Traffic Trace Info
DumpFile: 201004151815.dump
FileSize: 2450.56MB
Id: 201004151815
StartTime: Thu Apr 15 18:15:01 2010
EndTime: Thu Apr 15 18:30:00 2010
TotalTime: 899.54 seconds
TotalCapSize: 1919.36MB CapLen: 96 bytes
# of packets: 34811875 (22365.86MB)
AvgRate: 208.58Mbps stddev:14.47M
IP flow (unique src/dst pair) Information
# of flows: 1118697 (avg. 31.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.5% 5.0% 1.0% 0.9% 0.7% 0.6% 0.5% 0.5% 0.5% 0.4%
IP address Information
# of IPv4 addresses: 588535
Top 10 bandwidth usage (bytes/total in %):
12.4% 8.5% 7.1% 5.6% 5.1% 5.1% 4.9% 4.5% 3.9% 3.3%
# of IPv6 addresses: 1076
Top 10 bandwidth usage (bytes/total in %):
21.9% 9.9% 9.9% 8.4% 8.0% 6.8% 5.2% 4.4% 4.1% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004151815.pktlen.png)
detailed numbers
[ 32- 63]: 6363353
[ 64- 127]: 8892045
[ 128- 255]: 2489852
[ 256- 511]: 1881769
[ 512- 1023]: 848863
[ 1024- 2047]: 14335993
Protocol Breakdown
![[protocol breakdown chart]](201004151815.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34811875 (100.00%) 23452303920 (100.00%) 673.69
ip 34749909 ( 99.82%) 23440886904 ( 99.95%) 674.56
tcp 22601805 ( 64.93%) 17709151545 ( 75.51%) 783.53
http(s) 8886491 ( 25.53%) 12089504950 ( 51.55%) 1360.44
http(c) 6038772 ( 17.35%) 810921766 ( 3.46%) 134.29
squid 306899 ( 0.88%) 78381012 ( 0.33%) 255.40
smtp 332736 ( 0.96%) 85361723 ( 0.36%) 256.54
nntp 13 ( 0.00%) 814 ( 0.00%) 62.62
ftp 1256768 ( 3.61%) 1200924638 ( 5.12%) 955.57
pop3 18968 ( 0.05%) 8281741 ( 0.04%) 436.62
imap 2542 ( 0.01%) 652354 ( 0.00%) 256.63
telnet 1012 ( 0.00%) 92768 ( 0.00%) 91.67
ssh 887174 ( 2.55%) 132248450 ( 0.56%) 149.07
dns 60157 ( 0.17%) 6584074 ( 0.03%) 109.45
bgp 169 ( 0.00%) 65836 ( 0.00%) 389.56
napster 113 ( 0.00%) 10577 ( 0.00%) 93.60
realaud 40 ( 0.00%) 4157 ( 0.00%) 103.92
rtsp 262432 ( 0.75%) 109870183 ( 0.47%) 418.66
icecast 40586 ( 0.12%) 31380205 ( 0.13%) 773.18
hotline 1376 ( 0.00%) 90916 ( 0.00%) 66.07
other 4505553 ( 12.94%) 3154775141 ( 13.45%) 700.20
udp 7605402 ( 21.85%) 3603962449 ( 15.37%) 473.87
dns 796016 ( 2.29%) 135783887 ( 0.58%) 170.58
realaud 28 ( 0.00%) 2747 ( 0.00%) 98.11
halflif 112 ( 0.00%) 15503 ( 0.00%) 138.42
starcra 275 ( 0.00%) 31142 ( 0.00%) 113.24
everque 635 ( 0.00%) 109312 ( 0.00%) 172.14
unreal 99 ( 0.00%) 16472 ( 0.00%) 166.38
quake 53 ( 0.00%) 5094 ( 0.00%) 96.11
cuseeme 3 ( 0.00%) 264 ( 0.00%) 88.00
other 6807807 ( 19.56%) 3467774441 ( 14.79%) 509.38
icmp 1091957 ( 3.14%) 118890635 ( 0.51%) 108.88
ipip 366 ( 0.00%) 46404 ( 0.00%) 126.79
ipsec 1537 ( 0.00%) 392358 ( 0.00%) 255.28
ip6 3438767 ( 9.88%) 2006232250 ( 8.55%) 583.42
other 10075 ( 0.03%) 2211263 ( 0.01%) 219.48
frag 2753 ( 0.01%) 2584478 ( 0.01%) 938.79
ip6 61964 ( 0.18%) 11416896 ( 0.05%) 184.25
tcp6 21250 ( 0.06%) 3310032 ( 0.01%) 155.77
http(s) 65 ( 0.00%) 41645 ( 0.00%) 640.69
http(c) 4270 ( 0.01%) 386539 ( 0.00%) 90.52
smtp 567 ( 0.00%) 268078 ( 0.00%) 472.80
ftp 5238 ( 0.02%) 533679 ( 0.00%) 101.89
imap 423 ( 0.00%) 43378 ( 0.00%) 102.55
ssh 4569 ( 0.01%) 1413818 ( 0.01%) 309.44
dns 236 ( 0.00%) 60575 ( 0.00%) 256.67
bgp 108 ( 0.00%) 14019 ( 0.00%) 129.81
other 5774 ( 0.02%) 548301 ( 0.00%) 94.96
udp6 33482 ( 0.10%) 7173943 ( 0.03%) 214.26
dns 33225 ( 0.10%) 7130907 ( 0.03%) 214.62
other 257 ( 0.00%) 43036 ( 0.00%) 167.46
icmp6 7139 ( 0.02%) 875187 ( 0.00%) 122.59
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 62 ( 0.00%) 53518 ( 0.00%) 863.19
tcpdump file: 201004151815.dump.gz (891.97 MB)