Traffic Trace Info
DumpFile: 201004152145.dump
FileSize: 2465.37MB
Id: 201004152145
StartTime: Thu Apr 15 21:45:00 2010
EndTime: Thu Apr 15 22:00:01 2010
TotalTime: 900.57 seconds
TotalCapSize: 1927.30MB CapLen: 96 bytes
# of packets: 35262904 (22542.64MB)
AvgRate: 209.99Mbps stddev:29.55M
IP flow (unique src/dst pair) Information
# of flows: 1324639 (avg. 26.62 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.3% 4.5% 1.5% 1.5% 1.4% 0.6% 0.6% 0.5% 0.5% 0.4%
IP address Information
# of IPv4 addresses: 750525
Top 10 bandwidth usage (bytes/total in %):
11.8% 7.3% 7.3% 5.9% 5.9% 5.0% 5.0% 4.7% 4.7% 4.2%
# of IPv6 addresses: 1088
Top 10 bandwidth usage (bytes/total in %):
21.4% 21.4% 17.8% 8.6% 8.1% 6.8% 5.3% 4.7% 4.2% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004152145.pktlen.png)
detailed numbers
[ 32- 63]: 5791219
[ 64- 127]: 9716061
[ 128- 255]: 2402728
[ 256- 511]: 1992795
[ 512- 1023]: 912820
[ 1024- 2047]: 14447281
Protocol Breakdown
![[protocol breakdown chart]](201004152145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35262904 (100.00%) 23637676503 (100.00%) 670.33
ip 35188955 ( 99.79%) 23623627104 ( 99.94%) 671.34
tcp 22332654 ( 63.33%) 17667622213 ( 74.74%) 791.11
http(s) 8517926 ( 24.16%) 11699534967 ( 49.50%) 1373.52
http(c) 5183916 ( 14.70%) 558343230 ( 2.36%) 107.71
squid 347306 ( 0.98%) 123059939 ( 0.52%) 354.33
smtp 465773 ( 1.32%) 109962384 ( 0.47%) 236.09
ftp 1158468 ( 3.29%) 1109388586 ( 4.69%) 957.63
pop3 13615 ( 0.04%) 10138949 ( 0.04%) 744.69
imap 1941 ( 0.01%) 935892 ( 0.00%) 482.17
telnet 787 ( 0.00%) 88246 ( 0.00%) 112.13
ssh 2652496 ( 7.52%) 1919088143 ( 8.12%) 723.50
dns 53778 ( 0.15%) 3691852 ( 0.02%) 68.65
bgp 158 ( 0.00%) 59335 ( 0.00%) 375.54
napster 46 ( 0.00%) 5669 ( 0.00%) 123.24
rtsp 26885 ( 0.08%) 39261868 ( 0.17%) 1460.36
icecast 545 ( 0.00%) 66545 ( 0.00%) 122.10
other 3909014 ( 11.09%) 2093996608 ( 8.86%) 535.68
udp 9021524 ( 25.58%) 4352891438 ( 18.42%) 482.50
dns 836678 ( 2.37%) 145485154 ( 0.62%) 173.88
realaud 70 ( 0.00%) 6490 ( 0.00%) 92.71
halflif 112 ( 0.00%) 9261 ( 0.00%) 82.69
starcra 1560 ( 0.00%) 1103189 ( 0.00%) 707.17
everque 573 ( 0.00%) 128429 ( 0.00%) 224.13
unreal 144 ( 0.00%) 13405 ( 0.00%) 93.09
quake 68 ( 0.00%) 5946 ( 0.00%) 87.44
cuseeme 101 ( 0.00%) 20101 ( 0.00%) 199.02
other 8181978 ( 23.20%) 4206022923 ( 17.79%) 514.06
icmp 1034100 ( 2.93%) 183835255 ( 0.78%) 177.77
ipip 363 ( 0.00%) 45763 ( 0.00%) 126.07
ipsec 1394 ( 0.00%) 330588 ( 0.00%) 237.15
ip6 2772774 ( 7.86%) 1398817448 ( 5.92%) 504.48
other 26146 ( 0.07%) 20084399 ( 0.08%) 768.16
frag 1991 ( 0.01%) 1967497 ( 0.01%) 988.20
ip6 73949 ( 0.21%) 14049399 ( 0.06%) 189.99
tcp6 28660 ( 0.08%) 6038115 ( 0.03%) 210.68
http(s) 2040 ( 0.01%) 3014927 ( 0.01%) 1477.91
http(c) 10564 ( 0.03%) 1009469 ( 0.00%) 95.56
smtp 641 ( 0.00%) 496509 ( 0.00%) 774.59
ftp 5364 ( 0.02%) 565909 ( 0.00%) 105.50
imap 302 ( 0.00%) 35250 ( 0.00%) 116.72
ssh 3480 ( 0.01%) 295236 ( 0.00%) 84.84
dns 133 ( 0.00%) 47095 ( 0.00%) 354.10
bgp 109 ( 0.00%) 14549 ( 0.00%) 133.48
other 6027 ( 0.02%) 559171 ( 0.00%) 92.78
udp6 38350 ( 0.11%) 7117624 ( 0.03%) 185.60
dns 38083 ( 0.11%) 7074263 ( 0.03%) 185.76
other 267 ( 0.00%) 43361 ( 0.00%) 162.40
icmp6 6865 ( 0.02%) 849798 ( 0.00%) 123.79
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 44 ( 0.00%) 39782 ( 0.00%) 904.14
tcpdump file: 201004152145.dump.gz (909.02 MB)