Traffic Trace Info
DumpFile: 201004151000.dump
FileSize: 2023.70MB
Id: 201004151000
StartTime: Thu Apr 15 10:00:01 2010
EndTime: Thu Apr 15 10:15:00 2010
TotalTime: 899.51 seconds
TotalCapSize: 1585.26MB CapLen: 96 bytes
# of packets: 28733062 (16993.81MB)
AvgRate: 158.48Mbps stddev:15.37M
IP flow (unique src/dst pair) Information
# of flows: 1014580 (avg. 28.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 1.9% 1.7% 1.0% 0.9% 0.8% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 573020
Top 10 bandwidth usage (bytes/total in %):
17.8% 11.7% 3.7% 3.4% 3.3% 3.0% 2.7% 2.3% 2.2% 2.0%
# of IPv6 addresses: 1013
Top 10 bandwidth usage (bytes/total in %):
24.1% 11.1% 8.8% 6.2% 6.2% 6.1% 5.9% 5.7% 4.9% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004151000.pktlen.png)
detailed numbers
[ 32- 63]: 4884033
[ 64- 127]: 7937568
[ 128- 255]: 2666865
[ 256- 511]: 1635649
[ 512- 1023]: 850262
[ 1024- 2047]: 10758685
Protocol Breakdown
![[protocol breakdown chart]](201004151000.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28733062 (100.00%) 17819298288 (100.00%) 620.17
ip 28671224 ( 99.78%) 17808913175 ( 99.94%) 621.14
tcp 16723162 ( 58.20%) 11581155938 ( 64.99%) 692.52
http(s) 6696353 ( 23.31%) 8776193144 ( 49.25%) 1310.59
http(c) 5414208 ( 18.84%) 724912652 ( 4.07%) 133.89
squid 231545 ( 0.81%) 92059657 ( 0.52%) 397.59
smtp 357488 ( 1.24%) 97166983 ( 0.55%) 271.80
ftp 19852 ( 0.07%) 2375762 ( 0.01%) 119.67
pop3 36260 ( 0.13%) 16613400 ( 0.09%) 458.17
imap 8155 ( 0.03%) 4058690 ( 0.02%) 497.69
telnet 722 ( 0.00%) 82445 ( 0.00%) 114.19
ssh 683068 ( 2.38%) 101745141 ( 0.57%) 148.95
dns 51764 ( 0.18%) 3547693 ( 0.02%) 68.54
bgp 155 ( 0.00%) 47447 ( 0.00%) 306.11
napster 24 ( 0.00%) 4399 ( 0.00%) 183.29
realaud 97 ( 0.00%) 8711 ( 0.00%) 89.80
rtsp 75527 ( 0.26%) 4613734 ( 0.03%) 61.09
icecast 14122 ( 0.05%) 905978 ( 0.01%) 64.15
other 3133818 ( 10.91%) 1756819862 ( 9.86%) 560.60
udp 7905148 ( 27.51%) 4047176585 ( 22.71%) 511.97
dns 720577 ( 2.51%) 140806059 ( 0.79%) 195.41
realaud 25 ( 0.00%) 3200 ( 0.00%) 128.00
halflif 156 ( 0.00%) 31493 ( 0.00%) 201.88
starcra 208 ( 0.00%) 18822 ( 0.00%) 90.49
everque 746 ( 0.00%) 136870 ( 0.00%) 183.47
unreal 218 ( 0.00%) 36424 ( 0.00%) 167.08
quake 15 ( 0.00%) 1444 ( 0.00%) 96.27
cuseeme 1 ( 0.00%) 99 ( 0.00%) 99.00
other 7183142 ( 25.00%) 3906116217 ( 21.92%) 543.79
icmp 594377 ( 2.07%) 77396960 ( 0.43%) 130.22
ipip 326 ( 0.00%) 41834 ( 0.00%) 128.33
ipsec 6206 ( 0.02%) 3012236 ( 0.02%) 485.37
ip6 3421754 ( 11.91%) 2090156705 ( 11.73%) 610.84
other 20251 ( 0.07%) 9972917 ( 0.06%) 492.47
frag 16436 ( 0.06%) 18450523 ( 0.10%) 1122.57
ip6 61838 ( 0.22%) 10385113 ( 0.06%) 167.94
tcp6 20896 ( 0.07%) 2916469 ( 0.02%) 139.57
http(s) 587 ( 0.00%) 781699 ( 0.00%) 1331.68
http(c) 4071 ( 0.01%) 369321 ( 0.00%) 90.72
smtp 400 ( 0.00%) 175858 ( 0.00%) 439.64
ftp 5307 ( 0.02%) 531259 ( 0.00%) 100.11
imap 431 ( 0.00%) 50246 ( 0.00%) 116.58
ssh 3328 ( 0.01%) 292276 ( 0.00%) 87.82
dns 105 ( 0.00%) 26240 ( 0.00%) 249.90
bgp 117 ( 0.00%) 18568 ( 0.00%) 158.70
other 6550 ( 0.02%) 671002 ( 0.00%) 102.44
udp6 33838 ( 0.12%) 6552140 ( 0.04%) 193.63
dns 33370 ( 0.12%) 6472305 ( 0.04%) 193.96
other 468 ( 0.00%) 79835 ( 0.00%) 170.59
icmp6 7002 ( 0.02%) 852958 ( 0.00%) 121.82
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 72 ( 0.00%) 59466 ( 0.00%) 825.92
tcpdump file: 201004151000.dump.gz (719.71 MB)