Traffic Trace Info
DumpFile: 201004151445.dump
FileSize: 2544.46MB
Id: 201004151445
StartTime: Thu Apr 15 14:45:01 2010
EndTime: Thu Apr 15 15:00:01 2010
TotalTime: 900.26 seconds
TotalCapSize: 1996.21MB CapLen: 96 bytes
# of packets: 35929552 (23312.68MB)
AvgRate: 217.22Mbps stddev:20.61M
IP flow (unique src/dst pair) Information
# of flows: 959914 (avg. 37.43 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 3.1% 2.3% 2.1% 1.9% 1.3% 1.3% 1.1% 1.0% 0.7%
IP address Information
# of IPv4 addresses: 524522
Top 10 bandwidth usage (bytes/total in %):
14.3% 6.5% 5.5% 4.7% 4.7% 3.2% 3.1% 3.1% 2.8% 2.6%
# of IPv6 addresses: 1061
Top 10 bandwidth usage (bytes/total in %):
22.0% 10.2% 8.1% 5.4% 5.4% 5.2% 5.2% 5.2% 4.5% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004151445.pktlen.png)
detailed numbers
[ 32- 63]: 5863536
[ 64- 127]: 9836777
[ 128- 255]: 2219511
[ 256- 511]: 1991502
[ 512- 1023]: 1029615
[ 1024- 2047]: 14988611
Protocol Breakdown
![[protocol breakdown chart]](201004151445.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35929552 (100.00%) 24445117685 (100.00%) 680.36
ip 35864834 ( 99.82%) 24433742569 ( 99.95%) 681.27
tcp 23935830 ( 66.62%) 18243338106 ( 74.63%) 762.18
http(s) 10172730 ( 28.31%) 13476785715 ( 55.13%) 1324.80
http(c) 7078280 ( 19.70%) 935621366 ( 3.83%) 132.18
squid 283637 ( 0.79%) 85741687 ( 0.35%) 302.29
smtp 394620 ( 1.10%) 141154708 ( 0.58%) 357.70
nntp 7 ( 0.00%) 448 ( 0.00%) 64.00
ftp 1191029 ( 3.31%) 1140282008 ( 4.66%) 957.39
pop3 28456 ( 0.08%) 15133601 ( 0.06%) 531.82
imap 3637 ( 0.01%) 957170 ( 0.00%) 263.18
telnet 851 ( 0.00%) 77156 ( 0.00%) 90.67
ssh 657168 ( 1.83%) 100477177 ( 0.41%) 152.89
dns 58841 ( 0.16%) 4067449 ( 0.02%) 69.13
bgp 130 ( 0.00%) 41839 ( 0.00%) 321.84
napster 53 ( 0.00%) 8450 ( 0.00%) 159.43
realaud 109 ( 0.00%) 10790 ( 0.00%) 98.99
rtsp 38646 ( 0.11%) 2494115 ( 0.01%) 64.54
icecast 50453 ( 0.14%) 3328438 ( 0.01%) 65.97
hotline 3 ( 0.00%) 184 ( 0.00%) 61.33
other 3977178 ( 11.07%) 2337155685 ( 9.56%) 587.64
udp 8419427 ( 23.43%) 4512749044 ( 18.46%) 535.99
dns 773798 ( 2.15%) 130594986 ( 0.53%) 168.77
realaud 33 ( 0.00%) 3365 ( 0.00%) 101.97
halflif 182 ( 0.00%) 27771 ( 0.00%) 152.59
starcra 168 ( 0.00%) 19281 ( 0.00%) 114.77
everque 592 ( 0.00%) 102799 ( 0.00%) 173.65
unreal 54 ( 0.00%) 8550 ( 0.00%) 158.33
quake 30 ( 0.00%) 2886 ( 0.00%) 96.20
cuseeme 2 ( 0.00%) 189 ( 0.00%) 94.50
other 7644438 ( 21.28%) 4381891381 ( 17.93%) 573.21
icmp 493539 ( 1.37%) 56495492 ( 0.23%) 114.47
ipip 347 ( 0.00%) 42890 ( 0.00%) 123.60
ipsec 1704 ( 0.00%) 428408 ( 0.00%) 251.41
ip6 2996999 ( 8.34%) 1616356938 ( 6.61%) 539.33
other 16988 ( 0.05%) 4331691 ( 0.02%) 254.99
frag 861 ( 0.00%) 962043 ( 0.00%) 1117.36
ip6 64718 ( 0.18%) 11375116 ( 0.05%) 175.76
tcp6 22022 ( 0.06%) 3276829 ( 0.01%) 148.80
http(s) 361 ( 0.00%) 416355 ( 0.00%) 1153.34
http(c) 4055 ( 0.01%) 367684 ( 0.00%) 90.67
smtp 1041 ( 0.00%) 284368 ( 0.00%) 273.17
ftp 5304 ( 0.01%) 530044 ( 0.00%) 99.93
imap 510 ( 0.00%) 53804 ( 0.00%) 105.50
ssh 4492 ( 0.01%) 971624 ( 0.00%) 216.30
dns 153 ( 0.00%) 62490 ( 0.00%) 408.43
bgp 114 ( 0.00%) 15657 ( 0.00%) 137.34
other 5992 ( 0.02%) 574803 ( 0.00%) 95.93
udp6 35647 ( 0.10%) 7205517 ( 0.03%) 202.14
dns 35446 ( 0.10%) 7172095 ( 0.03%) 202.34
other 201 ( 0.00%) 33422 ( 0.00%) 166.28
icmp6 6972 ( 0.02%) 849340 ( 0.00%) 121.82
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 47 ( 0.00%) 39350 ( 0.00%) 837.23
tcpdump file: 201004151445.dump.gz (910.15 MB)