Traffic Trace Info
DumpFile: 201004152345.dump
FileSize: 2472.45MB
Id: 201004152345
StartTime: Thu Apr 15 23:45:01 2010
EndTime: Fri Apr 16 00:00:01 2010
TotalTime: 900.35 seconds
TotalCapSize: 1931.30MB CapLen: 96 bytes
# of packets: 35464003 (24082.72MB)
AvgRate: 224.39Mbps stddev:19.80M
IP flow (unique src/dst pair) Information
# of flows: 1179594 (avg. 30.06 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 3.0% 1.6% 1.5% 1.3% 1.1% 1.0% 1.0% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 632472
Top 10 bandwidth usage (bytes/total in %):
11.9% 6.6% 6.4% 5.6% 5.6% 5.5% 4.9% 4.8% 4.1% 3.1%
# of IPv6 addresses: 1019
Top 10 bandwidth usage (bytes/total in %):
28.7% 13.4% 6.9% 6.8% 5.9% 5.8% 3.4% 3.0% 2.7% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004152345.pktlen.png)
detailed numbers
[ 32- 63]: 5702475
[ 64- 127]: 9119392
[ 128- 255]: 2559393
[ 256- 511]: 1743149
[ 512- 1023]: 692244
[ 1024- 2047]: 15647350
Protocol Breakdown
![[protocol breakdown chart]](201004152345.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35464003 (100.00%) 25252559858 (100.00%) 712.06
ip 35411311 ( 99.85%) 25243823441 ( 99.97%) 712.87
tcp 23008701 ( 64.88%) 19672859230 ( 77.90%) 855.02
http(s) 10473879 ( 29.53%) 14636725018 ( 57.96%) 1397.45
http(c) 5684151 ( 16.03%) 574438729 ( 2.27%) 101.06
squid 341608 ( 0.96%) 101158210 ( 0.40%) 296.12
smtp 461061 ( 1.30%) 115582182 ( 0.46%) 250.69
nntp 14 ( 0.00%) 1092 ( 0.00%) 78.00
ftp 9151 ( 0.03%) 886454 ( 0.00%) 96.87
pop3 11943 ( 0.03%) 9447434 ( 0.04%) 791.04
imap 2487 ( 0.01%) 1724912 ( 0.01%) 693.57
telnet 450 ( 0.00%) 47627 ( 0.00%) 105.84
ssh 673125 ( 1.90%) 83950734 ( 0.33%) 124.72
dns 55540 ( 0.16%) 3821163 ( 0.02%) 68.80
bgp 182 ( 0.00%) 84548 ( 0.00%) 464.55
napster 7 ( 0.00%) 1135 ( 0.00%) 162.14
realaud 2 ( 0.00%) 132 ( 0.00%) 66.00
rtsp 1214 ( 0.00%) 353586 ( 0.00%) 291.26
icecast 478 ( 0.00%) 50426 ( 0.00%) 105.49
hotline 11 ( 0.00%) 1607 ( 0.00%) 146.09
other 5293395 ( 14.93%) 4144584061 ( 16.41%) 782.97
udp 8482003 ( 23.92%) 3952641814 ( 15.65%) 466.00
dns 804964 ( 2.27%) 141921953 ( 0.56%) 176.31
realaud 743 ( 0.00%) 46541 ( 0.00%) 62.64
halflif 64 ( 0.00%) 5875 ( 0.00%) 91.80
starcra 219 ( 0.00%) 24531 ( 0.00%) 112.01
everque 544 ( 0.00%) 90991 ( 0.00%) 167.26
unreal 68 ( 0.00%) 7818 ( 0.00%) 114.97
quake 51 ( 0.00%) 4626 ( 0.00%) 90.71
cuseeme 118 ( 0.00%) 23205 ( 0.00%) 196.65
other 7675003 ( 21.64%) 3810381233 ( 15.09%) 496.47
icmp 942164 ( 2.66%) 153522113 ( 0.61%) 162.95
ipip 347 ( 0.00%) 42710 ( 0.00%) 123.08
ipsec 1536 ( 0.00%) 392720 ( 0.00%) 255.68
ip6 2668667 ( 7.53%) 1422155113 ( 5.63%) 532.91
other 307893 ( 0.87%) 42209741 ( 0.17%) 137.09
frag 1782 ( 0.01%) 1814024 ( 0.01%) 1017.97
ip6 52692 ( 0.15%) 8736417 ( 0.03%) 165.80
tcp6 11820 ( 0.03%) 1509156 ( 0.01%) 127.68
http(s) 116 ( 0.00%) 120757 ( 0.00%) 1041.01
http(c) 4573 ( 0.01%) 441946 ( 0.00%) 96.64
smtp 464 ( 0.00%) 186319 ( 0.00%) 401.55
imap 283 ( 0.00%) 32647 ( 0.00%) 115.36
ssh 4238 ( 0.01%) 459828 ( 0.00%) 108.50
dns 143 ( 0.00%) 48864 ( 0.00%) 341.71
bgp 110 ( 0.00%) 15293 ( 0.00%) 139.03
other 1893 ( 0.01%) 203502 ( 0.00%) 107.50
udp6 34128 ( 0.10%) 6328589 ( 0.03%) 185.44
dns 33778 ( 0.10%) 6272241 ( 0.02%) 185.69
everque 1 ( 0.00%) 99 ( 0.00%) 99.00
other 349 ( 0.00%) 56249 ( 0.00%) 161.17
icmp6 6609 ( 0.02%) 797943 ( 0.00%) 120.74
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 104 ( 0.00%) 96513 ( 0.00%) 928.01
tcpdump file: 201004152345.dump.gz (902.00 MB)