Traffic Trace Info
DumpFile: 201004152215.dump
FileSize: 2518.92MB
Id: 201004152215
StartTime: Thu Apr 15 22:15:01 2010
EndTime: Thu Apr 15 22:30:00 2010
TotalTime: 899.40 seconds
TotalCapSize: 1967.22MB CapLen: 96 bytes
# of packets: 36156003 (23390.80MB)
AvgRate: 218.14Mbps stddev:19.23M
IP flow (unique src/dst pair) Information
# of flows: 1260570 (avg. 28.68 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 2.4% 1.5% 1.3% 1.2% 0.7% 0.5% 0.5% 0.5% 0.4%
IP address Information
# of IPv4 addresses: 676650
Top 10 bandwidth usage (bytes/total in %):
13.2% 6.6% 5.7% 5.6% 5.2% 5.1% 4.9% 4.5% 4.5% 3.3%
# of IPv6 addresses: 1080
Top 10 bandwidth usage (bytes/total in %):
24.0% 12.5% 9.0% 6.7% 6.1% 5.7% 5.2% 4.7% 4.6% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004152215.pktlen.png)
detailed numbers
[ 32- 63]: 5853665
[ 64- 127]: 9941654
[ 128- 255]: 2680142
[ 256- 511]: 1811494
[ 512- 1023]: 835217
[ 1024- 2047]: 15033831
Protocol Breakdown
![[protocol breakdown chart]](201004152215.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36156003 (100.00%) 24527026456 (100.00%) 678.37
ip 36090790 ( 99.82%) 24516628149 ( 99.96%) 679.30
tcp 23089516 ( 63.86%) 18373411532 ( 74.91%) 795.75
http(s) 9995796 ( 27.65%) 13887154975 ( 56.62%) 1389.30
http(c) 5671877 ( 15.69%) 622187348 ( 2.54%) 109.70
squid 327759 ( 0.91%) 134066070 ( 0.55%) 409.04
smtp 419836 ( 1.16%) 76510412 ( 0.31%) 182.24
ftp 1149244 ( 3.18%) 1106395374 ( 4.51%) 962.72
pop3 19717 ( 0.05%) 14119302 ( 0.06%) 716.10
imap 1970 ( 0.01%) 671066 ( 0.00%) 340.64
telnet 368 ( 0.00%) 46396 ( 0.00%) 126.08
ssh 1565845 ( 4.33%) 209356590 ( 0.85%) 133.70
dns 52532 ( 0.15%) 3662121 ( 0.01%) 69.71
bgp 140 ( 0.00%) 44393 ( 0.00%) 317.09
napster 35 ( 0.00%) 4123 ( 0.00%) 117.80
realaud 4 ( 0.00%) 240 ( 0.00%) 60.00
rtsp 53045 ( 0.15%) 60307684 ( 0.25%) 1136.92
icecast 575 ( 0.00%) 62994 ( 0.00%) 109.55
hotline 8 ( 0.00%) 811 ( 0.00%) 101.38
other 3830765 ( 10.60%) 2258821633 ( 9.21%) 589.65
udp 9079414 ( 25.11%) 4509923259 ( 18.39%) 496.72
dns 837040 ( 2.32%) 146484877 ( 0.60%) 175.00
realaud 76 ( 0.00%) 7250 ( 0.00%) 95.39
halflif 82 ( 0.00%) 7456 ( 0.00%) 90.93
starcra 858 ( 0.00%) 500391 ( 0.00%) 583.21
everque 4015 ( 0.01%) 612035 ( 0.00%) 152.44
unreal 81 ( 0.00%) 8353 ( 0.00%) 103.12
quake 63 ( 0.00%) 5288 ( 0.00%) 83.94
cuseeme 86 ( 0.00%) 15706 ( 0.00%) 182.63
other 8236820 ( 22.78%) 4362102873 ( 17.78%) 529.59
icmp 999560 ( 2.76%) 170593546 ( 0.70%) 170.67
ipip 356 ( 0.00%) 46284 ( 0.00%) 130.01
ipsec 12135 ( 0.03%) 6500494 ( 0.03%) 535.68
ip6 2722115 ( 7.53%) 1409063933 ( 5.74%) 517.64
other 187694 ( 0.52%) 47089101 ( 0.19%) 250.88
frag 1895 ( 0.01%) 1935170 ( 0.01%) 1021.20
ip6 65211 ( 0.18%) 10398187 ( 0.04%) 159.45
tcp6 20771 ( 0.06%) 2216897 ( 0.01%) 106.73
http(s) 53 ( 0.00%) 26327 ( 0.00%) 496.74
http(c) 5135 ( 0.01%) 502527 ( 0.00%) 97.86
smtp 456 ( 0.00%) 194114 ( 0.00%) 425.69
ftp 5333 ( 0.01%) 559278 ( 0.00%) 104.87
imap 253 ( 0.00%) 29146 ( 0.00%) 115.20
ssh 3361 ( 0.01%) 287306 ( 0.00%) 85.48
dns 146 ( 0.00%) 33663 ( 0.00%) 230.57
bgp 118 ( 0.00%) 21394 ( 0.00%) 181.31
other 5916 ( 0.02%) 563142 ( 0.00%) 95.19
udp6 37391 ( 0.10%) 7257820 ( 0.03%) 194.11
dns 37038 ( 0.10%) 7204035 ( 0.03%) 194.50
other 353 ( 0.00%) 53785 ( 0.00%) 152.37
icmp6 6955 ( 0.02%) 865187 ( 0.00%) 124.40
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 64 ( 0.00%) 54203 ( 0.00%) 846.92
tcpdump file: 201004152215.dump.gz (937.01 MB)