Traffic Trace Info
DumpFile: 201004151230.dump
FileSize: 2250.85MB
Id: 201004151230
StartTime: Thu Apr 15 12:30:00 2010
EndTime: Thu Apr 15 12:45:01 2010
TotalTime: 900.20 seconds
TotalCapSize: 1763.31MB CapLen: 96 bytes
# of packets: 31948143 (19669.32MB)
AvgRate: 183.29Mbps stddev:17.84M
IP flow (unique src/dst pair) Information
# of flows: 912689 (avg. 35.00 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.7% 1.5% 1.3% 1.1% 1.1% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 500223
Top 10 bandwidth usage (bytes/total in %):
17.4% 9.5% 5.0% 3.7% 3.2% 3.1% 3.0% 2.9% 2.3% 2.1%
# of IPv6 addresses: 1017
Top 10 bandwidth usage (bytes/total in %):
27.2% 9.6% 7.4% 6.8% 6.5% 5.4% 4.9% 4.8% 4.7% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004151230.pktlen.png)
detailed numbers
[ 32- 63]: 5940499
[ 64- 127]: 8262417
[ 128- 255]: 2508937
[ 256- 511]: 1880062
[ 512- 1023]: 866928
[ 1024- 2047]: 12489300
Protocol Breakdown
![[protocol breakdown chart]](201004151230.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31948143 (100.00%) 20624773193 (100.00%) 645.57
ip 31890936 ( 99.82%) 20615580638 ( 99.96%) 646.44
tcp 19614872 ( 61.40%) 14173804224 ( 68.72%) 722.60
http(s) 8519481 ( 26.67%) 11307064781 ( 54.82%) 1327.20
http(c) 6709278 ( 21.00%) 1090751506 ( 5.29%) 162.57
squid 369630 ( 1.16%) 160606929 ( 0.78%) 434.51
smtp 350252 ( 1.10%) 98412337 ( 0.48%) 280.98
ftp 10915 ( 0.03%) 1148577 ( 0.01%) 105.23
pop3 25633 ( 0.08%) 13891050 ( 0.07%) 541.92
imap 20640 ( 0.06%) 2982319 ( 0.01%) 144.49
telnet 842 ( 0.00%) 92140 ( 0.00%) 109.43
ssh 687135 ( 2.15%) 102084227 ( 0.49%) 148.57
dns 54934 ( 0.17%) 3797899 ( 0.02%) 69.14
bgp 147 ( 0.00%) 57482 ( 0.00%) 391.03
napster 210 ( 0.00%) 27557 ( 0.00%) 131.22
realaud 28 ( 0.00%) 3588 ( 0.00%) 128.14
rtsp 67849 ( 0.21%) 6322149 ( 0.03%) 93.18
icecast 45697 ( 0.14%) 3007677 ( 0.01%) 65.82
other 2752191 ( 8.61%) 1383553010 ( 6.71%) 502.71
udp 8289985 ( 25.95%) 4364578801 ( 21.16%) 526.49
dns 698176 ( 2.19%) 119443928 ( 0.58%) 171.08
realaud 766 ( 0.00%) 48765 ( 0.00%) 63.66
halflif 186 ( 0.00%) 29143 ( 0.00%) 156.68
starcra 164 ( 0.00%) 15310 ( 0.00%) 93.35
everque 921 ( 0.00%) 316333 ( 0.00%) 343.47
unreal 117 ( 0.00%) 20791 ( 0.00%) 177.70
quake 18 ( 0.00%) 1838 ( 0.00%) 102.11
cuseeme 1 ( 0.00%) 86 ( 0.00%) 86.00
other 7589547 ( 23.76%) 4244638230 ( 20.58%) 559.27
icmp 620608 ( 1.94%) 98088882 ( 0.48%) 158.05
ipip 337 ( 0.00%) 41354 ( 0.00%) 122.71
ipsec 1800 ( 0.01%) 490272 ( 0.00%) 272.37
ip6 3342309 ( 10.46%) 1975729256 ( 9.58%) 591.13
other 21025 ( 0.07%) 2847849 ( 0.01%) 135.45
frag 983 ( 0.00%) 976813 ( 0.00%) 993.71
ip6 57207 ( 0.18%) 9192555 ( 0.04%) 160.69
tcp6 19889 ( 0.06%) 2118503 ( 0.01%) 106.52
http(s) 32 ( 0.00%) 16738 ( 0.00%) 523.06
http(c) 4043 ( 0.01%) 367197 ( 0.00%) 90.82
smtp 192 ( 0.00%) 34315 ( 0.00%) 178.72
ftp 5176 ( 0.02%) 516293 ( 0.00%) 99.75
imap 424 ( 0.00%) 49043 ( 0.00%) 115.67
ssh 3652 ( 0.01%) 455304 ( 0.00%) 124.67
dns 178 ( 0.00%) 44285 ( 0.00%) 248.79
bgp 119 ( 0.00%) 15943 ( 0.00%) 133.97
other 6073 ( 0.02%) 619385 ( 0.00%) 101.99
udp6 30393 ( 0.10%) 6187986 ( 0.03%) 203.60
dns 30153 ( 0.09%) 6146469 ( 0.03%) 203.84
other 240 ( 0.00%) 41517 ( 0.00%) 172.99
icmp6 6872 ( 0.02%) 863410 ( 0.00%) 125.64
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 23 ( 0.00%) 18576 ( 0.00%) 807.65
tcpdump file: 201004151230.dump.gz (813.39 MB)