Traffic Trace Info
DumpFile: 201004160315.dump
FileSize: 2046.09MB
Id: 201004160315
StartTime: Fri Apr 16 03:15:00 2010
EndTime: Fri Apr 16 03:30:01 2010
TotalTime: 900.93 seconds
TotalCapSize: 1605.40MB CapLen: 96 bytes
# of packets: 28880542 (18654.65MB)
AvgRate: 174.14Mbps stddev:15.46M
IP flow (unique src/dst pair) Information
# of flows: 1392456 (avg. 20.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 2.2% 2.2% 1.5% 1.5% 1.4% 1.2% 1.2% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 796912
Top 10 bandwidth usage (bytes/total in %):
14.3% 9.3% 8.4% 7.5% 6.3% 5.0% 4.9% 4.7% 3.9% 3.1%
# of IPv6 addresses: 969
Top 10 bandwidth usage (bytes/total in %):
31.0% 8.8% 7.4% 6.3% 4.5% 4.5% 4.1% 4.1% 3.0% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004160315.pktlen.png)
detailed numbers
[ 32- 63]: 4689608
[ 64- 127]: 7651772
[ 128- 255]: 2138580
[ 256- 511]: 1783694
[ 512- 1023]: 792461
[ 1024- 2047]: 11824427
Protocol Breakdown
![[protocol breakdown chart]](201004160315.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28880542 (100.00%) 19560820543 (100.00%) 677.30
ip 28832572 ( 99.83%) 19552761815 ( 99.96%) 678.15
tcp 17765440 ( 61.51%) 14126180463 ( 72.22%) 795.15
http(s) 8232911 ( 28.51%) 11532192249 ( 58.96%) 1400.74
http(c) 4204985 ( 14.56%) 408668586 ( 2.09%) 97.19
squid 471358 ( 1.63%) 108989731 ( 0.56%) 231.22
smtp 402619 ( 1.39%) 79026860 ( 0.40%) 196.28
ftp 8637 ( 0.03%) 863933 ( 0.00%) 100.03
pop3 10728 ( 0.04%) 9417424 ( 0.05%) 877.84
imap 625 ( 0.00%) 74618 ( 0.00%) 119.39
telnet 2384 ( 0.01%) 170963 ( 0.00%) 71.71
ssh 789233 ( 2.73%) 123353128 ( 0.63%) 156.29
dns 59383 ( 0.21%) 7369406 ( 0.04%) 124.10
bgp 629 ( 0.00%) 439629 ( 0.00%) 698.93
napster 4 ( 0.00%) 244 ( 0.00%) 61.00
realaud 2 ( 0.00%) 120 ( 0.00%) 60.00
rtsp 213 ( 0.00%) 68187 ( 0.00%) 320.13
icecast 807 ( 0.00%) 96339 ( 0.00%) 119.38
hotline 6 ( 0.00%) 372 ( 0.00%) 62.00
other 3580291 ( 12.40%) 1855411174 ( 9.49%) 518.23
udp 6786372 ( 23.50%) 3391305027 ( 17.34%) 499.72
dns 825787 ( 2.86%) 207739802 ( 1.06%) 251.57
rip 27 ( 0.00%) 2025 ( 0.00%) 75.00
realaud 16 ( 0.00%) 1923 ( 0.00%) 120.19
halflif 107 ( 0.00%) 10342 ( 0.00%) 96.65
starcra 292 ( 0.00%) 34220 ( 0.00%) 117.19
everque 533 ( 0.00%) 97958 ( 0.00%) 183.79
unreal 94 ( 0.00%) 12212 ( 0.00%) 129.91
quake 48 ( 0.00%) 4197 ( 0.00%) 87.44
cuseeme 2 ( 0.00%) 200 ( 0.00%) 100.00
other 5954691 ( 20.62%) 3182859356 ( 16.27%) 534.51
icmp 1149780 ( 3.98%) 181993125 ( 0.93%) 158.29
ipip 313 ( 0.00%) 40422 ( 0.00%) 129.14
ipsec 1355 ( 0.00%) 305618 ( 0.00%) 225.55
ip6 3096241 ( 10.72%) 1821857779 ( 9.31%) 588.41
other 33071 ( 0.11%) 31079381 ( 0.16%) 939.78
frag 71815 ( 0.25%) 82515287 ( 0.42%) 1149.00
ip6 47970 ( 0.17%) 8058728 ( 0.04%) 168.00
tcp6 12435 ( 0.04%) 1511737 ( 0.01%) 121.57
http(s) 127 ( 0.00%) 81195 ( 0.00%) 639.33
http(c) 4177 ( 0.01%) 373330 ( 0.00%) 89.38
smtp 578 ( 0.00%) 108507 ( 0.00%) 187.73
imap 261 ( 0.00%) 29833 ( 0.00%) 114.30
ssh 5062 ( 0.02%) 600664 ( 0.00%) 118.66
dns 67 ( 0.00%) 17365 ( 0.00%) 259.18
bgp 172 ( 0.00%) 70935 ( 0.00%) 412.41
other 1991 ( 0.01%) 229908 ( 0.00%) 115.47
udp6 28713 ( 0.10%) 5686979 ( 0.03%) 198.06
dns 28434 ( 0.10%) 5641601 ( 0.03%) 198.41
other 279 ( 0.00%) 45378 ( 0.00%) 162.65
icmp6 6729 ( 0.02%) 804075 ( 0.00%) 119.49
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 63 ( 0.00%) 51857 ( 0.00%) 823.13
tcpdump file: 201004160315.dump.gz (737.99 MB)