Traffic Trace Info
DumpFile: 201004151930.dump
FileSize: 2733.85MB
Id: 201004151930
StartTime: Thu Apr 15 19:30:01 2010
EndTime: Thu Apr 15 19:45:01 2010
TotalTime: 899.55 seconds
TotalCapSize: -1945.90MB CapLen: 96 bytes
# of packets: 38256220 (26102.87MB)
AvgRate: 243.41Mbps stddev:26.37M
IP flow (unique src/dst pair) Information
# of flows: 1150520 (avg. 33.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 1.6% 1.6% 1.4% 1.2% 1.2% 1.2% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 630295
Top 10 bandwidth usage (bytes/total in %):
18.1% 10.7% 5.7% 5.1% 4.5% 4.5% 4.2% 3.9% 3.6% 3.0%
# of IPv6 addresses: 1044
Top 10 bandwidth usage (bytes/total in %):
27.5% 9.9% 6.5% 6.0% 5.5% 5.3% 4.7% 3.3% 3.3% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004151930.pktlen.png)
detailed numbers
[ 32- 63]: 5709441
[ 64- 127]: 10741217
[ 128- 255]: 2233310
[ 256- 511]: 1796366
[ 512- 1023]: 969731
[ 1024- 2047]: 16806155
Protocol Breakdown
![[protocol breakdown chart]](201004151930.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38256220 (100.00%) 27370841966 (100.00%) 715.46
ip 38197873 ( 99.85%) 27361760763 ( 99.97%) 716.32
tcp 26777154 ( 69.99%) 21764571641 ( 79.52%) 812.80
http(s) 11691050 ( 30.56%) 16432309755 ( 60.04%) 1405.55
http(c) 7567740 ( 19.78%) 886254718 ( 3.24%) 117.11
squid 352339 ( 0.92%) 119765524 ( 0.44%) 339.92
smtp 390713 ( 1.02%) 138858351 ( 0.51%) 355.40
ftp 1263632 ( 3.30%) 1224396624 ( 4.47%) 968.95
pop3 18085 ( 0.05%) 14577288 ( 0.05%) 806.04
imap 1688 ( 0.00%) 473208 ( 0.00%) 280.34
telnet 3924 ( 0.01%) 2767239 ( 0.01%) 705.21
ssh 1249688 ( 3.27%) 199442026 ( 0.73%) 159.59
dns 55085 ( 0.14%) 3767543 ( 0.01%) 68.40
bgp 201 ( 0.00%) 82979 ( 0.00%) 412.83
napster 524 ( 0.00%) 232608 ( 0.00%) 443.91
realaud 16 ( 0.00%) 1673 ( 0.00%) 104.56
rtsp 164620 ( 0.43%) 37911815 ( 0.14%) 230.30
icecast 826 ( 0.00%) 72853 ( 0.00%) 88.20
hotline 12 ( 0.00%) 1577 ( 0.00%) 131.42
other 4017006 ( 10.50%) 2703655560 ( 9.88%) 673.05
udp 7617218 ( 19.91%) 3885511661 ( 14.20%) 510.10
dns 767094 ( 2.01%) 130603856 ( 0.48%) 170.26
realaud 34 ( 0.00%) 3298 ( 0.00%) 97.00
halflif 57 ( 0.00%) 4957 ( 0.00%) 86.96
starcra 230 ( 0.00%) 23333 ( 0.00%) 101.45
everque 591 ( 0.00%) 98157 ( 0.00%) 166.09
unreal 44 ( 0.00%) 6014 ( 0.00%) 136.68
quake 161 ( 0.00%) 19769 ( 0.00%) 122.79
cuseeme 89 ( 0.00%) 16277 ( 0.00%) 182.89
other 6848542 ( 17.90%) 3754522634 ( 13.72%) 548.22
icmp 1018440 ( 2.66%) 144373992 ( 0.53%) 141.76
ipip 378 ( 0.00%) 47668 ( 0.00%) 126.11
ipsec 1665 ( 0.00%) 404982 ( 0.00%) 243.23
ip6 2757933 ( 7.21%) 1556128203 ( 5.69%) 564.24
other 25085 ( 0.07%) 10722616 ( 0.04%) 427.45
frag 1781 ( 0.00%) 1813408 ( 0.01%) 1018.20
ip6 58347 ( 0.15%) 9081203 ( 0.03%) 155.64
tcp6 20383 ( 0.05%) 2117032 ( 0.01%) 103.86
http(s) 37 ( 0.00%) 19751 ( 0.00%) 533.81
http(c) 4686 ( 0.01%) 417800 ( 0.00%) 89.16
smtp 473 ( 0.00%) 209530 ( 0.00%) 442.98
ftp 4631 ( 0.01%) 471097 ( 0.00%) 101.73
imap 366 ( 0.00%) 42976 ( 0.00%) 117.42
ssh 3296 ( 0.01%) 279000 ( 0.00%) 84.65
dns 79 ( 0.00%) 27852 ( 0.00%) 352.56
bgp 108 ( 0.00%) 15075 ( 0.00%) 139.58
other 6707 ( 0.02%) 633951 ( 0.00%) 94.52
udp6 31069 ( 0.08%) 6045415 ( 0.02%) 194.58
dns 30815 ( 0.08%) 6006691 ( 0.02%) 194.93
other 254 ( 0.00%) 38724 ( 0.00%) 152.46
icmp6 6791 ( 0.02%) 836086 ( 0.00%) 123.12
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 74 ( 0.00%) 78590 ( 0.00%) 1062.03
tcpdump file: 201004151930.dump.gz (977.06 MB)