Traffic Trace Info
DumpFile: 201004152130.dump
FileSize: 2386.34MB
Id: 201004152130
StartTime: Thu Apr 15 21:30:01 2010
EndTime: Thu Apr 15 21:45:00 2010
TotalTime: 899.43 seconds
TotalCapSize: 1862.49MB CapLen: 96 bytes
# of packets: 34330296 (21869.10MB)
AvgRate: 204.00Mbps stddev:22.77M
IP flow (unique src/dst pair) Information
# of flows: 1271279 (avg. 27.00 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 2.0% 1.9% 1.4% 1.2% 0.9% 0.8% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 701084
Top 10 bandwidth usage (bytes/total in %):
12.4% 6.9% 5.8% 5.7% 5.6% 4.8% 4.7% 4.7% 3.2% 2.3%
# of IPv6 addresses: 1081
Top 10 bandwidth usage (bytes/total in %):
23.0% 10.7% 8.7% 6.7% 6.1% 5.5% 4.9% 4.4% 4.3% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004152130.pktlen.png)
detailed numbers
[ 32- 63]: 5600278
[ 64- 127]: 9530542
[ 128- 255]: 2359432
[ 256- 511]: 1986534
[ 512- 1023]: 867341
[ 1024- 2047]: 13986169
Protocol Breakdown
![[protocol breakdown chart]](201004152130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34330296 (100.00%) 22931408610 (100.00%) 667.96
ip 34262746 ( 99.80%) 22920525120 ( 99.95%) 668.96
tcp 21421146 ( 62.40%) 17048288157 ( 74.34%) 795.86
http(s) 8909489 ( 25.95%) 12224169991 ( 53.31%) 1372.04
http(c) 5102854 ( 14.86%) 542753088 ( 2.37%) 106.36
squid 479738 ( 1.40%) 118532523 ( 0.52%) 247.08
smtp 436358 ( 1.27%) 98770746 ( 0.43%) 226.35
ftp 1146547 ( 3.34%) 1091252108 ( 4.76%) 951.77
pop3 13919 ( 0.04%) 9629551 ( 0.04%) 691.83
imap 2294 ( 0.01%) 684419 ( 0.00%) 298.35
telnet 773 ( 0.00%) 104458 ( 0.00%) 135.13
ssh 1379977 ( 4.02%) 665660049 ( 2.90%) 482.37
dns 54235 ( 0.16%) 3748902 ( 0.02%) 69.12
bgp 167 ( 0.00%) 53946 ( 0.00%) 323.03
napster 28 ( 0.00%) 2756 ( 0.00%) 98.43
realaud 12 ( 0.00%) 1519 ( 0.00%) 126.58
rtsp 34124 ( 0.10%) 7828718 ( 0.03%) 229.42
icecast 562 ( 0.00%) 55223 ( 0.00%) 98.26
other 3859957 ( 11.24%) 2285033440 ( 9.96%) 591.98
udp 9028636 ( 26.30%) 4335856997 ( 18.91%) 480.23
dns 839428 ( 2.45%) 145062996 ( 0.63%) 172.81
realaud 539 ( 0.00%) 36851 ( 0.00%) 68.37
halflif 113 ( 0.00%) 9907 ( 0.00%) 87.67
starcra 124 ( 0.00%) 13240 ( 0.00%) 106.77
everque 661 ( 0.00%) 103560 ( 0.00%) 156.67
unreal 51 ( 0.00%) 6315 ( 0.00%) 123.82
quake 97 ( 0.00%) 15929 ( 0.00%) 164.22
cuseeme 101 ( 0.00%) 14987 ( 0.00%) 148.39
other 8187247 ( 23.85%) 4190457915 ( 18.27%) 511.83
icmp 1163851 ( 3.39%) 204485080 ( 0.89%) 175.70
ipip 341 ( 0.00%) 42452 ( 0.00%) 124.49
ipsec 1365 ( 0.00%) 330270 ( 0.00%) 241.96
ip6 2620321 ( 7.63%) 1310461387 ( 5.71%) 500.11
other 27086 ( 0.08%) 21060777 ( 0.09%) 777.55
frag 2252 ( 0.01%) 2237110 ( 0.01%) 993.39
ip6 67550 ( 0.20%) 10883490 ( 0.05%) 161.12
tcp6 22982 ( 0.07%) 2927824 ( 0.01%) 127.40
http(s) 78 ( 0.00%) 49379 ( 0.00%) 633.06
http(c) 6689 ( 0.02%) 748911 ( 0.00%) 111.96
smtp 460 ( 0.00%) 340310 ( 0.00%) 739.80
ftp 5341 ( 0.02%) 563196 ( 0.00%) 105.45
imap 420 ( 0.00%) 47729 ( 0.00%) 113.64
ssh 3629 ( 0.01%) 509510 ( 0.00%) 140.40
dns 145 ( 0.00%) 40173 ( 0.00%) 277.06
bgp 149 ( 0.00%) 27923 ( 0.00%) 187.40
other 6071 ( 0.02%) 600693 ( 0.00%) 98.94
udp6 37480 ( 0.11%) 7015901 ( 0.03%) 187.19
dns 37352 ( 0.11%) 6996970 ( 0.03%) 187.33
other 128 ( 0.00%) 18931 ( 0.00%) 147.90
icmp6 6980 ( 0.02%) 867822 ( 0.00%) 124.33
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 77 ( 0.00%) 67727 ( 0.00%) 879.57
tcpdump file: 201004152130.dump.gz (879.66 MB)