Traffic Trace Info
DumpFile: 201004151730.dump
FileSize: 2573.39MB
Id: 201004151730
StartTime: Thu Apr 15 17:30:01 2010
EndTime: Thu Apr 15 17:45:01 2010
TotalTime: 900.45 seconds
TotalCapSize: 2014.84MB CapLen: 96 bytes
# of packets: 36604326 (24067.02MB)
AvgRate: 224.24Mbps stddev:19.32M
IP flow (unique src/dst pair) Information
# of flows: 1016581 (avg. 36.01 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 3.1% 1.9% 1.2% 1.0% 0.9% 0.9% 0.7% 0.6% 0.5%
IP address Information
# of IPv4 addresses: 535033
Top 10 bandwidth usage (bytes/total in %):
13.0% 7.2% 4.9% 4.9% 4.5% 4.1% 3.3% 3.3% 3.3% 3.2%
# of IPv6 addresses: 1149
Top 10 bandwidth usage (bytes/total in %):
21.7% 8.0% 6.6% 5.9% 5.9% 5.1% 4.5% 4.4% 4.1% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004151730.pktlen.png)
detailed numbers
[ 32- 63]: 6502139
[ 64- 127]: 9420173
[ 128- 255]: 2216010
[ 256- 511]: 1963796
[ 512- 1023]: 992657
[ 1024- 2047]: 15509551
Protocol Breakdown
![[protocol breakdown chart]](201004151730.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36604326 (100.00%) 25236094708 (100.00%) 689.43
ip 36540875 ( 99.83%) 25224568546 ( 99.95%) 690.31
tcp 24143909 ( 65.96%) 18924959063 ( 74.99%) 783.84
http(s) 9784421 ( 26.73%) 13378145161 ( 53.01%) 1367.29
http(c) 6682024 ( 18.25%) 925672113 ( 3.67%) 138.53
squid 308295 ( 0.84%) 78354035 ( 0.31%) 254.15
smtp 376678 ( 1.03%) 90610518 ( 0.36%) 240.55
nntp 6 ( 0.00%) 372 ( 0.00%) 62.00
ftp 1274334 ( 3.48%) 1225769660 ( 4.86%) 961.89
pop3 22478 ( 0.06%) 11334962 ( 0.04%) 504.27
imap 2603 ( 0.01%) 752453 ( 0.00%) 289.07
telnet 877 ( 0.00%) 94405 ( 0.00%) 107.65
ssh 895337 ( 2.45%) 137011281 ( 0.54%) 153.03
dns 54527 ( 0.15%) 3784830 ( 0.01%) 69.41
bgp 178 ( 0.00%) 78602 ( 0.00%) 441.58
napster 93 ( 0.00%) 10241 ( 0.00%) 110.12
realaud 40 ( 0.00%) 5873 ( 0.00%) 146.82
rtsp 134553 ( 0.37%) 54754066 ( 0.22%) 406.93
icecast 31132 ( 0.09%) 18126678 ( 0.07%) 582.25
hotline 13 ( 0.00%) 1172 ( 0.00%) 90.15
other 4576312 ( 12.50%) 3000452161 ( 11.89%) 655.65
udp 8515642 ( 23.26%) 4378593527 ( 17.35%) 514.18
dns 834457 ( 2.28%) 142280012 ( 0.56%) 170.51
realaud 53 ( 0.00%) 5015 ( 0.00%) 94.62
halflif 116 ( 0.00%) 15400 ( 0.00%) 132.76
starcra 204 ( 0.00%) 21930 ( 0.00%) 107.50
everque 2429 ( 0.01%) 415618 ( 0.00%) 171.11
unreal 148 ( 0.00%) 22545 ( 0.00%) 152.33
quake 53 ( 0.00%) 4406 ( 0.00%) 83.13
cuseeme 2 ( 0.00%) 180 ( 0.00%) 90.00
other 7677849 ( 20.98%) 4235640147 ( 16.78%) 551.67
icmp 811549 ( 2.22%) 94746968 ( 0.38%) 116.75
ipip 313 ( 0.00%) 37601 ( 0.00%) 120.13
ipsec 1577 ( 0.00%) 399622 ( 0.00%) 253.41
ip6 3022517 ( 8.26%) 1819331383 ( 7.21%) 601.93
other 45368 ( 0.12%) 6500382 ( 0.03%) 143.28
frag 1757 ( 0.00%) 1781996 ( 0.01%) 1014.23
ip6 63451 ( 0.17%) 11526162 ( 0.05%) 181.65
tcp6 21728 ( 0.06%) 3398741 ( 0.01%) 156.42
http(s) 784 ( 0.00%) 1010256 ( 0.00%) 1288.59
http(c) 4343 ( 0.01%) 391801 ( 0.00%) 90.21
smtp 248 ( 0.00%) 93828 ( 0.00%) 378.34
ftp 5343 ( 0.01%) 536459 ( 0.00%) 100.40
imap 379 ( 0.00%) 41440 ( 0.00%) 109.34
ssh 4220 ( 0.01%) 684592 ( 0.00%) 162.23
dns 144 ( 0.00%) 37755 ( 0.00%) 262.19
bgp 110 ( 0.00%) 14752 ( 0.00%) 134.11
other 6157 ( 0.02%) 587858 ( 0.00%) 95.48
udp6 34787 ( 0.10%) 7214926 ( 0.03%) 207.40
dns 34451 ( 0.09%) 7163621 ( 0.03%) 207.94
everque 1 ( 0.00%) 100 ( 0.00%) 100.00
other 335 ( 0.00%) 51205 ( 0.00%) 152.85
icmp6 6828 ( 0.02%) 827402 ( 0.00%) 121.18
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 78 ( 0.00%) 81013 ( 0.00%) 1038.63
tcpdump file: 201004151730.dump.gz (924.62 MB)