Traffic Trace Info
DumpFile: 201004160015.dump
FileSize: 2425.15MB
Id: 201004160015
StartTime: Fri Apr 16 00:15:01 2010
EndTime: Fri Apr 16 00:30:00 2010
TotalTime: 899.65 seconds
TotalCapSize: 1892.38MB CapLen: 96 bytes
# of packets: 34914606 (24033.37MB)
AvgRate: 224.11Mbps stddev:19.76M
IP flow (unique src/dst pair) Information
# of flows: 1125899 (avg. 31.01 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 3.2% 2.5% 2.1% 1.7% 1.6% 1.3% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 621224
Top 10 bandwidth usage (bytes/total in %):
10.9% 6.1% 4.8% 4.4% 4.2% 4.0% 4.0% 3.8% 3.4% 3.4%
# of IPv6 addresses: 1020
Top 10 bandwidth usage (bytes/total in %):
29.2% 8.8% 6.9% 6.0% 4.9% 4.3% 4.1% 3.8% 3.8% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004160015.pktlen.png)
detailed numbers
[ 32- 63]: 5354116
[ 64- 127]: 8937748
[ 128- 255]: 2552986
[ 256- 511]: 1721207
[ 512- 1023]: 725461
[ 1024- 2047]: 15623088
Protocol Breakdown
![[protocol breakdown chart]](201004160015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34914606 (100.00%) 25200819487 (100.00%) 721.78
ip 34863871 ( 99.85%) 25192246557 ( 99.97%) 722.59
tcp 22208541 ( 63.61%) 19477588741 ( 77.29%) 877.03
http(s) 10326957 ( 29.58%) 14347547636 ( 56.93%) 1389.33
http(c) 5110813 ( 14.64%) 508383021 ( 2.02%) 99.47
squid 331787 ( 0.95%) 131363628 ( 0.52%) 395.93
smtp 445091 ( 1.27%) 147958574 ( 0.59%) 332.42
ftp 13396 ( 0.04%) 1266025 ( 0.01%) 94.51
pop3 15933 ( 0.05%) 11052939 ( 0.04%) 693.71
imap 2642 ( 0.01%) 950534 ( 0.00%) 359.78
telnet 8070 ( 0.02%) 5475583 ( 0.02%) 678.51
ssh 625357 ( 1.79%) 98558540 ( 0.39%) 157.60
dns 56179 ( 0.16%) 3899853 ( 0.02%) 69.42
bgp 156 ( 0.00%) 59098 ( 0.00%) 378.83
napster 189 ( 0.00%) 19505 ( 0.00%) 103.20
realaud 14 ( 0.00%) 1696 ( 0.00%) 121.14
rtsp 1268 ( 0.00%) 297443 ( 0.00%) 234.58
icecast 4003 ( 0.01%) 3015255 ( 0.01%) 753.25
hotline 13 ( 0.00%) 814 ( 0.00%) 62.62
other 5266667 ( 15.08%) 4217738237 ( 16.74%) 800.84
udp 8479332 ( 24.29%) 3827588250 ( 15.19%) 451.40
dns 776123 ( 2.22%) 138874297 ( 0.55%) 178.93
realaud 947 ( 0.00%) 59814 ( 0.00%) 63.16
halflif 82 ( 0.00%) 8230 ( 0.00%) 100.37
starcra 199 ( 0.00%) 21238 ( 0.00%) 106.72
everque 622 ( 0.00%) 123100 ( 0.00%) 197.91
unreal 84 ( 0.00%) 9560 ( 0.00%) 113.81
quake 47 ( 0.00%) 4117 ( 0.00%) 87.60
cuseeme 71 ( 0.00%) 11666 ( 0.00%) 164.31
other 7700848 ( 22.06%) 3688291804 ( 14.64%) 478.95
icmp 942014 ( 2.70%) 153971791 ( 0.61%) 163.45
ipip 334 ( 0.00%) 40872 ( 0.00%) 122.37
ipsec 1547 ( 0.00%) 388186 ( 0.00%) 250.93
ip6 2759950 ( 7.90%) 1549950743 ( 6.15%) 561.59
other 472153 ( 1.35%) 182717974 ( 0.73%) 386.99
frag 2317 ( 0.01%) 2392573 ( 0.01%) 1032.62
ip6 50735 ( 0.15%) 8572930 ( 0.03%) 168.97
tcp6 12683 ( 0.04%) 1589581 ( 0.01%) 125.33
http(s) 41 ( 0.00%) 25296 ( 0.00%) 616.98
http(c) 4503 ( 0.01%) 401879 ( 0.00%) 89.25
smtp 502 ( 0.00%) 250532 ( 0.00%) 499.07
imap 246 ( 0.00%) 28395 ( 0.00%) 115.43
ssh 5040 ( 0.01%) 596524 ( 0.00%) 118.36
dns 83 ( 0.00%) 26420 ( 0.00%) 318.31
bgp 99 ( 0.00%) 12851 ( 0.00%) 129.81
other 2169 ( 0.01%) 247684 ( 0.00%) 114.19
udp6 31072 ( 0.09%) 6064165 ( 0.02%) 195.16
dns 30730 ( 0.09%) 6011647 ( 0.02%) 195.63
quake 1 ( 0.00%) 116 ( 0.00%) 116.00
other 341 ( 0.00%) 52402 ( 0.00%) 153.67
icmp6 6872 ( 0.02%) 851117 ( 0.00%) 123.85
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 78 ( 0.00%) 63987 ( 0.00%) 820.35
tcpdump file: 201004160015.dump.gz (881.18 MB)