Traffic Trace Info
DumpFile: 201004152045.dump
FileSize: 2459.76MB
Id: 201004152045
StartTime: Thu Apr 15 20:45:01 2010
EndTime: Thu Apr 15 21:00:01 2010
TotalTime: 900.49 seconds
TotalCapSize: 1919.89MB CapLen: 96 bytes
# of packets: 35379965 (23072.37MB)
AvgRate: 214.92Mbps stddev:16.78M
IP flow (unique src/dst pair) Information
# of flows: 1265414 (avg. 27.96 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 1.5% 1.4% 1.3% 0.9% 0.9% 0.7% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 699668
Top 10 bandwidth usage (bytes/total in %):
12.3% 6.4% 5.6% 5.4% 5.3% 4.9% 4.8% 4.8% 4.6% 3.6%
# of IPv6 addresses: 1022
Top 10 bandwidth usage (bytes/total in %):
25.6% 8.5% 6.1% 6.0% 5.3% 5.0% 4.5% 4.4% 4.2% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004152045.pktlen.png)
detailed numbers
[ 32- 63]: 5651743
[ 64- 127]: 9545914
[ 128- 255]: 2473127
[ 256- 511]: 1842087
[ 512- 1023]: 1051135
[ 1024- 2047]: 14815959
Protocol Breakdown
![[protocol breakdown chart]](201004152045.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35379965 (100.00%) 24193132855 (100.00%) 683.81
ip 35318643 ( 99.83%) 24183361862 ( 99.96%) 684.72
tcp 22352741 ( 63.18%) 17983583390 ( 74.33%) 804.54
http(s) 9262060 ( 26.18%) 12576498239 ( 51.98%) 1357.85
http(c) 5346165 ( 15.11%) 703513698 ( 2.91%) 131.59
squid 346789 ( 0.98%) 109896095 ( 0.45%) 316.90
smtp 483411 ( 1.37%) 93794973 ( 0.39%) 194.03
ftp 1204103 ( 3.40%) 1168230120 ( 4.83%) 970.21
pop3 14288 ( 0.04%) 9491659 ( 0.04%) 664.31
imap 2030 ( 0.01%) 469031 ( 0.00%) 231.05
telnet 391 ( 0.00%) 49019 ( 0.00%) 125.37
ssh 1098328 ( 3.10%) 160044118 ( 0.66%) 145.72
dns 61771 ( 0.17%) 6722386 ( 0.03%) 108.83
bgp 170 ( 0.00%) 74635 ( 0.00%) 439.03
napster 36 ( 0.00%) 2913 ( 0.00%) 80.92
realaud 20 ( 0.00%) 3528 ( 0.00%) 176.40
rtsp 137303 ( 0.39%) 54953212 ( 0.23%) 400.23
icecast 741 ( 0.00%) 83682 ( 0.00%) 112.93
hotline 4 ( 0.00%) 248 ( 0.00%) 62.00
other 4395126 ( 12.42%) 3099755534 ( 12.81%) 705.27
udp 9268794 ( 26.20%) 4637521538 ( 19.17%) 500.34
dns 847656 ( 2.40%) 143471638 ( 0.59%) 169.26
realaud 1865 ( 0.01%) 116766 ( 0.00%) 62.61
halflif 67 ( 0.00%) 6038 ( 0.00%) 90.12
starcra 242 ( 0.00%) 24683 ( 0.00%) 102.00
everque 558 ( 0.00%) 94293 ( 0.00%) 168.98
unreal 38 ( 0.00%) 5197 ( 0.00%) 136.76
quake 83 ( 0.00%) 12036 ( 0.00%) 145.01
cuseeme 90 ( 0.00%) 14932 ( 0.00%) 165.91
other 8417832 ( 23.79%) 4493584225 ( 18.57%) 533.82
icmp 1079110 ( 3.05%) 187322591 ( 0.77%) 173.59
ipip 336 ( 0.00%) 40956 ( 0.00%) 121.89
ipsec 1341 ( 0.00%) 325870 ( 0.00%) 243.01
ip6 2591527 ( 7.32%) 1358485853 ( 5.62%) 524.20
other 24794 ( 0.07%) 16081664 ( 0.07%) 648.61
frag 1713 ( 0.00%) 1752527 ( 0.01%) 1023.07
ip6 61322 ( 0.17%) 9770993 ( 0.04%) 159.34
tcp6 19988 ( 0.06%) 2306366 ( 0.01%) 115.39
http(s) 299 ( 0.00%) 270669 ( 0.00%) 905.25
http(c) 5447 ( 0.02%) 574664 ( 0.00%) 105.50
smtp 262 ( 0.00%) 97294 ( 0.00%) 371.35
ftp 4651 ( 0.01%) 494384 ( 0.00%) 106.30
imap 422 ( 0.00%) 43495 ( 0.00%) 103.07
ssh 3404 ( 0.01%) 289552 ( 0.00%) 85.06
dns 100 ( 0.00%) 26596 ( 0.00%) 265.96
bgp 114 ( 0.00%) 17268 ( 0.00%) 151.47
other 5289 ( 0.01%) 492444 ( 0.00%) 93.11
udp6 34145 ( 0.10%) 6499817 ( 0.03%) 190.36
dns 33963 ( 0.10%) 6470533 ( 0.03%) 190.52
other 182 ( 0.00%) 29284 ( 0.00%) 160.90
icmp6 7076 ( 0.02%) 874129 ( 0.00%) 123.53
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 83 ( 0.00%) 86601 ( 0.00%) 1043.39
tcpdump file: 201004152045.dump.gz (907.06 MB)