Traffic Trace Info
DumpFile: 201004160300.dump
FileSize: 1741.03MB
Id: 201004160300
StartTime: Fri Apr 16 03:00:00 2010
EndTime: Fri Apr 16 03:15:00 2010
TotalTime: 899.58 seconds
TotalCapSize: 1364.00MB CapLen: 96 bytes
# of packets: 24708611 (15626.41MB)
AvgRate: 156.32Mbps stddev:27.99M
IP flow (unique src/dst pair) Information
# of flows: 1082330 (avg. 22.83 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.5% 1.3% 1.3% 1.2% 1.1% 1.1% 0.9% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 599317
Top 10 bandwidth usage (bytes/total in %):
15.0% 8.9% 7.7% 5.6% 5.6% 5.5% 4.1% 2.9% 2.5% 2.5%
# of IPv6 addresses: 978
Top 10 bandwidth usage (bytes/total in %):
30.5% 9.8% 7.4% 6.1% 4.3% 4.1% 4.0% 4.0% 3.0% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004160300.pktlen.png)
detailed numbers
[ 32- 63]: 3881161
[ 64- 127]: 6846330
[ 128- 255]: 1945783
[ 256- 511]: 1491551
[ 512- 1023]: 634334
[ 1024- 2047]: 9909452
Protocol Breakdown
![[protocol breakdown chart]](201004160300.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24708611 (100.00%) 16385475079 (100.00%) 663.15
ip 24665012 ( 99.82%) 16378106144 ( 99.96%) 664.02
tcp 14845552 ( 60.08%) 11717389330 ( 71.51%) 789.29
http(s) 6895766 ( 27.91%) 9643111344 ( 58.85%) 1398.41
http(c) 3602138 ( 14.58%) 362768399 ( 2.21%) 100.71
squid 358017 ( 1.45%) 125201677 ( 0.76%) 349.71
smtp 371249 ( 1.50%) 98845508 ( 0.60%) 266.25
nntp 6 ( 0.00%) 362 ( 0.00%) 60.33
ftp 9767 ( 0.04%) 991293 ( 0.01%) 101.49
pop3 8547 ( 0.03%) 6641234 ( 0.04%) 777.03
imap 742 ( 0.00%) 125677 ( 0.00%) 169.38
telnet 1652 ( 0.01%) 135911 ( 0.00%) 82.27
ssh 722854 ( 2.93%) 109157551 ( 0.67%) 151.01
dns 51017 ( 0.21%) 5976410 ( 0.04%) 117.15
bgp 710 ( 0.00%) 498056 ( 0.00%) 701.49
napster 26 ( 0.00%) 2202 ( 0.00%) 84.69
realaud 4 ( 0.00%) 240 ( 0.00%) 60.00
rtsp 29560 ( 0.12%) 33588747 ( 0.20%) 1136.29
icecast 707 ( 0.00%) 72007 ( 0.00%) 101.85
other 2792211 ( 11.30%) 1330237972 ( 8.12%) 476.41
udp 6327510 ( 25.61%) 2987534475 ( 18.23%) 472.15
dns 701347 ( 2.84%) 123436534 ( 0.75%) 176.00
rip 49 ( 0.00%) 3777 ( 0.00%) 77.08
realaud 19 ( 0.00%) 1965 ( 0.00%) 103.42
halflif 119 ( 0.00%) 12294 ( 0.00%) 103.31
starcra 274 ( 0.00%) 28476 ( 0.00%) 103.93
everque 347 ( 0.00%) 61237 ( 0.00%) 176.48
unreal 54 ( 0.00%) 7600 ( 0.00%) 140.74
quake 53 ( 0.00%) 4328 ( 0.00%) 81.66
cuseeme 1 ( 0.00%) 88 ( 0.00%) 88.00
other 5615274 ( 22.73%) 2863244467 ( 17.47%) 509.90
icmp 934494 ( 3.78%) 161877217 ( 0.99%) 173.22
ipip 345 ( 0.00%) 41418 ( 0.00%) 120.05
ipsec 1318 ( 0.01%) 290632 ( 0.00%) 220.51
ip6 2509157 ( 10.15%) 1469683358 ( 8.97%) 585.73
other 46636 ( 0.19%) 41289714 ( 0.25%) 885.36
frag 25111 ( 0.10%) 21160193 ( 0.13%) 842.67
ip6 43599 ( 0.18%) 7368935 ( 0.04%) 169.02
tcp6 10918 ( 0.04%) 1290862 ( 0.01%) 118.23
http(s) 100 ( 0.00%) 69736 ( 0.00%) 697.36
http(c) 3691 ( 0.01%) 330782 ( 0.00%) 89.62
smtp 186 ( 0.00%) 57731 ( 0.00%) 310.38
imap 313 ( 0.00%) 37076 ( 0.00%) 118.45
ssh 4580 ( 0.02%) 539964 ( 0.00%) 117.90
dns 129 ( 0.00%) 43208 ( 0.00%) 334.95
bgp 108 ( 0.00%) 20251 ( 0.00%) 187.51
other 1811 ( 0.01%) 192114 ( 0.00%) 106.08
udp6 26627 ( 0.11%) 5285465 ( 0.03%) 198.50
dns 26376 ( 0.11%) 5240594 ( 0.03%) 198.69
other 251 ( 0.00%) 44871 ( 0.00%) 178.77
icmp6 5945 ( 0.02%) 715930 ( 0.00%) 120.43
pim6 27 ( 0.00%) 3672 ( 0.00%) 136.00
other6 82 ( 0.00%) 73006 ( 0.00%) 890.32
tcpdump file: 201004160300.dump.gz (638.01 MB)