Traffic Trace Info
DumpFile: 201004151515.dump
FileSize: 2420.52MB
Id: 201004151515
StartTime: Thu Apr 15 15:15:01 2010
EndTime: Thu Apr 15 15:30:01 2010
TotalTime: 900.20 seconds
TotalCapSize: 1894.78MB CapLen: 96 bytes
# of packets: 34390590 (22229.87MB)
AvgRate: 207.16Mbps stddev:22.23M
IP flow (unique src/dst pair) Information
# of flows: 991400 (avg. 34.69 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 1.8% 1.6% 1.4% 1.1% 1.0% 0.9% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 536218
Top 10 bandwidth usage (bytes/total in %):
15.3% 7.4% 5.4% 5.4% 4.4% 4.1% 3.7% 3.4% 2.7% 2.3%
# of IPv6 addresses: 1109
Top 10 bandwidth usage (bytes/total in %):
19.6% 9.5% 9.5% 9.2% 6.0% 5.2% 4.7% 4.6% 3.8% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004151515.pktlen.png)
detailed numbers
[ 32- 63]: 6281701
[ 64- 127]: 8803236
[ 128- 255]: 2218731
[ 256- 511]: 1805066
[ 512- 1023]: 967345
[ 1024- 2047]: 14314511
Protocol Breakdown
![[protocol breakdown chart]](201004151515.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34390590 (100.00%) 23309705472 (100.00%) 677.79
ip 34333740 ( 99.83%) 23299827510 ( 99.96%) 678.63
tcp 22385926 ( 65.09%) 16925693750 ( 72.61%) 756.09
http(s) 9023594 ( 26.24%) 12209847276 ( 52.38%) 1353.10
http(c) 6516943 ( 18.95%) 827420898 ( 3.55%) 126.96
squid 448212 ( 1.30%) 201318132 ( 0.86%) 449.16
smtp 410095 ( 1.19%) 130139153 ( 0.56%) 317.34
nntp 56 ( 0.00%) 3544 ( 0.00%) 63.29
ftp 1302622 ( 3.79%) 1249808626 ( 5.36%) 959.46
pop3 45008 ( 0.13%) 13787919 ( 0.06%) 306.34
imap 4373 ( 0.01%) 1805623 ( 0.01%) 412.90
telnet 1630 ( 0.00%) 128192 ( 0.00%) 78.65
ssh 619141 ( 1.80%) 91542979 ( 0.39%) 147.85
dns 58008 ( 0.17%) 3993460 ( 0.02%) 68.84
bgp 135 ( 0.00%) 48236 ( 0.00%) 357.30
napster 244 ( 0.00%) 21009 ( 0.00%) 86.10
realaud 46 ( 0.00%) 11406 ( 0.00%) 247.96
rtsp 288248 ( 0.84%) 44317766 ( 0.19%) 153.75
icecast 41767 ( 0.12%) 2918256 ( 0.01%) 69.87
other 3625800 ( 10.54%) 2148581035 ( 9.22%) 592.58
udp 8279992 ( 24.08%) 4552843690 ( 19.53%) 549.86
dns 823949 ( 2.40%) 141694406 ( 0.61%) 171.97
realaud 1497 ( 0.00%) 92307 ( 0.00%) 61.66
halflif 95 ( 0.00%) 13221 ( 0.00%) 139.17
starcra 158 ( 0.00%) 17228 ( 0.00%) 109.04
everque 597 ( 0.00%) 124507 ( 0.00%) 208.55
unreal 60 ( 0.00%) 9254 ( 0.00%) 154.23
quake 150 ( 0.00%) 59469 ( 0.00%) 396.46
cuseeme 2 ( 0.00%) 168 ( 0.00%) 84.00
other 7453236 ( 21.67%) 4410651331 ( 18.92%) 591.78
icmp 556669 ( 1.62%) 60504485 ( 0.26%) 108.69
ipip 359 ( 0.00%) 44803 ( 0.00%) 124.80
ipsec 16160 ( 0.05%) 8645736 ( 0.04%) 535.01
ip6 3025883 ( 8.80%) 1730560256 ( 7.42%) 571.92
other 68751 ( 0.20%) 21534790 ( 0.09%) 313.23
frag 2098 ( 0.01%) 2272144 ( 0.01%) 1083.00
ip6 56850 ( 0.17%) 9877962 ( 0.04%) 173.75
tcp6 21390 ( 0.06%) 3460419 ( 0.01%) 161.78
http(s) 863 ( 0.00%) 1145607 ( 0.00%) 1327.47
http(c) 4214 ( 0.01%) 388507 ( 0.00%) 92.19
smtp 206 ( 0.00%) 162713 ( 0.00%) 789.87
ftp 5306 ( 0.02%) 531013 ( 0.00%) 100.08
imap 345 ( 0.00%) 39025 ( 0.00%) 113.12
ssh 4290 ( 0.01%) 601092 ( 0.00%) 140.11
dns 9 ( 0.00%) 2862 ( 0.00%) 318.00
bgp 112 ( 0.00%) 14723 ( 0.00%) 131.46
napster 4 ( 0.00%) 356 ( 0.00%) 89.00
other 6041 ( 0.02%) 574521 ( 0.00%) 95.10
udp6 27359 ( 0.08%) 5146100 ( 0.02%) 188.10
dns 27168 ( 0.08%) 5115147 ( 0.02%) 188.28
realaud 1 ( 0.00%) 118 ( 0.00%) 118.00
quake 1 ( 0.00%) 110 ( 0.00%) 110.00
other 189 ( 0.00%) 30725 ( 0.00%) 162.57
icmp6 8031 ( 0.02%) 1227929 ( 0.01%) 152.90
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 40 ( 0.00%) 39434 ( 0.00%) 985.85
tcpdump file: 201004151515.dump.gz (869.16 MB)