Traffic Trace Info
DumpFile: 201004151415.dump
FileSize: 2406.39MB
Id: 201004151415
StartTime: Thu Apr 15 14:15:00 2010
EndTime: Thu Apr 15 14:30:01 2010
TotalTime: 900.20 seconds
TotalCapSize: 1884.43MB CapLen: 96 bytes
# of packets: 34206410 (21537.47MB)
AvgRate: 200.70Mbps stddev:14.78M
IP flow (unique src/dst pair) Information
# of flows: 1010813 (avg. 33.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 1.6% 1.6% 1.6% 1.3% 1.0% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 572314
Top 10 bandwidth usage (bytes/total in %):
14.3% 7.7% 4.0% 3.8% 3.3% 3.0% 2.9% 2.8% 2.6% 2.4%
# of IPv6 addresses: 1033
Top 10 bandwidth usage (bytes/total in %):
25.3% 10.4% 9.3% 6.0% 5.1% 4.8% 4.6% 4.0% 3.8% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004151415.pktlen.png)
detailed numbers
[ 32- 63]: 5680556
[ 64- 127]: 9311466
[ 128- 255]: 2314970
[ 256- 511]: 2092045
[ 512- 1023]: 1118829
[ 1024- 2047]: 13688544
Protocol Breakdown
![[protocol breakdown chart]](201004151415.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34206410 (100.00%) 22583669483 (100.00%) 660.22
ip 34147425 ( 99.83%) 22573792750 ( 99.96%) 661.07
tcp 21397227 ( 62.55%) 15919107404 ( 70.49%) 743.98
http(s) 9081529 ( 26.55%) 11875025820 ( 52.58%) 1307.60
http(c) 6955602 ( 20.33%) 1685604775 ( 7.46%) 242.34
squid 335210 ( 0.98%) 123352947 ( 0.55%) 367.99
smtp 363414 ( 1.06%) 115554691 ( 0.51%) 317.97
ftp 22167 ( 0.06%) 2525233 ( 0.01%) 113.92
pop3 26312 ( 0.08%) 15806341 ( 0.07%) 600.73
imap 4514 ( 0.01%) 2186929 ( 0.01%) 484.48
telnet 555 ( 0.00%) 57212 ( 0.00%) 103.08
ssh 678134 ( 1.98%) 104084058 ( 0.46%) 153.49
dns 56944 ( 0.17%) 3894383 ( 0.02%) 68.39
bgp 146 ( 0.00%) 50121 ( 0.00%) 343.29
napster 160 ( 0.00%) 19680 ( 0.00%) 123.00
realaud 30 ( 0.00%) 3205 ( 0.00%) 106.83
rtsp 142617 ( 0.42%) 8984004 ( 0.04%) 62.99
icecast 47311 ( 0.14%) 3200268 ( 0.01%) 67.64
hotline 2 ( 0.00%) 124 ( 0.00%) 62.00
other 3682579 ( 10.77%) 1978757553 ( 8.76%) 537.33
udp 9018346 ( 26.36%) 4825062295 ( 21.37%) 535.03
dns 745343 ( 2.18%) 126485402 ( 0.56%) 169.70
realaud 26 ( 0.00%) 2714 ( 0.00%) 104.38
halflif 196 ( 0.00%) 34518 ( 0.00%) 176.11
starcra 203 ( 0.00%) 21300 ( 0.00%) 104.93
everque 679 ( 0.00%) 125279 ( 0.00%) 184.51
unreal 76 ( 0.00%) 11731 ( 0.00%) 154.36
quake 34 ( 0.00%) 3533 ( 0.00%) 103.91
cuseeme 8 ( 0.00%) 1148 ( 0.00%) 143.50
other 8271575 ( 24.18%) 4698148721 ( 20.80%) 567.99
icmp 482725 ( 1.41%) 55647248 ( 0.25%) 115.28
ipip 320 ( 0.00%) 39926 ( 0.00%) 124.77
ipsec 1762 ( 0.01%) 435988 ( 0.00%) 247.44
ip6 3215162 ( 9.40%) 1751455799 ( 7.76%) 544.75
other 31883 ( 0.09%) 22044090 ( 0.10%) 691.41
frag 2123 ( 0.01%) 2661002 ( 0.01%) 1253.42
ip6 58983 ( 0.17%) 9876613 ( 0.04%) 167.45
tcp6 19428 ( 0.06%) 2162228 ( 0.01%) 111.29
http(s) 384 ( 0.00%) 288859 ( 0.00%) 752.24
http(c) 3699 ( 0.01%) 338172 ( 0.00%) 91.42
smtp 299 ( 0.00%) 89627 ( 0.00%) 299.76
ftp 5322 ( 0.02%) 530193 ( 0.00%) 99.62
imap 292 ( 0.00%) 33815 ( 0.00%) 115.80
ssh 3265 ( 0.01%) 276514 ( 0.00%) 84.69
dns 130 ( 0.00%) 38182 ( 0.00%) 293.71
bgp 104 ( 0.00%) 13602 ( 0.00%) 130.79
other 5933 ( 0.02%) 553264 ( 0.00%) 93.25
udp6 32846 ( 0.10%) 6842773 ( 0.03%) 208.33
dns 32593 ( 0.10%) 6803789 ( 0.03%) 208.75
realaud 1 ( 0.00%) 105 ( 0.00%) 105.00
halflif 1 ( 0.00%) 103 ( 0.00%) 103.00
other 251 ( 0.00%) 38776 ( 0.00%) 154.49
icmp6 6607 ( 0.02%) 804964 ( 0.00%) 121.84
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 71 ( 0.00%) 62432 ( 0.00%) 879.32
tcpdump file: 201004151415.dump.gz (876.38 MB)