Traffic Trace Info
DumpFile: 201004160100.dump
FileSize: 2310.01MB
Id: 201004160100
StartTime: Fri Apr 16 01:00:00 2010
EndTime: Fri Apr 16 01:15:01 2010
TotalTime: 900.27 seconds
TotalCapSize: 1803.05MB CapLen: 96 bytes
# of packets: 33223527 (21903.93MB)
AvgRate: 204.10Mbps stddev:16.32M
IP flow (unique src/dst pair) Information
# of flows: 1322831 (avg. 25.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 3.5% 2.8% 1.9% 1.4% 1.2% 1.2% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 803767
Top 10 bandwidth usage (bytes/total in %):
13.4% 6.7% 6.5% 5.8% 5.7% 5.0% 4.9% 3.7% 3.7% 3.6%
# of IPv6 addresses: 988
Top 10 bandwidth usage (bytes/total in %):
55.3% 55.3% 13.4% 4.4% 3.2% 2.7% 1.9% 1.8% 1.8% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004160100.pktlen.png)
detailed numbers
[ 32- 63]: 5470747
[ 64- 127]: 8647998
[ 128- 255]: 2672937
[ 256- 511]: 1593555
[ 512- 1023]: 659252
[ 1024- 2047]: 14179038
Protocol Breakdown
![[protocol breakdown chart]](201004160100.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33223527 (100.00%) 22967934308 (100.00%) 691.32
ip 33146450 ( 99.77%) 22949438888 ( 99.92%) 692.36
tcp 20587042 ( 61.97%) 17213975053 ( 74.95%) 836.16
http(s) 10655764 ( 32.07%) 14980131953 ( 65.22%) 1405.82
http(c) 5803423 ( 17.47%) 609865204 ( 2.66%) 105.09
squid 262073 ( 0.79%) 80317568 ( 0.35%) 306.47
smtp 372339 ( 1.12%) 89438392 ( 0.39%) 240.21
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 11101 ( 0.03%) 1133297 ( 0.00%) 102.09
pop3 8755 ( 0.03%) 6527070 ( 0.03%) 745.52
imap 4451 ( 0.01%) 3116309 ( 0.01%) 700.14
telnet 1106 ( 0.00%) 102862 ( 0.00%) 93.00
ssh 377045 ( 1.13%) 70215423 ( 0.31%) 186.23
dns 51765 ( 0.16%) 3692766 ( 0.02%) 71.34
bgp 144 ( 0.00%) 51515 ( 0.00%) 357.74
napster 6 ( 0.00%) 372 ( 0.00%) 62.00
realaud 26 ( 0.00%) 3220 ( 0.00%) 123.85
rtsp 369 ( 0.00%) 100425 ( 0.00%) 272.15
icecast 679 ( 0.00%) 69346 ( 0.00%) 102.13
other 3037994 ( 9.14%) 1369209209 ( 5.96%) 450.70
udp 8556519 ( 25.75%) 3957049452 ( 17.23%) 462.46
dns 755968 ( 2.28%) 134533507 ( 0.59%) 177.96
realaud 20 ( 0.00%) 1712 ( 0.00%) 85.60
halflif 52 ( 0.00%) 4322 ( 0.00%) 83.12
starcra 238 ( 0.00%) 28625 ( 0.00%) 120.27
everque 491 ( 0.00%) 88246 ( 0.00%) 179.73
unreal 59 ( 0.00%) 8057 ( 0.00%) 136.56
quake 30 ( 0.00%) 2873 ( 0.00%) 95.77
cuseeme 95 ( 0.00%) 16783 ( 0.00%) 176.66
other 7799310 ( 23.48%) 3822219928 ( 16.64%) 490.07
icmp 974677 ( 2.93%) 167296351 ( 0.73%) 171.64
ipip 352 ( 0.00%) 45052 ( 0.00%) 127.99
ipsec 1653 ( 0.00%) 367614 ( 0.00%) 222.39
ip6 2699103 ( 8.12%) 1556618083 ( 6.78%) 576.72
other 327104 ( 0.98%) 54087283 ( 0.24%) 165.35
frag 1863 ( 0.01%) 1942857 ( 0.01%) 1042.86
ip6 77077 ( 0.23%) 18495420 ( 0.08%) 239.96
tcp6 40057 ( 0.12%) 11823854 ( 0.05%) 295.18
http(s) 49 ( 0.00%) 26425 ( 0.00%) 539.29
http(c) 5902 ( 0.02%) 513071 ( 0.00%) 86.93
smtp 180 ( 0.00%) 90522 ( 0.00%) 502.90
ftp 3 ( 0.00%) 282 ( 0.00%) 94.00
imap 381 ( 0.00%) 44025 ( 0.00%) 115.55
ssh 5000 ( 0.02%) 592016 ( 0.00%) 118.40
dns 100 ( 0.00%) 29636 ( 0.00%) 296.36
bgp 114 ( 0.00%) 15469 ( 0.00%) 135.69
other 28328 ( 0.09%) 10512408 ( 0.05%) 371.10
udp6 29923 ( 0.09%) 5754833 ( 0.03%) 192.32
dns 29630 ( 0.09%) 5708746 ( 0.02%) 192.67
other 293 ( 0.00%) 46087 ( 0.00%) 157.29
icmp6 7005 ( 0.02%) 863268 ( 0.00%) 123.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 62 ( 0.00%) 49385 ( 0.00%) 796.53
tcpdump file: 201004160100.dump.gz (836.74 MB)