Traffic Trace Info
DumpFile: 201004152300.dump
FileSize: 2610.97MB
Id: 201004152300
StartTime: Thu Apr 15 23:00:01 2010
EndTime: Thu Apr 15 23:15:01 2010
TotalTime: 900.20 seconds
TotalCapSize: 2039.71MB CapLen: 96 bytes
# of packets: 37437932 (24884.28MB)
AvgRate: 231.90Mbps stddev:18.01M
IP flow (unique src/dst pair) Information
# of flows: 1305164 (avg. 28.68 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 2.2% 1.6% 1.2% 1.0% 1.0% 0.8% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 720692
Top 10 bandwidth usage (bytes/total in %):
12.1% 6.0% 5.8% 5.2% 4.6% 4.5% 4.3% 4.3% 4.2% 3.4%
# of IPv6 addresses: 1052
Top 10 bandwidth usage (bytes/total in %):
25.4% 15.1% 7.0% 6.0% 6.0% 5.4% 4.1% 3.6% 2.9% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004152300.pktlen.png)
detailed numbers
[ 32- 63]: 6066854
[ 64- 127]: 9930924
[ 128- 255]: 2759577
[ 256- 511]: 1814534
[ 512- 1023]: 840824
[ 1024- 2047]: 16025219
Protocol Breakdown
![[protocol breakdown chart]](201004152300.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37437932 (100.00%) 26093054691 (100.00%) 696.97
ip 37379893 ( 99.84%) 26083218610 ( 99.96%) 697.79
tcp 24142599 ( 64.49%) 20129139919 ( 77.14%) 833.76
http(s) 10776330 ( 28.78%) 14984718124 ( 57.43%) 1390.52
http(c) 5706081 ( 15.24%) 614174899 ( 2.35%) 107.64
squid 287413 ( 0.77%) 102403137 ( 0.39%) 356.29
smtp 471970 ( 1.26%) 100431081 ( 0.38%) 212.79
ftp 1165590 ( 3.11%) 1126471323 ( 4.32%) 966.44
pop3 14097 ( 0.04%) 10774537 ( 0.04%) 764.31
imap 2838 ( 0.01%) 1327479 ( 0.01%) 467.75
telnet 351 ( 0.00%) 69810 ( 0.00%) 198.89
ssh 1502025 ( 4.01%) 197959700 ( 0.76%) 131.80
dns 52799 ( 0.14%) 3646178 ( 0.01%) 69.06
bgp 166 ( 0.00%) 63376 ( 0.00%) 381.78
napster 5 ( 0.00%) 677 ( 0.00%) 135.40
realaud 43 ( 0.00%) 4032 ( 0.00%) 93.77
rtsp 135936 ( 0.36%) 107398309 ( 0.41%) 790.07
icecast 469 ( 0.00%) 56633 ( 0.00%) 120.75
other 4026484 ( 10.76%) 2879640504 ( 11.04%) 715.17
udp 8889137 ( 23.74%) 4190506178 ( 16.06%) 471.42
dns 805099 ( 2.15%) 142088754 ( 0.54%) 176.49
realaud 116 ( 0.00%) 13031 ( 0.00%) 112.34
halflif 264 ( 0.00%) 17322 ( 0.00%) 65.61
starcra 559 ( 0.00%) 259332 ( 0.00%) 463.92
everque 554 ( 0.00%) 114612 ( 0.00%) 206.88
unreal 74 ( 0.00%) 8238 ( 0.00%) 111.32
quake 39 ( 0.00%) 3312 ( 0.00%) 84.92
cuseeme 78 ( 0.00%) 12995 ( 0.00%) 166.60
other 8082077 ( 21.59%) 4047836260 ( 15.51%) 500.84
icmp 1044742 ( 2.79%) 171507960 ( 0.66%) 164.16
ipip 319 ( 0.00%) 38602 ( 0.00%) 121.01
ipsec 1421 ( 0.00%) 340398 ( 0.00%) 239.55
ip6 2991798 ( 7.99%) 1520215611 ( 5.83%) 508.13
other 309877 ( 0.83%) 71469942 ( 0.27%) 230.64
frag 2154 ( 0.01%) 2218738 ( 0.01%) 1030.05
ip6 58039 ( 0.16%) 9836081 ( 0.04%) 169.47
tcp6 12932 ( 0.03%) 1762476 ( 0.01%) 136.29
http(s) 85 ( 0.00%) 75518 ( 0.00%) 888.45
http(c) 5182 ( 0.01%) 588789 ( 0.00%) 113.62
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 653 ( 0.00%) 290656 ( 0.00%) 445.11
ftp 7 ( 0.00%) 686 ( 0.00%) 98.00
imap 336 ( 0.00%) 39544 ( 0.00%) 117.69
ssh 4181 ( 0.01%) 442654 ( 0.00%) 105.87
dns 96 ( 0.00%) 21900 ( 0.00%) 228.12
bgp 131 ( 0.00%) 30733 ( 0.00%) 234.60
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 2258 ( 0.01%) 271774 ( 0.00%) 120.36
udp6 36611 ( 0.10%) 6946837 ( 0.03%) 189.75
dns 36355 ( 0.10%) 6907924 ( 0.03%) 190.01
realaud 1 ( 0.00%) 110 ( 0.00%) 110.00
everque 1 ( 0.00%) 109 ( 0.00%) 109.00
other 254 ( 0.00%) 38694 ( 0.00%) 152.34
icmp6 8351 ( 0.02%) 1020772 ( 0.00%) 122.23
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 115 ( 0.00%) 101916 ( 0.00%) 886.23
tcpdump file: 201004152300.dump.gz (960.03 MB)