Traffic Trace Info
DumpFile: 201004151845.dump
FileSize: 2500.61MB
Id: 201004151845
StartTime: Thu Apr 15 18:45:01 2010
EndTime: Thu Apr 15 19:00:01 2010
TotalTime: 899.66 seconds
TotalCapSize: 1961.50MB CapLen: 96 bytes
# of packets: 35330060 (23067.87MB)
AvgRate: 215.09Mbps stddev:24.94M
IP flow (unique src/dst pair) Information
# of flows: 1160373 (avg. 30.45 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 4.8% 1.2% 0.9% 0.9% 0.8% 0.8% 0.8% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 626681
Top 10 bandwidth usage (bytes/total in %):
12.0% 7.0% 5.3% 5.1% 4.9% 4.9% 4.9% 4.6% 3.9% 3.7%
# of IPv6 addresses: 1037
Top 10 bandwidth usage (bytes/total in %):
17.7% 17.6% 15.9% 12.0% 12.0% 6.3% 4.6% 4.2% 4.1% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004151845.pktlen.png)
detailed numbers
[ 32- 63]: 5765028
[ 64- 127]: 9479457
[ 128- 255]: 2445573
[ 256- 511]: 1954576
[ 512- 1023]: 993979
[ 1024- 2047]: 14691447
Protocol Breakdown
![[protocol breakdown chart]](201004151845.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35330060 (100.00%) 24188412742 (100.00%) 684.64
ip 35267262 ( 99.82%) 24174427007 ( 99.94%) 685.46
tcp 23633867 ( 66.89%) 18697161944 ( 77.30%) 791.12
http(s) 9247302 ( 26.17%) 12695154686 ( 52.48%) 1372.85
http(c) 6065479 ( 17.17%) 768014725 ( 3.18%) 126.62
squid 287435 ( 0.81%) 63198151 ( 0.26%) 219.87
smtp 435377 ( 1.23%) 209842397 ( 0.87%) 481.98
ftp 1215952 ( 3.44%) 1178885992 ( 4.87%) 969.52
pop3 17521 ( 0.05%) 12147914 ( 0.05%) 693.33
imap 2498 ( 0.01%) 682082 ( 0.00%) 273.05
telnet 1097 ( 0.00%) 100186 ( 0.00%) 91.33
ssh 1277455 ( 3.62%) 190739111 ( 0.79%) 149.31
dns 53641 ( 0.15%) 3681698 ( 0.02%) 68.64
bgp 186 ( 0.00%) 71361 ( 0.00%) 383.66
napster 65 ( 0.00%) 7533 ( 0.00%) 115.89
realaud 21 ( 0.00%) 2503 ( 0.00%) 119.19
rtsp 212069 ( 0.60%) 130809840 ( 0.54%) 616.83
icecast 40242 ( 0.11%) 31141717 ( 0.13%) 773.86
other 4777523 ( 13.52%) 3412681808 ( 14.11%) 714.32
udp 7624845 ( 21.58%) 3652121176 ( 15.10%) 478.98
dns 779958 ( 2.21%) 134354162 ( 0.56%) 172.26
realaud 43 ( 0.00%) 4340 ( 0.00%) 100.93
halflif 98 ( 0.00%) 16259 ( 0.00%) 165.91
starcra 267 ( 0.00%) 31417 ( 0.00%) 117.67
everque 571 ( 0.00%) 117647 ( 0.00%) 206.04
unreal 115 ( 0.00%) 20060 ( 0.00%) 174.43
quake 37 ( 0.00%) 3765 ( 0.00%) 101.76
cuseeme 7 ( 0.00%) 1045 ( 0.00%) 149.29
other 6842407 ( 19.37%) 3517269623 ( 14.54%) 514.04
icmp 912605 ( 2.58%) 117811737 ( 0.49%) 129.09
ipip 339 ( 0.00%) 42302 ( 0.00%) 124.78
ipsec 1463 ( 0.00%) 377034 ( 0.00%) 257.71
ip6 3086473 ( 8.74%) 1704853333 ( 7.05%) 552.36
other 7670 ( 0.02%) 2059481 ( 0.01%) 268.51
frag 8674 ( 0.02%) 8756007 ( 0.04%) 1009.45
ip6 62798 ( 0.18%) 13985735 ( 0.06%) 222.71
tcp6 22993 ( 0.07%) 6635574 ( 0.03%) 288.59
http(s) 3226 ( 0.01%) 4453756 ( 0.02%) 1380.58
http(c) 4493 ( 0.01%) 400458 ( 0.00%) 89.13
smtp 403 ( 0.00%) 209749 ( 0.00%) 520.47
ftp 5155 ( 0.01%) 520176 ( 0.00%) 100.91
imap 256 ( 0.00%) 29411 ( 0.00%) 114.89
ssh 3579 ( 0.01%) 429718 ( 0.00%) 120.07
dns 99 ( 0.00%) 34426 ( 0.00%) 347.74
bgp 109 ( 0.00%) 13943 ( 0.00%) 127.92
other 5673 ( 0.02%) 543937 ( 0.00%) 95.88
udp6 31827 ( 0.09%) 6318980 ( 0.03%) 198.54
dns 31539 ( 0.09%) 6272498 ( 0.03%) 198.88
other 288 ( 0.00%) 46482 ( 0.00%) 161.40
icmp6 7880 ( 0.02%) 956756 ( 0.00%) 121.42
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 68 ( 0.00%) 70345 ( 0.00%) 1034.49
tcpdump file: 201004151845.dump.gz (914.47 MB)