155 ( 25.31%) 572.63
icmp 473129 ( 1.83%) 55197895 ( 0.36%) 116.67
ipip 352 ( 0.00%) 44860 ( 0.00%) 127.44
ipsec 2740 ( 0.01%) 970196 ( 0.01%) 354.09
ip6 3054158 ( 11.84%) 1749866807 ( 11.37%) 572.95
other 16271 ( 0.06%) 7670904 ( 0.05%) 471.45
frag 8244 ( 0.03%) 8118904 ( 0.05%) 984.83
ip6 61655 ( 0.24%) 11083349 ( 0.07%) 179.76
tcp6 21289 ( 0.08%) 3068847 ( 0.02%) 144.15
http(s) 894 ( 0.00%) 939745 ( 0.01%) 1051.17
http(c) 4486 ( 0.02%) 465728 ( 0.00%) 103.82
smtp 360 ( 0.00%) 168331 ( 0.00%) 467.59
ftp 5378 ( 0.02%) 535498 ( 0.00%) 99.57
imap 383 ( 0.00%) 39550 ( 0.00%) 103.26
ssh 3242 ( 0.01%) 269136 ( 0.00%) 83.02
dns 84 ( 0.00%) 31271 ( 0.00%) 372.27
bgp 109 ( 0.00%) 14166 ( 0.00%) 129.96
other 6353 ( 0.02%) 605422 ( 0.00%) 95.30
udp6 33199 ( 0.13%) 6865005 ( 0.04%) 206.78
dns 32978 ( 0.13%) 6826987 ( 0.04%) 207.02
other 221 ( 0.00%) 38018 ( 0.00%) 172.03
icmp6 6795 ( 0.03%) 816408 ( 0.01%) 120.15
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 342 ( 0.00%) 329009 ( 0.00%) 962.01
tcpdump file: 201004150915.dump.gz (635.70 MB)