Traffic Trace Info
DumpFile: 201004152245.dump
FileSize: 2520.20MB
Id: 201004152245
StartTime: Thu Apr 15 22:45:01 2010
EndTime: Thu Apr 15 23:00:01 2010
TotalTime: 900.03 seconds
TotalCapSize: 1967.34MB CapLen: 96 bytes
# of packets: 36231798 (23850.15MB)
AvgRate: 222.29Mbps stddev:20.29M
IP flow (unique src/dst pair) Information
# of flows: 1110088 (avg. 32.64 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 2.0% 1.6% 1.4% 1.3% 1.1% 0.8% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 610398
Top 10 bandwidth usage (bytes/total in %):
12.7% 5.8% 5.8% 5.0% 4.7% 4.6% 4.6% 4.2% 4.0% 3.0%
# of IPv6 addresses: 1020
Top 10 bandwidth usage (bytes/total in %):
27.3% 14.4% 7.9% 6.5% 6.5% 5.8% 3.8% 3.6% 3.6% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004152245.pktlen.png)
detailed numbers
[ 32- 63]: 5928754
[ 64- 127]: 9617387
[ 128- 255]: 2778278
[ 256- 511]: 1782454
[ 512- 1023]: 786478
[ 1024- 2047]: 15338447
Protocol Breakdown
![[protocol breakdown chart]](201004152245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36231798 (100.00%) 25008698830 (100.00%) 690.24
ip 36176074 ( 99.85%) 24999561408 ( 99.96%) 691.05
tcp 23377579 ( 64.52%) 19229868002 ( 76.89%) 822.58
http(s) 10432237 ( 28.79%) 14441797396 ( 57.75%) 1384.34
http(c) 5577349 ( 15.39%) 616020049 ( 2.46%) 110.45
squid 274098 ( 0.76%) 86958084 ( 0.35%) 317.25
smtp 576264 ( 1.59%) 139967860 ( 0.56%) 242.89
ftp 1183737 ( 3.27%) 1144383516 ( 4.58%) 966.75
pop3 14383 ( 0.04%) 9936328 ( 0.04%) 690.84
imap 3460 ( 0.01%) 1402773 ( 0.01%) 405.43
telnet 264 ( 0.00%) 37600 ( 0.00%) 142.42
ssh 1411273 ( 3.90%) 193454380 ( 0.77%) 137.08
dns 54401 ( 0.15%) 3751160 ( 0.01%) 68.95
bgp 171 ( 0.00%) 65360 ( 0.00%) 382.22
napster 63 ( 0.00%) 8697 ( 0.00%) 138.05
realaud 10 ( 0.00%) 1004 ( 0.00%) 100.40
rtsp 116 ( 0.00%) 31704 ( 0.00%) 273.31
icecast 309 ( 0.00%) 26357 ( 0.00%) 85.30
other 3849441 ( 10.62%) 2592025554 ( 10.36%) 673.35
udp 8704041 ( 24.02%) 4108552309 ( 16.43%) 472.03
dns 807922 ( 2.23%) 141512791 ( 0.57%) 175.16
realaud 62 ( 0.00%) 6191 ( 0.00%) 99.85
halflif 504 ( 0.00%) 32634 ( 0.00%) 64.75
starcra 1741 ( 0.00%) 1210258 ( 0.00%) 695.15
everque 517 ( 0.00%) 95032 ( 0.00%) 183.81
unreal 98 ( 0.00%) 10695 ( 0.00%) 109.13
quake 46 ( 0.00%) 4842 ( 0.00%) 105.26
cuseeme 79 ( 0.00%) 12697 ( 0.00%) 160.72
other 7892738 ( 21.78%) 3965420176 ( 15.86%) 502.41
icmp 929139 ( 2.56%) 155804940 ( 0.62%) 167.69
ipip 367 ( 0.00%) 47870 ( 0.00%) 130.44
ipsec 1389 ( 0.00%) 330142 ( 0.00%) 237.68
ip6 2851830 ( 7.87%) 1460411547 ( 5.84%) 512.10
other 311729 ( 0.86%) 44546598 ( 0.18%) 142.90
frag 3521 ( 0.01%) 4002537 ( 0.02%) 1136.76
ip6 55724 ( 0.15%) 9137422 ( 0.04%) 163.98
tcp6 11831 ( 0.03%) 1551832 ( 0.01%) 131.17
http(s) 55 ( 0.00%) 35849 ( 0.00%) 651.80
http(c) 3806 ( 0.01%) 388235 ( 0.00%) 102.01
smtp 425 ( 0.00%) 187114 ( 0.00%) 440.27
imap 343 ( 0.00%) 39501 ( 0.00%) 115.16
ssh 5059 ( 0.01%) 603478 ( 0.00%) 119.29
dns 149 ( 0.00%) 46865 ( 0.00%) 314.53
bgp 103 ( 0.00%) 13080 ( 0.00%) 126.99
other 1891 ( 0.01%) 237710 ( 0.00%) 125.71
udp6 36137 ( 0.10%) 6630552 ( 0.03%) 183.48
dns 35898 ( 0.10%) 6593663 ( 0.03%) 183.68
everque 2 ( 0.00%) 222 ( 0.00%) 111.00
other 237 ( 0.00%) 36667 ( 0.00%) 154.71
icmp6 7687 ( 0.02%) 916829 ( 0.00%) 119.27
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 39 ( 0.00%) 34129 ( 0.00%) 875.10
tcpdump file: 201004152245.dump.gz (930.60 MB)