Traffic Trace Info
DumpFile: 201004151545.dump
FileSize: 2495.26MB
Id: 201004151545
StartTime: Thu Apr 15 15:45:01 2010
EndTime: Thu Apr 15 16:00:01 2010
TotalTime: 900.47 seconds
TotalCapSize: 1952.14MB CapLen: 96 bytes
# of packets: 35592811 (23009.61MB)
AvgRate: 214.38Mbps stddev:19.21M
IP flow (unique src/dst pair) Information
# of flows: 1025337 (avg. 34.71 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 4.1% 1.7% 1.1% 1.1% 1.0% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 539444
Top 10 bandwidth usage (bytes/total in %):
13.2% 7.6% 5.3% 5.3% 4.3% 4.1% 3.6% 3.2% 2.9% 2.8%
# of IPv6 addresses: 1089
Top 10 bandwidth usage (bytes/total in %):
28.0% 10.4% 6.7% 6.0% 5.3% 5.2% 3.5% 2.7% 2.6% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004151545.pktlen.png)
detailed numbers
[ 32- 63]: 6149408
[ 64- 127]: 9070713
[ 128- 255]: 2484634
[ 256- 511]: 2174068
[ 512- 1023]: 1070452
[ 1024- 2047]: 14643536
Protocol Breakdown
![[protocol breakdown chart]](201004151545.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35592811 (100.00%) 24127327548 (100.00%) 677.87
ip 35533706 ( 99.83%) 24118416745 ( 99.96%) 678.75
tcp 23023501 ( 64.69%) 17784431789 ( 73.71%) 772.45
http(s) 9487866 ( 26.66%) 12876733019 ( 53.37%) 1357.18
http(c) 6228345 ( 17.50%) 823840896 ( 3.41%) 132.27
squid 498504 ( 1.40%) 229900709 ( 0.95%) 461.18
smtp 387263 ( 1.09%) 97414870 ( 0.40%) 251.55
nntp 45 ( 0.00%) 2802 ( 0.00%) 62.27
ftp 1344125 ( 3.78%) 1291414363 ( 5.35%) 960.78
pop3 25532 ( 0.07%) 13902300 ( 0.06%) 544.50
imap 4673 ( 0.01%) 2116923 ( 0.01%) 453.01
telnet 849 ( 0.00%) 90196 ( 0.00%) 106.24
ssh 865773 ( 2.43%) 133577039 ( 0.55%) 154.29
dns 62723 ( 0.18%) 7743274 ( 0.03%) 123.45
bgp 157 ( 0.00%) 59543 ( 0.00%) 379.25
napster 241 ( 0.00%) 18376 ( 0.00%) 76.25
realaud 39 ( 0.00%) 4107 ( 0.00%) 105.31
rtsp 179181 ( 0.50%) 117622611 ( 0.49%) 656.45
icecast 23428 ( 0.07%) 1554048 ( 0.01%) 66.33
other 3914751 ( 11.00%) 2188436353 ( 9.07%) 559.02
udp 8708332 ( 24.47%) 4413217206 ( 18.29%) 506.78
dns 839435 ( 2.36%) 143651910 ( 0.60%) 171.13
rip 17 ( 0.00%) 1309 ( 0.00%) 77.00
realaud 1854 ( 0.01%) 113301 ( 0.00%) 61.11
halflif 116 ( 0.00%) 15808 ( 0.00%) 136.28
starcra 306 ( 0.00%) 30656 ( 0.00%) 100.18
everque 655 ( 0.00%) 124698 ( 0.00%) 190.38
unreal 50 ( 0.00%) 6427 ( 0.00%) 128.54
quake 54 ( 0.00%) 4813 ( 0.00%) 89.13
cuseeme 4 ( 0.00%) 350 ( 0.00%) 87.50
other 7865357 ( 22.10%) 4269026464 ( 17.69%) 542.76
icmp 540354 ( 1.52%) 62776991 ( 0.26%) 116.18
ipip 348 ( 0.00%) 41948 ( 0.00%) 120.54
ipsec 5353 ( 0.02%) 2166570 ( 0.01%) 404.74
ip6 3219600 ( 9.05%) 1844027958 ( 7.64%) 572.75
other 36218 ( 0.10%) 11754283 ( 0.05%) 324.54
frag 2779 ( 0.01%) 2712965 ( 0.01%) 976.24
ip6 59105 ( 0.17%) 8910803 ( 0.04%) 150.76
tcp6 20786 ( 0.06%) 2347369 ( 0.01%) 112.93
http(s) 318 ( 0.00%) 355493 ( 0.00%) 1117.90
http(c) 4554 ( 0.01%) 411959 ( 0.00%) 90.46
smtp 308 ( 0.00%) 107746 ( 0.00%) 349.82
ftp 5073 ( 0.01%) 505937 ( 0.00%) 99.73
imap 697 ( 0.00%) 69697 ( 0.00%) 100.00
ssh 3308 ( 0.01%) 280280 ( 0.00%) 84.73
dns 21 ( 0.00%) 5749 ( 0.00%) 273.76
bgp 106 ( 0.00%) 13434 ( 0.00%) 126.74
other 6401 ( 0.02%) 597074 ( 0.00%) 93.28
udp6 31246 ( 0.09%) 5653253 ( 0.02%) 180.93
dns 31068 ( 0.09%) 5621264 ( 0.02%) 180.93
other 178 ( 0.00%) 31989 ( 0.00%) 179.71
icmp6 6991 ( 0.02%) 854129 ( 0.00%) 122.18
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 52 ( 0.00%) 51972 ( 0.00%) 999.46
tcpdump file: 201004151545.dump.gz (903.62 MB)