Traffic Trace Info
DumpFile: 201004151200.dump
FileSize: 2104.34MB
Id: 201004151200
StartTime: Thu Apr 15 12:00:01 2010
EndTime: Thu Apr 15 12:15:01 2010
TotalTime: 899.84 seconds
TotalCapSize: 1649.70MB CapLen: 96 bytes
# of packets: 29765750 (18038.04MB)
AvgRate: 168.15Mbps stddev:13.67M
IP flow (unique src/dst pair) Information
# of flows: 974599 (avg. 30.54 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 2.8% 1.8% 1.2% 1.1% 1.1% 1.0% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 553051
Top 10 bandwidth usage (bytes/total in %):
16.8% 10.2% 6.0% 4.9% 4.6% 3.7% 3.4% 3.4% 2.8% 2.8%
# of IPv6 addresses: 1080
Top 10 bandwidth usage (bytes/total in %):
19.8% 19.8% 19.3% 7.0% 6.2% 4.6% 4.5% 4.5% 3.9% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004151200.pktlen.png)
detailed numbers
[ 32- 63]: 5304336
[ 64- 127]: 8102677
[ 128- 255]: 2439965
[ 256- 511]: 1731177
[ 512- 1023]: 846369
[ 1024- 2047]: 11341226
Protocol Breakdown
![[protocol breakdown chart]](201004151200.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29765750 (100.00%) 18914260550 (100.00%) 635.44
ip 29700764 ( 99.78%) 18901301650 ( 99.93%) 636.39
tcp 18111043 ( 60.85%) 13002325740 ( 68.74%) 717.92
http(s) 7432438 ( 24.97%) 9858246329 ( 52.12%) 1326.38
http(c) 5632861 ( 18.92%) 637629048 ( 3.37%) 113.20
squid 279803 ( 0.94%) 130964085 ( 0.69%) 468.06
smtp 351538 ( 1.18%) 124965071 ( 0.66%) 355.48
ftp 27573 ( 0.09%) 9720105 ( 0.05%) 352.52
pop3 26137 ( 0.09%) 10687903 ( 0.06%) 408.92
imap 6040 ( 0.02%) 1527960 ( 0.01%) 252.97
telnet 749 ( 0.00%) 89056 ( 0.00%) 118.90
ssh 713050 ( 2.40%) 115825116 ( 0.61%) 162.44
dns 54081 ( 0.18%) 3711453 ( 0.02%) 68.63
bgp 146 ( 0.00%) 50413 ( 0.00%) 345.29
napster 147 ( 0.00%) 14788 ( 0.00%) 100.60
realaud 7 ( 0.00%) 847 ( 0.00%) 121.00
rtsp 53445 ( 0.18%) 7868765 ( 0.04%) 147.23
icecast 26772 ( 0.09%) 1759502 ( 0.01%) 65.72
hotline 11 ( 0.00%) 940 ( 0.00%) 85.45
other 3506244 ( 11.78%) 2099264299 ( 11.10%) 598.72
udp 7652321 ( 25.71%) 3857635434 ( 20.40%) 504.11
dns 700851 ( 2.35%) 119860389 ( 0.63%) 171.02
realaud 39 ( 0.00%) 3971 ( 0.00%) 101.82
halflif 148 ( 0.00%) 21132 ( 0.00%) 142.78
starcra 110 ( 0.00%) 10732 ( 0.00%) 97.56
everque 744 ( 0.00%) 149706 ( 0.00%) 201.22
unreal 138 ( 0.00%) 25783 ( 0.00%) 186.83
quake 25 ( 0.00%) 2343 ( 0.00%) 93.72
cuseeme 1 ( 0.00%) 83 ( 0.00%) 83.00
other 6950189 ( 23.35%) 3737496069 ( 19.76%) 537.75
icmp 620710 ( 2.09%) 98760452 ( 0.52%) 159.11
ipip 342 ( 0.00%) 42448 ( 0.00%) 124.12
ipsec 1791 ( 0.01%) 436386 ( 0.00%) 243.65
ip6 3279267 ( 11.02%) 1937435563 ( 10.24%) 590.81
other 35290 ( 0.12%) 4665627 ( 0.02%) 132.21
frag 538 ( 0.00%) 575240 ( 0.00%) 1069.22
ip6 64986 ( 0.22%) 12958900 ( 0.07%) 199.41
tcp6 25151 ( 0.08%) 5246546 ( 0.03%) 208.60
http(s) 3588 ( 0.01%) 2600608 ( 0.01%) 724.81
http(c) 4422 ( 0.01%) 396554 ( 0.00%) 89.68
smtp 128 ( 0.00%) 34335 ( 0.00%) 268.24
ftp 5306 ( 0.02%) 530836 ( 0.00%) 100.04
imap 348 ( 0.00%) 40143 ( 0.00%) 115.35
ssh 4887 ( 0.02%) 968542 ( 0.01%) 198.19
dns 127 ( 0.00%) 31227 ( 0.00%) 245.88
bgp 102 ( 0.00%) 12840 ( 0.00%) 125.88
other 6243 ( 0.02%) 631461 ( 0.00%) 101.15
udp6 32330 ( 0.11%) 6652307 ( 0.04%) 205.76
dns 32095 ( 0.11%) 6609643 ( 0.03%) 205.94
other 235 ( 0.00%) 42664 ( 0.00%) 181.55
icmp6 7421 ( 0.02%) 1012859 ( 0.01%) 136.49
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 53 ( 0.00%) 42972 ( 0.00%) 810.79
tcpdump file: 201004151200.dump.gz (759.58 MB)