Traffic Trace Info
DumpFile: 201004151915.dump
FileSize: 2798.04MB
Id: 201004151915
StartTime: Thu Apr 15 19:15:01 2010
EndTime: Thu Apr 15 19:30:01 2010
TotalTime: 900.02 seconds
TotalCapSize: -1892.87MB CapLen: 96 bytes
# of packets: 38987795 (26541.25MB)
AvgRate: 247.37Mbps stddev:25.74M
IP flow (unique src/dst pair) Information
# of flows: 1116032 (avg. 34.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 1.9% 1.8% 1.6% 1.2% 1.1% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 608948
Top 10 bandwidth usage (bytes/total in %):
16.8% 9.8% 6.6% 5.0% 4.3% 4.3% 4.0% 3.6% 3.6% 3.6%
# of IPv6 addresses: 1057
Top 10 bandwidth usage (bytes/total in %):
24.8% 9.0% 8.3% 6.4% 6.3% 5.9% 5.0% 4.5% 4.5% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004151915.pktlen.png)
detailed numbers
[ 32- 63]: 5899182
[ 64- 127]: 10918292
[ 128- 255]: 2235415
[ 256- 511]: 1862901
[ 512- 1023]: 954357
[ 1024- 2047]: 17117648
Protocol Breakdown
![[protocol breakdown chart]](201004151915.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38987795 (100.00%) 27830514641 (100.00%) 713.83
ip 38928180 ( 99.85%) 27820450462 ( 99.96%) 714.66
tcp 27626169 ( 70.86%) 22380968970 ( 80.42%) 810.14
http(s) 12259278 ( 31.44%) 17179824612 ( 61.73%) 1401.37
http(c) 7800625 ( 20.01%) 889933253 ( 3.20%) 114.08
squid 347681 ( 0.89%) 118147581 ( 0.42%) 339.82
smtp 405637 ( 1.04%) 155814940 ( 0.56%) 384.12
ftp 1229197 ( 3.15%) 1192207069 ( 4.28%) 969.91
pop3 12660 ( 0.03%) 8682200 ( 0.03%) 685.80
imap 1978 ( 0.01%) 703289 ( 0.00%) 355.56
telnet 8286 ( 0.02%) 5398746 ( 0.02%) 651.55
ssh 1426801 ( 3.66%) 232937249 ( 0.84%) 163.26
dns 56376 ( 0.14%) 3871838 ( 0.01%) 68.68
bgp 162 ( 0.00%) 59897 ( 0.00%) 369.73
napster 40 ( 0.00%) 3523 ( 0.00%) 88.08
realaud 30 ( 0.00%) 5451 ( 0.00%) 181.70
rtsp 75497 ( 0.19%) 5003903 ( 0.02%) 66.28
icecast 3008 ( 0.01%) 2036758 ( 0.01%) 677.11
hotline 11 ( 0.00%) 1830 ( 0.00%) 166.36
other 3998894 ( 10.26%) 2586336351 ( 9.29%) 646.76
udp 7206240 ( 18.48%) 3465284221 ( 12.45%) 480.87
dns 763059 ( 1.96%) 130600060 ( 0.47%) 171.15
rip 1 ( 0.00%) 109 ( 0.00%) 109.00
realaud 319 ( 0.00%) 21089 ( 0.00%) 66.11
halflif 51 ( 0.00%) 5516 ( 0.00%) 108.16
starcra 243 ( 0.00%) 27657 ( 0.00%) 113.81
everque 599 ( 0.00%) 110423 ( 0.00%) 184.35
unreal 62 ( 0.00%) 8577 ( 0.00%) 138.34
quake 46 ( 0.00%) 4600 ( 0.00%) 100.00
cuseeme 43 ( 0.00%) 8447 ( 0.00%) 196.44
other 6441267 ( 16.52%) 3334283857 ( 11.98%) 517.64
icmp 942608 ( 2.42%) 129359453 ( 0.46%) 137.24
ipip 320 ( 0.00%) 39968 ( 0.00%) 124.90
ipsec 1537 ( 0.00%) 367478 ( 0.00%) 239.09
ip6 3136755 ( 8.05%) 1836847965 ( 6.60%) 585.59
other 14551 ( 0.04%) 7582407 ( 0.03%) 521.09
frag 2469 ( 0.01%) 2332145 ( 0.01%) 944.57
ip6 59615 ( 0.15%) 10064179 ( 0.04%) 168.82
tcp6 20838 ( 0.05%) 2731241 ( 0.01%) 131.07
http(s) 603 ( 0.00%) 674886 ( 0.00%) 1119.21
http(c) 4679 ( 0.01%) 410410 ( 0.00%) 87.71
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 306 ( 0.00%) 138850 ( 0.00%) 453.76
ftp 5256 ( 0.01%) 526980 ( 0.00%) 100.26
imap 248 ( 0.00%) 28447 ( 0.00%) 114.71
ssh 3397 ( 0.01%) 301758 ( 0.00%) 88.83
dns 166 ( 0.00%) 57617 ( 0.00%) 347.09
bgp 106 ( 0.00%) 13593 ( 0.00%) 128.24
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 6074 ( 0.02%) 578478 ( 0.00%) 95.24
udp6 31750 ( 0.08%) 6433573 ( 0.02%) 202.63
dns 31458 ( 0.08%) 6387557 ( 0.02%) 203.05
starcra 1 ( 0.00%) 104 ( 0.00%) 104.00
other 291 ( 0.00%) 45912 ( 0.00%) 157.77
icmp6 6941 ( 0.02%) 848544 ( 0.00%) 122.25
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 55 ( 0.00%) 46605 ( 0.00%) 847.36
tcpdump file: 201004151915.dump.gz (997.03 MB)