Traffic Trace Info
DumpFile: 201004152115.dump
FileSize: 2217.61MB
Id: 201004152115
StartTime: Thu Apr 15 21:15:01 2010
EndTime: Thu Apr 15 21:30:01 2010
TotalTime: 900.13 seconds
TotalCapSize: 1730.11MB CapLen: 96 bytes
# of packets: 31948132 (19933.36MB)
AvgRate: 185.75Mbps stddev:15.36M
IP flow (unique src/dst pair) Information
# of flows: 1180514 (avg. 27.06 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 2.7% 1.5% 1.4% 1.1% 0.8% 0.7% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 632374
Top 10 bandwidth usage (bytes/total in %):
13.3% 6.4% 6.1% 5.3% 5.3% 4.8% 4.5% 4.1% 3.8% 3.4%
# of IPv6 addresses: 1033
Top 10 bandwidth usage (bytes/total in %):
25.0% 12.5% 8.3% 6.6% 5.9% 5.7% 5.3% 4.3% 4.1% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004152115.pktlen.png)
detailed numbers
[ 32- 63]: 5333735
[ 64- 127]: 8924512
[ 128- 255]: 2286164
[ 256- 511]: 1871440
[ 512- 1023]: 795799
[ 1024- 2047]: 12736482
Protocol Breakdown
![[protocol breakdown chart]](201004152115.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31948132 (100.00%) 20901644260 (100.00%) 654.24
ip 31883693 ( 99.80%) 20891634336 ( 99.95%) 655.25
tcp 19363158 ( 60.61%) 15173725684 ( 72.60%) 783.64
http(s) 7948780 ( 24.88%) 10809455950 ( 51.72%) 1359.89
http(c) 4597557 ( 14.39%) 622051252 ( 2.98%) 135.30
squid 343961 ( 1.08%) 96849273 ( 0.46%) 281.57
smtp 404120 ( 1.26%) 90507433 ( 0.43%) 223.96
ftp 1136725 ( 3.56%) 1101327385 ( 5.27%) 968.86
pop3 11816 ( 0.04%) 7980898 ( 0.04%) 675.43
imap 1525 ( 0.00%) 385929 ( 0.00%) 253.07
telnet 774 ( 0.00%) 98320 ( 0.00%) 127.03
ssh 994337 ( 3.11%) 149246084 ( 0.71%) 150.10
dns 56273 ( 0.18%) 3889246 ( 0.02%) 69.11
bgp 147 ( 0.00%) 51601 ( 0.00%) 351.03
napster 5 ( 0.00%) 748 ( 0.00%) 149.60
realaud 13 ( 0.00%) 867 ( 0.00%) 66.69
rtsp 46680 ( 0.15%) 26190338 ( 0.13%) 561.06
icecast 798 ( 0.00%) 78318 ( 0.00%) 98.14
hotline 10 ( 0.00%) 1314 ( 0.00%) 131.40
other 3819633 ( 11.96%) 2265610488 ( 10.84%) 593.15
udp 8725587 ( 27.31%) 4158002586 ( 19.89%) 476.53
dns 838758 ( 2.63%) 144363101 ( 0.69%) 172.12
realaud 54 ( 0.00%) 4496 ( 0.00%) 83.26
halflif 124 ( 0.00%) 17132 ( 0.00%) 138.16
starcra 1232 ( 0.00%) 951854 ( 0.00%) 772.61
everque 562 ( 0.00%) 96535 ( 0.00%) 171.77
unreal 61 ( 0.00%) 7493 ( 0.00%) 122.84
quake 120 ( 0.00%) 15577 ( 0.00%) 129.81
cuseeme 95 ( 0.00%) 14860 ( 0.00%) 156.42
other 7884206 ( 24.68%) 4012351849 ( 19.20%) 508.91
icmp 1119867 ( 3.51%) 189141594 ( 0.90%) 168.90
ipip 334 ( 0.00%) 41056 ( 0.00%) 122.92
ipsec 1397 ( 0.00%) 336490 ( 0.00%) 240.87
ip6 2641859 ( 8.27%) 1348404634 ( 6.45%) 510.40
other 31491 ( 0.10%) 21982292 ( 0.11%) 698.05
frag 1719 ( 0.01%) 1682229 ( 0.01%) 978.61
ip6 64439 ( 0.20%) 10009924 ( 0.05%) 155.34
tcp6 19039 ( 0.06%) 1961269 ( 0.01%) 103.01
http(s) 41 ( 0.00%) 25296 ( 0.00%) 616.98
http(c) 4457 ( 0.01%) 403632 ( 0.00%) 90.56
smtp 281 ( 0.00%) 115235 ( 0.00%) 410.09
ftp 4701 ( 0.01%) 496909 ( 0.00%) 105.70
imap 269 ( 0.00%) 31451 ( 0.00%) 116.92
ssh 3365 ( 0.01%) 285194 ( 0.00%) 84.75
dns 152 ( 0.00%) 33075 ( 0.00%) 217.60
bgp 128 ( 0.00%) 30136 ( 0.00%) 235.44
other 5645 ( 0.02%) 540341 ( 0.00%) 95.72
udp6 38417 ( 0.12%) 7130660 ( 0.03%) 185.61
dns 38277 ( 0.12%) 7105786 ( 0.03%) 185.64
other 140 ( 0.00%) 24874 ( 0.00%) 177.67
icmp6 6892 ( 0.02%) 859975 ( 0.00%) 124.78
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 61 ( 0.00%) 53940 ( 0.00%) 884.26
tcpdump file: 201004152115.dump.gz (827.67 MB)