Traffic Trace Info
DumpFile: 201004151700.dump
FileSize: 2515.58MB
Id: 201004151700
StartTime: Thu Apr 15 17:00:00 2010
EndTime: Thu Apr 15 17:15:00 2010
TotalTime: 899.95 seconds
TotalCapSize: 1970.01MB CapLen: 96 bytes
# of packets: 35680635 (22590.71MB)
AvgRate: 210.58Mbps stddev:16.85M
IP flow (unique src/dst pair) Information
# of flows: 1064435 (avg. 33.52 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 1.7% 1.3% 1.3% 1.1% 0.8% 0.7% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 593447
Top 10 bandwidth usage (bytes/total in %):
13.9% 7.9% 5.0% 5.0% 5.0% 4.3% 4.2% 4.1% 2.7% 2.6%
# of IPv6 addresses: 1170
Top 10 bandwidth usage (bytes/total in %):
23.0% 11.6% 8.5% 5.5% 4.5% 4.3% 4.3% 4.0% 3.8% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004151700.pktlen.png)
detailed numbers
[ 32- 63]: 6406498
[ 64- 127]: 9339804
[ 128- 255]: 2493055
[ 256- 511]: 2089473
[ 512- 1023]: 995992
[ 1024- 2047]: 14355813
Protocol Breakdown
![[protocol breakdown chart]](201004151700.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35680635 (100.00%) 23688078142 (100.00%) 663.89
ip 35616505 ( 99.82%) 23677182995 ( 99.95%) 664.78
tcp 23511498 ( 65.89%) 17658534050 ( 74.55%) 751.06
http(s) 9500235 ( 26.63%) 12699415656 ( 53.61%) 1336.75
http(c) 6529484 ( 18.30%) 876498356 ( 3.70%) 134.24
squid 339229 ( 0.95%) 101313347 ( 0.43%) 298.66
smtp 487015 ( 1.36%) 110241742 ( 0.47%) 226.36
ftp 1221027 ( 3.42%) 1181702592 ( 4.99%) 967.79
pop3 20677 ( 0.06%) 11198255 ( 0.05%) 541.58
imap 4030 ( 0.01%) 1967666 ( 0.01%) 488.25
telnet 964 ( 0.00%) 101570 ( 0.00%) 105.36
ssh 895242 ( 2.51%) 132724348 ( 0.56%) 148.26
dns 54288 ( 0.15%) 3751792 ( 0.02%) 69.11
bgp 192 ( 0.00%) 80631 ( 0.00%) 419.95
napster 620 ( 0.00%) 258706 ( 0.00%) 417.27
realaud 43 ( 0.00%) 5169 ( 0.00%) 120.21
rtsp 143454 ( 0.40%) 27610190 ( 0.12%) 192.47
icecast 29128 ( 0.08%) 16302908 ( 0.07%) 559.70
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 4285863 ( 12.01%) 2495360702 ( 10.53%) 582.23
udp 8187245 ( 22.95%) 4024319762 ( 16.99%) 491.54
dns 843784 ( 2.36%) 143304708 ( 0.60%) 169.84
rip 4 ( 0.00%) 300 ( 0.00%) 75.00
realaud 53 ( 0.00%) 5935 ( 0.00%) 111.98
halflif 156 ( 0.00%) 18793 ( 0.00%) 120.47
starcra 267 ( 0.00%) 24234 ( 0.00%) 90.76
everque 599 ( 0.00%) 135207 ( 0.00%) 225.72
unreal 95 ( 0.00%) 16459 ( 0.00%) 173.25
quake 70 ( 0.00%) 6443 ( 0.00%) 92.04
cuseeme 7 ( 0.00%) 591 ( 0.00%) 84.43
other 7341841 ( 20.58%) 3880583514 ( 16.38%) 528.56
icmp 599065 ( 1.68%) 79616395 ( 0.34%) 132.90
ipip 338 ( 0.00%) 41528 ( 0.00%) 122.86
ipsec 1823 ( 0.01%) 436594 ( 0.00%) 239.49
ip6 3251695 ( 9.11%) 1886114705 ( 7.96%) 580.04
other 64841 ( 0.18%) 28119961 ( 0.12%) 433.68
frag 2446 ( 0.01%) 2361859 ( 0.01%) 965.60
ip6 64130 ( 0.18%) 10895147 ( 0.05%) 169.89
tcp6 20091 ( 0.06%) 2020707 ( 0.01%) 100.58
http(s) 49 ( 0.00%) 37897 ( 0.00%) 773.41
http(c) 4176 ( 0.01%) 373764 ( 0.00%) 89.50
smtp 158 ( 0.00%) 50956 ( 0.00%) 322.51
ftp 5340 ( 0.01%) 546748 ( 0.00%) 102.39
imap 390 ( 0.00%) 42849 ( 0.00%) 109.87
ssh 3319 ( 0.01%) 280910 ( 0.00%) 84.64
dns 122 ( 0.00%) 44652 ( 0.00%) 366.00
bgp 115 ( 0.00%) 15915 ( 0.00%) 138.39
other 6422 ( 0.02%) 627016 ( 0.00%) 97.64
udp6 35610 ( 0.10%) 7541653 ( 0.03%) 211.78
dns 35092 ( 0.10%) 7436375 ( 0.03%) 211.91
other 518 ( 0.00%) 105278 ( 0.00%) 203.24
icmp6 8373 ( 0.02%) 1305739 ( 0.01%) 155.95
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 26 ( 0.00%) 22968 ( 0.00%) 883.38
tcpdump file: 201004151700.dump.gz (914.41 MB)