Traffic Trace Info
DumpFile: 201004160245.dump
FileSize: 1989.15MB
Id: 201004160245
StartTime: Fri Apr 16 02:45:00 2010
EndTime: Fri Apr 16 03:00:00 2010
TotalTime: 899.79 seconds
TotalCapSize: 1553.94MB CapLen: 96 bytes
# of packets: 28521202 (17674.26MB)
AvgRate: 164.79Mbps stddev:12.65M
IP flow (unique src/dst pair) Information
# of flows: 1101448 (avg. 25.89 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 1.8% 1.7% 1.7% 1.1% 0.9% 0.9% 0.9% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 584099
Top 10 bandwidth usage (bytes/total in %):
16.2% 8.3% 7.3% 6.4% 6.1% 5.8% 4.4% 4.4% 3.7% 3.5%
# of IPv6 addresses: 927
Top 10 bandwidth usage (bytes/total in %):
32.2% 9.2% 7.8% 6.7% 4.3% 4.3% 4.3% 3.3% 3.3% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004160245.pktlen.png)
detailed numbers
[ 32- 63]: 4816571
[ 64- 127]: 8023363
[ 128- 255]: 2238616
[ 256- 511]: 1600114
[ 512- 1023]: 616585
[ 1024- 2047]: 11225953
Protocol Breakdown
![[protocol breakdown chart]](201004160245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28521202 (100.00%) 18532805449 (100.00%) 649.79
ip 28473986 ( 99.83%) 18525146677 ( 99.96%) 650.60
tcp 17340882 ( 60.80%) 13410053012 ( 72.36%) 773.32
http(s) 7991438 ( 28.02%) 11224522880 ( 60.57%) 1404.57
http(c) 4439549 ( 15.57%) 429062908 ( 2.32%) 96.65
squid 353946 ( 1.24%) 118617345 ( 0.64%) 335.13
smtp 350015 ( 1.23%) 61325948 ( 0.33%) 175.21
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 12594 ( 0.04%) 1457369 ( 0.01%) 115.72
pop3 8481 ( 0.03%) 6305451 ( 0.03%) 743.48
imap 1260 ( 0.00%) 216893 ( 0.00%) 172.14
telnet 1165 ( 0.00%) 94056 ( 0.00%) 80.73
ssh 813632 ( 2.85%) 122264611 ( 0.66%) 150.27
dns 56101 ( 0.20%) 3859143 ( 0.02%) 68.79
bgp 163 ( 0.00%) 55740 ( 0.00%) 341.96
napster 38 ( 0.00%) 12491 ( 0.00%) 328.71
realaud 21 ( 0.00%) 3128 ( 0.00%) 148.95
rtsp 48 ( 0.00%) 3552 ( 0.00%) 74.00
icecast 723 ( 0.00%) 101503 ( 0.00%) 140.39
other 3311706 ( 11.61%) 1442149872 ( 7.78%) 435.47
udp 7422111 ( 26.02%) 3535540903 ( 19.08%) 476.35
dns 723209 ( 2.54%) 130035561 ( 0.70%) 179.80
rip 71 ( 0.00%) 5529 ( 0.00%) 77.87
realaud 25 ( 0.00%) 2481 ( 0.00%) 99.24
halflif 81 ( 0.00%) 6959 ( 0.00%) 85.91
starcra 269 ( 0.00%) 33018 ( 0.00%) 122.74
everque 488 ( 0.00%) 90277 ( 0.00%) 184.99
unreal 83 ( 0.00%) 9655 ( 0.00%) 116.33
quake 58 ( 0.00%) 5060 ( 0.00%) 87.24
cuseeme 6 ( 0.00%) 589 ( 0.00%) 98.17
other 6692743 ( 23.47%) 3404930080 ( 18.37%) 508.75
icmp 949700 ( 3.33%) 157597777 ( 0.85%) 165.94
ipip 328 ( 0.00%) 42392 ( 0.00%) 129.24
ipsec 1398 ( 0.00%) 300844 ( 0.00%) 215.20
ip6 2443517 ( 8.57%) 1359223505 ( 7.33%) 556.26
other 316050 ( 1.11%) 62388244 ( 0.34%) 197.40
frag 12992 ( 0.05%) 11041163 ( 0.06%) 849.84
ip6 47216 ( 0.17%) 7658772 ( 0.04%) 162.21
tcp6 11926 ( 0.04%) 1381375 ( 0.01%) 115.83
http(s) 29 ( 0.00%) 15982 ( 0.00%) 551.10
http(c) 4080 ( 0.01%) 370973 ( 0.00%) 90.92
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 222 ( 0.00%) 83040 ( 0.00%) 374.05
imap 242 ( 0.00%) 27943 ( 0.00%) 115.47
ssh 5055 ( 0.02%) 598366 ( 0.00%) 118.37
dns 176 ( 0.00%) 59931 ( 0.00%) 340.52
bgp 107 ( 0.00%) 13423 ( 0.00%) 125.45
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 2012 ( 0.01%) 211495 ( 0.00%) 105.12
udp6 28452 ( 0.10%) 5405047 ( 0.03%) 189.97
dns 28240 ( 0.10%) 5368749 ( 0.03%) 190.11
other 212 ( 0.00%) 36298 ( 0.00%) 171.22
icmp6 6748 ( 0.02%) 814513 ( 0.00%) 120.70
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 60 ( 0.00%) 53757 ( 0.00%) 895.95
tcpdump file: 201004160245.dump.gz (734.08 MB)