Traffic Trace Info
DumpFile: 201004150945.dump
FileSize: 1944.47MB
Id: 201004150945
StartTime: Thu Apr 15 09:45:00 2010
EndTime: Thu Apr 15 10:00:01 2010
TotalTime: 900.60 seconds
TotalCapSize: 1522.08MB CapLen: 96 bytes
# of packets: 27680853 (16279.86MB)
AvgRate: 151.64Mbps stddev:13.15M
IP flow (unique src/dst pair) Information
# of flows: 925436 (avg. 29.91 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.9% 1.5% 1.3% 1.2% 1.0% 1.0% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 519978
Top 10 bandwidth usage (bytes/total in %):
18.5% 10.6% 4.4% 4.3% 3.9% 3.6% 3.3% 2.9% 2.5% 2.3%
# of IPv6 addresses: 992
Top 10 bandwidth usage (bytes/total in %):
26.9% 9.8% 9.5% 6.7% 6.4% 6.0% 5.0% 4.9% 4.6% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004150945.pktlen.png)
detailed numbers
[ 32- 63]: 5133175
[ 64- 127]: 7394679
[ 128- 255]: 2540727
[ 256- 511]: 1593995
[ 512- 1023]: 814659
[ 1024- 2047]: 10203618
Protocol Breakdown
![[protocol breakdown chart]](201004150945.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27680853 (100.00%) 17070675492 (100.00%) 616.70
ip 27621768 ( 99.79%) 17061358127 ( 99.95%) 617.68
tcp 16763367 ( 60.56%) 11434491145 ( 66.98%) 682.11
http(s) 6356225 ( 22.96%) 8423604672 ( 49.35%) 1325.25
http(c) 5065005 ( 18.30%) 655909615 ( 3.84%) 129.50
squid 215349 ( 0.78%) 79374451 ( 0.46%) 368.59
smtp 386867 ( 1.40%) 141918998 ( 0.83%) 366.84
ftp 15150 ( 0.05%) 1418959 ( 0.01%) 93.66
pop3 366290 ( 1.32%) 29690249 ( 0.17%) 81.06
imap 4119 ( 0.01%) 815304 ( 0.00%) 197.94
telnet 343 ( 0.00%) 42270 ( 0.00%) 123.24
ssh 681920 ( 2.46%) 101458356 ( 0.59%) 148.78
dns 53204 ( 0.19%) 3668765 ( 0.02%) 68.96
bgp 138 ( 0.00%) 43267 ( 0.00%) 313.53
realaud 24 ( 0.00%) 2954 ( 0.00%) 123.08
rtsp 13754 ( 0.05%) 897593 ( 0.01%) 65.26
icecast 14046 ( 0.05%) 897620 ( 0.01%) 63.91
hotline 8 ( 0.00%) 1284 ( 0.00%) 160.50
other 3590921 ( 12.97%) 1994746548 ( 11.69%) 555.50
udp 7313964 ( 26.42%) 3737932007 ( 21.90%) 511.07
dns 670451 ( 2.42%) 120863399 ( 0.71%) 180.27
realaud 36 ( 0.00%) 3468 ( 0.00%) 96.33
halflif 121 ( 0.00%) 18635 ( 0.00%) 154.01
starcra 148 ( 0.00%) 16947 ( 0.00%) 114.51
everque 658 ( 0.00%) 120262 ( 0.00%) 182.77
unreal 181 ( 0.00%) 33157 ( 0.00%) 183.19
quake 18 ( 0.00%) 1558 ( 0.00%) 86.56
cuseeme 3 ( 0.00%) 273 ( 0.00%) 91.00
other 6642265 ( 24.00%) 3616810816 ( 21.19%) 544.51
icmp 459838 ( 1.66%) 54772326 ( 0.32%) 119.11
ipip 346 ( 0.00%) 43344 ( 0.00%) 125.27
ipsec 2628 ( 0.01%) 640376 ( 0.00%) 243.67
ip6 3068356 ( 11.08%) 1828504538 ( 10.71%) 595.92
other 13269 ( 0.05%) 4974391 ( 0.03%) 374.89
frag 5368 ( 0.02%) 6014854 ( 0.04%) 1120.50
ip6 59085 ( 0.21%) 9317365 ( 0.05%) 157.69
tcp6 20654 ( 0.07%) 2345682 ( 0.01%) 113.57
http(s) 298 ( 0.00%) 303954 ( 0.00%) 1019.98
http(c) 4243 ( 0.02%) 386075 ( 0.00%) 90.99
smtp 425 ( 0.00%) 134953 ( 0.00%) 317.54
ftp 5354 ( 0.02%) 533889 ( 0.00%) 99.72
imap 491 ( 0.00%) 52380 ( 0.00%) 106.68
ssh 3248 ( 0.01%) 269696 ( 0.00%) 83.03
dns 176 ( 0.00%) 36662 ( 0.00%) 208.31
bgp 106 ( 0.00%) 15021 ( 0.00%) 141.71
other 6313 ( 0.02%) 613052 ( 0.00%) 97.11
udp6 31528 ( 0.11%) 6107564 ( 0.04%) 193.72
dns 31220 ( 0.11%) 6057488 ( 0.04%) 194.03
other 308 ( 0.00%) 50076 ( 0.00%) 162.58
icmp6 6838 ( 0.02%) 826702 ( 0.00%) 120.90
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 35 ( 0.00%) 33337 ( 0.00%) 952.49
tcpdump file: 201004150945.dump.gz (696.10 MB)