Traffic Trace Info
DumpFile: 201004151715.dump
FileSize: 2492.93MB
Id: 201004151715
StartTime: Thu Apr 15 17:15:00 2010
EndTime: Thu Apr 15 17:30:01 2010
TotalTime: 900.22 seconds
TotalCapSize: 1954.09MB CapLen: 96 bytes
# of packets: 35313094 (22553.54MB)
AvgRate: 210.16Mbps stddev:21.23M
IP flow (unique src/dst pair) Information
# of flows: 1082075 (avg. 32.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 1.8% 1.4% 1.3% 1.3% 1.0% 1.0% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 555485
Top 10 bandwidth usage (bytes/total in %):
14.5% 7.7% 5.1% 5.1% 4.7% 4.2% 3.7% 3.4% 2.1% 1.9%
# of IPv6 addresses: 1104
Top 10 bandwidth usage (bytes/total in %):
22.8% 8.7% 8.5% 6.3% 6.3% 5.4% 4.6% 4.3% 4.3% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004151715.pktlen.png)
detailed numbers
[ 32- 63]: 6020115
[ 64- 127]: 9393919
[ 128- 255]: 2474843
[ 256- 511]: 2027512
[ 512- 1023]: 973168
[ 1024- 2047]: 14423537
Protocol Breakdown
![[protocol breakdown chart]](201004151715.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35313094 (100.00%) 23649105720 (100.00%) 669.70
ip 35248735 ( 99.82%) 23638175899 ( 99.95%) 670.61
tcp 23143251 ( 65.54%) 17378113178 ( 73.48%) 750.89
http(s) 8761386 ( 24.81%) 11780548926 ( 49.81%) 1344.60
http(c) 6565597 ( 18.59%) 1119707205 ( 4.73%) 170.54
squid 312011 ( 0.88%) 79939044 ( 0.34%) 256.21
smtp 428596 ( 1.21%) 112985777 ( 0.48%) 263.62
ftp 1241998 ( 3.52%) 1203387772 ( 5.09%) 968.91
pop3 21245 ( 0.06%) 11692266 ( 0.05%) 550.35
imap 2543 ( 0.01%) 1098782 ( 0.00%) 432.08
telnet 757 ( 0.00%) 70120 ( 0.00%) 92.63
ssh 1016450 ( 2.88%) 148075857 ( 0.63%) 145.68
dns 55677 ( 0.16%) 3841344 ( 0.02%) 68.99
bgp 177 ( 0.00%) 74267 ( 0.00%) 419.59
napster 45 ( 0.00%) 4432 ( 0.00%) 98.49
realaud 159 ( 0.00%) 11594 ( 0.00%) 72.92
rtsp 81683 ( 0.23%) 38646464 ( 0.16%) 473.13
icecast 29354 ( 0.08%) 16267527 ( 0.07%) 554.18
hotline 31 ( 0.00%) 8167 ( 0.00%) 263.45
other 4625539 ( 13.10%) 2861753454 ( 12.10%) 618.69
udp 8428083 ( 23.87%) 4340493548 ( 18.35%) 515.00
dns 819928 ( 2.32%) 139834261 ( 0.59%) 170.54
realaud 40 ( 0.00%) 3824 ( 0.00%) 95.60
halflif 127 ( 0.00%) 15320 ( 0.00%) 120.63
starcra 213 ( 0.00%) 23123 ( 0.00%) 108.56
everque 1563 ( 0.00%) 277783 ( 0.00%) 177.72
unreal 173 ( 0.00%) 22312 ( 0.00%) 128.97
quake 141 ( 0.00%) 12156 ( 0.00%) 86.21
cuseeme 4 ( 0.00%) 403 ( 0.00%) 100.75
other 7605422 ( 21.54%) 4200040991 ( 17.76%) 552.24
icmp 560710 ( 1.59%) 66297307 ( 0.28%) 118.24
ipip 354 ( 0.00%) 45369 ( 0.00%) 128.16
ipsec 1681 ( 0.00%) 430086 ( 0.00%) 255.85
ip6 3064326 ( 8.68%) 1835185112 ( 7.76%) 598.89
other 50330 ( 0.14%) 17611299 ( 0.07%) 349.92
frag 4254 ( 0.01%) 3845273 ( 0.02%) 903.92
ip6 64359 ( 0.18%) 10929821 ( 0.05%) 169.83
tcp6 23235 ( 0.07%) 3022350 ( 0.01%) 130.08
http(s) 537 ( 0.00%) 712468 ( 0.00%) 1326.76
http(c) 7153 ( 0.02%) 598143 ( 0.00%) 83.62
smtp 296 ( 0.00%) 119558 ( 0.00%) 403.91
ftp 5251 ( 0.01%) 536931 ( 0.00%) 102.25
imap 106 ( 0.00%) 13170 ( 0.00%) 124.25
ssh 3477 ( 0.01%) 394330 ( 0.00%) 113.41
dns 110 ( 0.00%) 42114 ( 0.00%) 382.85
bgp 104 ( 0.00%) 13104 ( 0.00%) 126.00
realaud 4 ( 0.00%) 356 ( 0.00%) 89.00
other 6197 ( 0.02%) 592176 ( 0.00%) 95.56
udp6 34161 ( 0.10%) 7034072 ( 0.03%) 205.91
dns 33810 ( 0.10%) 6977649 ( 0.03%) 206.38
other 351 ( 0.00%) 56423 ( 0.00%) 160.75
icmp6 6888 ( 0.02%) 830362 ( 0.00%) 120.55
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 44 ( 0.00%) 38821 ( 0.00%) 882.30
tcpdump file: 201004151715.dump.gz (906.25 MB)