Traffic Trace Info
DumpFile: 201004152200.dump
FileSize: 2370.22MB
Id: 201004152200
StartTime: Thu Apr 15 22:00:01 2010
EndTime: Thu Apr 15 22:15:01 2010
TotalTime: 899.95 seconds
TotalCapSize: 1852.86MB CapLen: 96 bytes
# of packets: 33905266 (21434.56MB)
AvgRate: 199.76Mbps stddev:14.62M
IP flow (unique src/dst pair) Information
# of flows: 1206918 (avg. 28.09 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.1% 1.5% 1.4% 1.4% 1.0% 0.6% 0.5% 0.4% 0.4% 0.4%
IP address Information
# of IPv4 addresses: 669246
Top 10 bandwidth usage (bytes/total in %):
13.5% 6.8% 6.3% 5.8% 5.6% 5.2% 5.2% 4.6% 4.5% 3.3%
# of IPv6 addresses: 1099
Top 10 bandwidth usage (bytes/total in %):
23.2% 11.6% 10.8% 8.7% 6.5% 5.5% 5.4% 4.4% 4.3% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004152200.pktlen.png)
detailed numbers
[ 32- 63]: 5563507
[ 64- 127]: 9470543
[ 128- 255]: 2560019
[ 256- 511]: 1785699
[ 512- 1023]: 864913
[ 1024- 2047]: 13660585
Protocol Breakdown
![[protocol breakdown chart]](201004152200.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33905266 (100.00%) 22475768061 (100.00%) 662.90
ip 33833606 ( 99.79%) 22465000270 ( 99.95%) 663.98
tcp 21471462 ( 63.33%) 16720265504 ( 74.39%) 778.72
http(s) 8777001 ( 25.89%) 12106913375 ( 53.87%) 1379.39
http(c) 5149395 ( 15.19%) 535469129 ( 2.38%) 103.99
squid 362560 ( 1.07%) 145742216 ( 0.65%) 401.98
smtp 450040 ( 1.33%) 107900991 ( 0.48%) 239.76
ftp 1214019 ( 3.58%) 1170847269 ( 5.21%) 964.44
pop3 21108 ( 0.06%) 20376501 ( 0.09%) 965.34
imap 2263 ( 0.01%) 1331313 ( 0.01%) 588.30
telnet 378 ( 0.00%) 60986 ( 0.00%) 161.34
ssh 1490411 ( 4.40%) 206176581 ( 0.92%) 138.34
dns 52234 ( 0.15%) 3625814 ( 0.02%) 69.41
bgp 152 ( 0.00%) 55064 ( 0.00%) 362.26
napster 70 ( 0.00%) 9269 ( 0.00%) 132.41
realaud 30 ( 0.00%) 7570 ( 0.00%) 252.33
rtsp 637 ( 0.00%) 718694 ( 0.00%) 1128.25
icecast 527 ( 0.00%) 59841 ( 0.00%) 113.55
hotline 15 ( 0.00%) 973 ( 0.00%) 64.87
other 3950621 ( 11.65%) 2420969858 ( 10.77%) 612.81
udp 8479893 ( 25.01%) 4086814011 ( 18.18%) 481.94
dns 831660 ( 2.45%) 145951016 ( 0.65%) 175.49
realaud 57 ( 0.00%) 6662 ( 0.00%) 116.88
halflif 74 ( 0.00%) 6627 ( 0.00%) 89.55
starcra 4647 ( 0.01%) 3786536 ( 0.02%) 814.83
everque 2663 ( 0.01%) 471485 ( 0.00%) 177.05
unreal 130 ( 0.00%) 15190 ( 0.00%) 116.85
quake 58 ( 0.00%) 5357 ( 0.00%) 92.36
cuseeme 100 ( 0.00%) 17472 ( 0.00%) 174.72
other 7640241 ( 22.53%) 3936408477 ( 17.51%) 515.22
icmp 1055270 ( 3.11%) 190589723 ( 0.85%) 180.61
ipip 334 ( 0.00%) 40246 ( 0.00%) 120.50
ipsec 1372 ( 0.00%) 327816 ( 0.00%) 238.93
ip6 2782257 ( 8.21%) 1425197279 ( 6.34%) 512.25
other 43018 ( 0.13%) 41765691 ( 0.19%) 970.89
frag 1932 ( 0.01%) 2004058 ( 0.01%) 1037.30
ip6 71660 ( 0.21%) 10767791 ( 0.05%) 150.26
tcp6 27054 ( 0.08%) 2856428 ( 0.01%) 105.58
http(s) 43 ( 0.00%) 22167 ( 0.00%) 515.51
http(c) 11006 ( 0.03%) 1044723 ( 0.00%) 94.92
smtp 380 ( 0.00%) 265994 ( 0.00%) 699.98
ftp 5307 ( 0.02%) 554825 ( 0.00%) 104.55
imap 708 ( 0.00%) 76177 ( 0.00%) 107.59
ssh 3502 ( 0.01%) 297088 ( 0.00%) 84.83
dns 165 ( 0.00%) 31728 ( 0.00%) 192.29
bgp 105 ( 0.00%) 19866 ( 0.00%) 189.20
other 5838 ( 0.02%) 543860 ( 0.00%) 93.16
udp6 37316 ( 0.11%) 6964877 ( 0.03%) 186.65
dns 37090 ( 0.11%) 6931195 ( 0.03%) 186.88
other 226 ( 0.00%) 33682 ( 0.00%) 149.04
icmp6 7205 ( 0.02%) 896844 ( 0.00%) 124.48
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 55 ( 0.00%) 45562 ( 0.00%) 828.40
tcpdump file: 201004152200.dump.gz (889.42 MB)