Traffic Trace Info
DumpFile: 201004152015.dump
FileSize: 2484.00MB
Id: 201004152015
StartTime: Thu Apr 15 20:15:01 2010
EndTime: Thu Apr 15 20:30:01 2010
TotalTime: 899.96 seconds
TotalCapSize: 1944.36MB CapLen: 96 bytes
# of packets: 35365474 (23554.60MB)
AvgRate: 219.57Mbps stddev:21.13M
IP flow (unique src/dst pair) Information
# of flows: 1276168 (avg. 27.71 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 2.6% 1.5% 1.5% 1.3% 1.3% 1.3% 1.1% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 693603
Top 10 bandwidth usage (bytes/total in %):
10.4% 5.6% 5.1% 4.7% 4.7% 4.5% 4.2% 4.1% 4.1% 3.7%
# of IPv6 addresses: 1061
Top 10 bandwidth usage (bytes/total in %):
40.8% 40.7% 15.0% 6.3% 4.2% 3.9% 3.6% 2.9% 2.8% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004152015.pktlen.png)
detailed numbers
[ 32- 63]: 6253706
[ 64- 127]: 8909844
[ 128- 255]: 2227635
[ 256- 511]: 1933362
[ 512- 1023]: 888516
[ 1024- 2047]: 15152411
Protocol Breakdown
![[protocol breakdown chart]](201004152015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35365474 (100.00%) 24698787276 (100.00%) 698.39
ip 35296889 ( 99.81%) 24682119177 ( 99.93%) 699.27
tcp 23848393 ( 67.43%) 19450258114 ( 78.75%) 815.58
http(s) 10407813 ( 29.43%) 14364811678 ( 58.16%) 1380.20
http(c) 5824614 ( 16.47%) 717179786 ( 2.90%) 123.13
squid 318334 ( 0.90%) 96566885 ( 0.39%) 303.35
smtp 490061 ( 1.39%) 97846224 ( 0.40%) 199.66
ftp 1196889 ( 3.38%) 1156524665 ( 4.68%) 966.28
pop3 10817 ( 0.03%) 7087985 ( 0.03%) 655.26
imap 2235 ( 0.01%) 707680 ( 0.00%) 316.64
telnet 463 ( 0.00%) 50383 ( 0.00%) 108.82
ssh 1113714 ( 3.15%) 176369728 ( 0.71%) 158.36
dns 56155 ( 0.16%) 3866745 ( 0.02%) 68.86
bgp 177 ( 0.00%) 60218 ( 0.00%) 340.21
napster 81 ( 0.00%) 15411 ( 0.00%) 190.26
realaud 1 ( 0.00%) 62 ( 0.00%) 62.00
rtsp 131774 ( 0.37%) 12815707 ( 0.05%) 97.26
icecast 945 ( 0.00%) 93662 ( 0.00%) 99.11
hotline 6 ( 0.00%) 648 ( 0.00%) 108.00
other 4294306 ( 12.14%) 2816260167 ( 11.40%) 655.81
udp 7692372 ( 21.75%) 3634411765 ( 14.71%) 472.47
dns 839667 ( 2.37%) 142345631 ( 0.58%) 169.53
realaud 44 ( 0.00%) 3514 ( 0.00%) 79.86
halflif 80 ( 0.00%) 7658 ( 0.00%) 95.72
starcra 300 ( 0.00%) 29190 ( 0.00%) 97.30
everque 476 ( 0.00%) 86103 ( 0.00%) 180.89
unreal 36 ( 0.00%) 5723 ( 0.00%) 158.97
quake 164 ( 0.00%) 20078 ( 0.00%) 122.43
cuseeme 85 ( 0.00%) 13784 ( 0.00%) 162.16
other 6851165 ( 19.37%) 3491726366 ( 14.14%) 509.65
icmp 1118269 ( 3.16%) 189696689 ( 0.77%) 169.63
ipip 329 ( 0.00%) 38724 ( 0.00%) 117.70
ipsec 1461 ( 0.00%) 363902 ( 0.00%) 249.08
ip6 2625142 ( 7.42%) 1403843892 ( 5.68%) 534.77
other 10923 ( 0.03%) 3506091 ( 0.01%) 320.98
frag 1673 ( 0.00%) 1648849 ( 0.01%) 985.56
ip6 68585 ( 0.19%) 16668099 ( 0.07%) 243.03
tcp6 27178 ( 0.08%) 9037191 ( 0.04%) 332.52
http(s) 4612 ( 0.01%) 6837500 ( 0.03%) 1482.55
http(c) 5615 ( 0.02%) 525706 ( 0.00%) 93.63
smtp 189 ( 0.00%) 63387 ( 0.00%) 335.38
ftp 4342 ( 0.01%) 453508 ( 0.00%) 104.45
imap 248 ( 0.00%) 28447 ( 0.00%) 114.71
ssh 3428 ( 0.01%) 290696 ( 0.00%) 84.80
dns 116 ( 0.00%) 37135 ( 0.00%) 320.13
bgp 108 ( 0.00%) 13693 ( 0.00%) 126.79
other 8520 ( 0.02%) 787119 ( 0.00%) 92.38
udp6 34375 ( 0.10%) 6693375 ( 0.03%) 194.72
dns 34086 ( 0.10%) 6647539 ( 0.03%) 195.02
other 289 ( 0.00%) 45836 ( 0.00%) 158.60
icmp6 6917 ( 0.02%) 864188 ( 0.00%) 124.94
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 84 ( 0.00%) 69129 ( 0.00%) 822.96
tcpdump file: 201004152015.dump.gz (906.26 MB)