Traffic Trace Info
DumpFile: 201004151615.dump
FileSize: 2469.69MB
Id: 201004151615
StartTime: Thu Apr 15 16:15:01 2010
EndTime: Thu Apr 15 16:30:00 2010
TotalTime: 899.59 seconds
TotalCapSize: 1936.47MB CapLen: 96 bytes
# of packets: 34944525 (21181.99MB)
AvgRate: 197.51Mbps stddev:15.46M
IP flow (unique src/dst pair) Information
# of flows: 1137073 (avg. 30.73 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.7% 1.5% 1.4% 1.0% 0.9% 0.9% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 608726
Top 10 bandwidth usage (bytes/total in %):
15.0% 10.1% 5.8% 5.8% 4.5% 4.1% 3.8% 2.9% 2.9% 2.5%
# of IPv6 addresses: 1099
Top 10 bandwidth usage (bytes/total in %):
28.4% 10.3% 6.8% 6.4% 5.3% 5.1% 3.8% 3.8% 3.2% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004151615.pktlen.png)
detailed numbers
[ 32- 63]: 5989243
[ 64- 127]: 9535185
[ 128- 255]: 2632737
[ 256- 511]: 2207753
[ 512- 1023]: 1317232
[ 1024- 2047]: 13262375
Protocol Breakdown
![[protocol breakdown chart]](201004151615.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34944525 (100.00%) 22210928030 (100.00%) 635.61
ip 34887341 ( 99.84%) 22202129184 ( 99.96%) 636.39
tcp 21639748 ( 61.93%) 15291973883 ( 68.85%) 706.66
http(s) 8557520 ( 24.49%) 10949636627 ( 49.30%) 1279.53
http(c) 5947711 ( 17.02%) 768787050 ( 3.46%) 129.26
squid 519694 ( 1.49%) 226786042 ( 1.02%) 436.38
smtp 390165 ( 1.12%) 112276880 ( 0.51%) 287.77
nntp 9 ( 0.00%) 558 ( 0.00%) 62.00
ftp 1350934 ( 3.87%) 1295591501 ( 5.83%) 959.03
pop3 20102 ( 0.06%) 11583555 ( 0.05%) 576.24
imap 4086 ( 0.01%) 1942181 ( 0.01%) 475.33
telnet 1350 ( 0.00%) 117196 ( 0.00%) 86.81
ssh 887831 ( 2.54%) 134158276 ( 0.60%) 151.11
dns 57187 ( 0.16%) 3945406 ( 0.02%) 68.99
bgp 203 ( 0.00%) 92638 ( 0.00%) 456.34
napster 689 ( 0.00%) 46949 ( 0.00%) 68.14
realaud 70 ( 0.00%) 5914 ( 0.00%) 84.49
rtsp 127539 ( 0.36%) 8044130 ( 0.04%) 63.07
icecast 47099 ( 0.13%) 17521186 ( 0.08%) 372.01
hotline 69 ( 0.00%) 4989 ( 0.00%) 72.30
other 3727484 ( 10.67%) 1761432445 ( 7.93%) 472.55
udp 8883679 ( 25.42%) 4546886374 ( 20.47%) 511.82
dns 912766 ( 2.61%) 159473985 ( 0.72%) 174.72
rip 1 ( 0.00%) 109 ( 0.00%) 109.00
realaud 639 ( 0.00%) 41455 ( 0.00%) 64.87
halflif 116 ( 0.00%) 17514 ( 0.00%) 150.98
starcra 254 ( 0.00%) 25349 ( 0.00%) 99.80
everque 598 ( 0.00%) 116700 ( 0.00%) 195.15
unreal 76 ( 0.00%) 10701 ( 0.00%) 140.80
quake 54 ( 0.00%) 13017 ( 0.00%) 241.06
cuseeme 3 ( 0.00%) 293 ( 0.00%) 97.67
other 7968805 ( 22.80%) 4386955641 ( 19.75%) 550.52
icmp 581089 ( 1.66%) 68374523 ( 0.31%) 117.67
ipip 339 ( 0.00%) 41250 ( 0.00%) 121.68
ipsec 1561 ( 0.00%) 399414 ( 0.00%) 255.87
ip6 3741249 ( 10.71%) 2287385054 ( 10.30%) 611.40
other 39676 ( 0.11%) 7068686 ( 0.03%) 178.16
frag 6458 ( 0.02%) 7562811 ( 0.03%) 1171.08
ip6 57184 ( 0.16%) 8798846 ( 0.04%) 153.87
tcp6 20076 ( 0.06%) 2416934 ( 0.01%) 120.39
http(s) 482 ( 0.00%) 437994 ( 0.00%) 908.70
http(c) 4487 ( 0.01%) 408450 ( 0.00%) 91.03
smtp 370 ( 0.00%) 163508 ( 0.00%) 441.91
ftp 5288 ( 0.02%) 530366 ( 0.00%) 100.30
imap 251 ( 0.00%) 28273 ( 0.00%) 112.64
ssh 3282 ( 0.01%) 282028 ( 0.00%) 85.93
dns 84 ( 0.00%) 18862 ( 0.00%) 224.55
bgp 106 ( 0.00%) 13339 ( 0.00%) 125.84
other 5726 ( 0.02%) 534114 ( 0.00%) 93.28
udp6 30069 ( 0.09%) 5485915 ( 0.02%) 182.44
dns 29876 ( 0.09%) 5452779 ( 0.02%) 182.51
realaud 1 ( 0.00%) 168 ( 0.00%) 168.00
other 192 ( 0.00%) 32968 ( 0.00%) 171.71
icmp6 6961 ( 0.02%) 840867 ( 0.00%) 120.80
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 48 ( 0.00%) 51050 ( 0.00%) 1063.54
tcpdump file: 201004151615.dump.gz (890.13 MB)