Traffic Trace Info
DumpFile: 201004151900.dump
FileSize: 2586.08MB
Id: 201004151900
StartTime: Thu Apr 15 19:00:01 2010
EndTime: Thu Apr 15 19:15:01 2010
TotalTime: 900.56 seconds
TotalCapSize: 2033.87MB CapLen: 96 bytes
# of packets: 36189291 (24223.18MB)
AvgRate: 225.63Mbps stddev:33.73M
IP flow (unique src/dst pair) Information
# of flows: 1092445 (avg. 33.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 2.3% 1.7% 1.3% 1.0% 0.9% 0.9% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 594018
Top 10 bandwidth usage (bytes/total in %):
13.2% 10.3% 7.0% 4.7% 4.7% 4.6% 4.5% 4.2% 4.1% 3.9%
# of IPv6 addresses: 1022
Top 10 bandwidth usage (bytes/total in %):
23.9% 10.4% 8.5% 7.0% 5.7% 4.4% 4.2% 3.1% 3.0% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004151900.pktlen.png)
detailed numbers
[ 32- 63]: 5638462
[ 64- 127]: 9987990
[ 128- 255]: 2232545
[ 256- 511]: 1833299
[ 512- 1023]: 885407
[ 1024- 2047]: 15611588
Protocol Breakdown
![[protocol breakdown chart]](201004151900.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36189291 (100.00%) 25399849927 (100.00%) 701.86
ip 36129553 ( 99.83%) 25389580682 ( 99.96%) 702.74
tcp 25021190 ( 69.14%) 20176314605 ( 79.43%) 806.37
http(s) 10858906 ( 30.01%) 15133662584 ( 59.58%) 1393.66
http(c) 7066295 ( 19.53%) 852502677 ( 3.36%) 120.64
squid 333339 ( 0.92%) 113012834 ( 0.44%) 339.03
smtp 387142 ( 1.07%) 128116857 ( 0.50%) 330.93
nntp 3 ( 0.00%) 186 ( 0.00%) 62.00
ftp 1258131 ( 3.48%) 1211227115 ( 4.77%) 962.72
pop3 16674 ( 0.05%) 11767100 ( 0.05%) 705.72
imap 2381 ( 0.01%) 470461 ( 0.00%) 197.59
telnet 1216 ( 0.00%) 122377 ( 0.00%) 100.64
ssh 1075862 ( 2.97%) 166513342 ( 0.66%) 154.77
dns 53270 ( 0.15%) 3676741 ( 0.01%) 69.02
bgp 174 ( 0.00%) 78256 ( 0.00%) 449.75
napster 68 ( 0.00%) 7544 ( 0.00%) 110.94
realaud 7 ( 0.00%) 793 ( 0.00%) 113.29
rtsp 130729 ( 0.36%) 36600717 ( 0.14%) 279.97
icecast 39386 ( 0.11%) 30276701 ( 0.12%) 768.72
hotline 1 ( 0.00%) 66 ( 0.00%) 66.00
other 3797598 ( 10.49%) 2488277774 ( 9.80%) 655.22
udp 7023555 ( 19.41%) 3290447643 ( 12.95%) 468.49
dns 772982 ( 2.14%) 132269730 ( 0.52%) 171.12
realaud 17 ( 0.00%) 1836 ( 0.00%) 108.00
halflif 27 ( 0.00%) 3305 ( 0.00%) 122.41
starcra 217 ( 0.00%) 21734 ( 0.00%) 100.16
everque 589 ( 0.00%) 100363 ( 0.00%) 170.40
unreal 63 ( 0.00%) 9642 ( 0.00%) 153.05
quake 71 ( 0.00%) 5937 ( 0.00%) 83.62
cuseeme 3 ( 0.00%) 283 ( 0.00%) 94.33
other 6248790 ( 17.27%) 3157854920 ( 12.43%) 505.35
icmp 964232 ( 2.66%) 138668559 ( 0.55%) 143.81
ipip 347 ( 0.00%) 43642 ( 0.00%) 125.77
ipsec 1815 ( 0.01%) 457402 ( 0.00%) 252.01
ip6 3104509 ( 8.58%) 1775828110 ( 6.99%) 572.02
other 13905 ( 0.04%) 7820721 ( 0.03%) 562.44
frag 3898 ( 0.01%) 3352749 ( 0.01%) 860.12
ip6 59738 ( 0.17%) 10269245 ( 0.04%) 171.90
tcp6 20276 ( 0.06%) 2635447 ( 0.01%) 129.98
http(s) 575 ( 0.00%) 685158 ( 0.00%) 1191.58
http(c) 4877 ( 0.01%) 434999 ( 0.00%) 89.19
smtp 94 ( 0.00%) 46102 ( 0.00%) 490.45
ftp 5089 ( 0.01%) 511245 ( 0.00%) 100.46
imap 368 ( 0.00%) 43032 ( 0.00%) 116.93
ssh 3312 ( 0.01%) 296408 ( 0.00%) 89.50
dns 149 ( 0.00%) 51310 ( 0.00%) 344.36
bgp 125 ( 0.00%) 23894 ( 0.00%) 191.15
other 5687 ( 0.02%) 543299 ( 0.00%) 95.53
udp6 31895 ( 0.09%) 6657445 ( 0.03%) 208.73
dns 31636 ( 0.09%) 6616158 ( 0.03%) 209.13
other 259 ( 0.00%) 41287 ( 0.00%) 159.41
icmp6 7464 ( 0.02%) 908980 ( 0.00%) 121.78
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 73 ( 0.00%) 63293 ( 0.00%) 867.03
tcpdump file: 201004151900.dump.gz (926.58 MB)