Traffic Trace Info
DumpFile: 201004151145.dump
FileSize: 2183.47MB
Id: 201004151145
StartTime: Thu Apr 15 11:45:00 2010
EndTime: Thu Apr 15 12:00:01 2010
TotalTime: 900.34 seconds
TotalCapSize: 1708.70MB CapLen: 96 bytes
# of packets: 31110330 (19136.01MB)
AvgRate: 178.29Mbps stddev:19.57M
IP flow (unique src/dst pair) Information
# of flows: 976019 (avg. 31.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.7% 1.5% 1.3% 1.2% 1.2% 1.2% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 531342
Top 10 bandwidth usage (bytes/total in %):
16.6% 9.8% 8.3% 6.9% 3.3% 3.3% 3.2% 2.8% 2.6% 2.4%
# of IPv6 addresses: 1041
Top 10 bandwidth usage (bytes/total in %):
23.2% 8.5% 7.2% 5.8% 5.8% 5.5% 4.7% 4.7% 4.4% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004151145.pktlen.png)
detailed numbers
[ 32- 63]: 5229437
[ 64- 127]: 8434654
[ 128- 255]: 2647316
[ 256- 511]: 1860396
[ 512- 1023]: 861829
[ 1024- 2047]: 12076698
Protocol Breakdown
![[protocol breakdown chart]](201004151145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31110330 (100.00%) 20065556648 (100.00%) 644.98
ip 31049136 ( 99.80%) 20054815484 ( 99.95%) 645.91
tcp 18546927 ( 59.62%) 13517863198 ( 67.37%) 728.85
http(s) 7161841 ( 23.02%) 9451889036 ( 47.11%) 1319.76
http(c) 5412507 ( 17.40%) 645026639 ( 3.21%) 119.17
squid 246941 ( 0.79%) 95333182 ( 0.48%) 386.06
smtp 356943 ( 1.15%) 104686643 ( 0.52%) 293.29
ftp 10799 ( 0.03%) 1050671 ( 0.01%) 97.29
pop3 27681 ( 0.09%) 9621261 ( 0.05%) 347.58
imap 4008 ( 0.01%) 1207892 ( 0.01%) 301.37
telnet 1068 ( 0.00%) 89256 ( 0.00%) 83.57
ssh 697628 ( 2.24%) 106093776 ( 0.53%) 152.08
dns 57815 ( 0.19%) 4008277 ( 0.02%) 69.33
bgp 159 ( 0.00%) 53451 ( 0.00%) 336.17
napster 32 ( 0.00%) 2107 ( 0.00%) 65.84
realaud 11 ( 0.00%) 2379 ( 0.00%) 216.27
rtsp 62888 ( 0.20%) 31114424 ( 0.16%) 494.76
icecast 23763 ( 0.08%) 9960377 ( 0.05%) 419.15
hotline 25 ( 0.00%) 1950 ( 0.00%) 78.00
other 4482817 ( 14.41%) 3057721817 ( 15.24%) 682.10
udp 8662083 ( 27.84%) 4477656824 ( 22.32%) 516.93
dns 688925 ( 2.21%) 117301504 ( 0.58%) 170.27
realaud 99 ( 0.00%) 9866 ( 0.00%) 99.66
halflif 158 ( 0.00%) 21839 ( 0.00%) 138.22
starcra 144 ( 0.00%) 14968 ( 0.00%) 103.94
everque 692 ( 0.00%) 125705 ( 0.00%) 181.65
unreal 104 ( 0.00%) 18091 ( 0.00%) 173.95
quake 22 ( 0.00%) 2640 ( 0.00%) 120.00
cuseeme 6 ( 0.00%) 742 ( 0.00%) 123.67
other 7971797 ( 25.62%) 4360015168 ( 21.73%) 546.93
icmp 588585 ( 1.89%) 85489594 ( 0.43%) 145.25
ipip 317 ( 0.00%) 39130 ( 0.00%) 123.44
ipsec 1613 ( 0.01%) 413630 ( 0.00%) 256.44
ip6 3229860 ( 10.38%) 1970562415 ( 9.82%) 610.11
other 19751 ( 0.06%) 2790693 ( 0.01%) 141.29
frag 1514 ( 0.00%) 1876144 ( 0.01%) 1239.20
ip6 61194 ( 0.20%) 10741164 ( 0.05%) 175.53
tcp6 22017 ( 0.07%) 3212846 ( 0.02%) 145.93
http(s) 272 ( 0.00%) 263997 ( 0.00%) 970.58
http(c) 3841 ( 0.01%) 347654 ( 0.00%) 90.51
smtp 675 ( 0.00%) 336720 ( 0.00%) 498.84
ftp 5306 ( 0.02%) 531183 ( 0.00%) 100.11
imap 356 ( 0.00%) 40886 ( 0.00%) 114.85
ssh 5032 ( 0.02%) 986992 ( 0.00%) 196.14
dns 153 ( 0.00%) 53845 ( 0.00%) 351.93
bgp 115 ( 0.00%) 16761 ( 0.00%) 145.75
other 6267 ( 0.02%) 634808 ( 0.00%) 101.29
udp6 32102 ( 0.10%) 6604926 ( 0.03%) 205.75
dns 31841 ( 0.10%) 6565579 ( 0.03%) 206.20
other 261 ( 0.00%) 39347 ( 0.00%) 150.75
icmp6 6978 ( 0.02%) 863593 ( 0.00%) 123.76
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 67 ( 0.00%) 55719 ( 0.00%) 831.63
tcpdump file: 201004151145.dump.gz (788.01 MB)