Traffic Trace Info
DumpFile: 201004160400.dump
FileSize: 2142.73MB
Id: 201004160400
StartTime: Fri Apr 16 04:00:00 2010
EndTime: Fri Apr 16 04:15:01 2010
TotalTime: 900.34 seconds
TotalCapSize: 1683.16MB CapLen: 96 bytes
# of packets: 30117944 (19011.86MB)
AvgRate: 177.13Mbps stddev:12.55M
IP flow (unique src/dst pair) Information
# of flows: 1107963 (avg. 27.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.6% 1.6% 1.3% 1.2% 0.9% 0.9% 0.8% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 599594
Top 10 bandwidth usage (bytes/total in %):
15.7% 9.3% 8.8% 8.3% 6.5% 5.0% 4.8% 4.6% 2.8% 2.7%
# of IPv6 addresses: 983
Top 10 bandwidth usage (bytes/total in %):
21.4% 8.6% 6.8% 6.8% 6.1% 5.9% 4.2% 4.1% 3.7% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004160400.pktlen.png)
detailed numbers
[ 32- 63]: 4465507
[ 64- 127]: 8557208
[ 128- 255]: 2442741
[ 256- 511]: 1712752
[ 512- 1023]: 891530
[ 1024- 2047]: 12048206
Protocol Breakdown
![[protocol breakdown chart]](201004160400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30117944 (100.00%) 19935384425 (100.00%) 661.91
ip 30067066 ( 99.83%) 19926614256 ( 99.96%) 662.74
tcp 18890028 ( 62.72%) 14304539892 ( 71.75%) 757.25
http(s) 7432358 ( 24.68%) 10383369398 ( 52.09%) 1397.05
http(c) 4582939 ( 15.22%) 433470662 ( 2.17%) 94.58
squid 339533 ( 1.13%) 91278670 ( 0.46%) 268.84
smtp 352259 ( 1.17%) 83535330 ( 0.42%) 237.14
ftp 17183 ( 0.06%) 1752440 ( 0.01%) 101.99
pop3 7264 ( 0.02%) 5805258 ( 0.03%) 799.18
imap 753 ( 0.00%) 290951 ( 0.00%) 386.39
telnet 2903 ( 0.01%) 221634 ( 0.00%) 76.35
ssh 1289002 ( 4.28%) 220808077 ( 1.11%) 171.30
dns 53524 ( 0.18%) 3717909 ( 0.02%) 69.46
bgp 204 ( 0.00%) 100361 ( 0.00%) 491.97
napster 58 ( 0.00%) 3806 ( 0.00%) 65.62
realaud 30 ( 0.00%) 3285 ( 0.00%) 109.50
rtsp 146 ( 0.00%) 47906 ( 0.00%) 328.12
icecast 358 ( 0.00%) 38334 ( 0.00%) 107.08
hotline 8 ( 0.00%) 504 ( 0.00%) 63.00
other 4810745 ( 15.97%) 3080049707 ( 15.45%) 640.24
udp 6996260 ( 23.23%) 3557838090 ( 17.85%) 508.53
dns 769046 ( 2.55%) 180816885 ( 0.91%) 235.12
rip 23 ( 0.00%) 1759 ( 0.00%) 76.48
realaud 51 ( 0.00%) 4398 ( 0.00%) 86.24
halflif 70 ( 0.00%) 7350 ( 0.00%) 105.00
starcra 277 ( 0.00%) 49302 ( 0.00%) 177.99
everque 528 ( 0.00%) 91828 ( 0.00%) 173.92
unreal 59 ( 0.00%) 8572 ( 0.00%) 145.29
quake 45 ( 0.00%) 3883 ( 0.00%) 86.29
cuseeme 2 ( 0.00%) 165 ( 0.00%) 82.50
other 6220326 ( 20.65%) 3376333013 ( 16.94%) 542.79
icmp 1103541 ( 3.66%) 201395501 ( 1.01%) 182.50
ipip 375 ( 0.00%) 45823 ( 0.00%) 122.19
ipsec 1084 ( 0.00%) 253408 ( 0.00%) 233.77
ip6 3064008 ( 10.17%) 1857084807 ( 9.32%) 606.10
other 11770 ( 0.04%) 5456735 ( 0.03%) 463.61
frag 60403 ( 0.20%) 67885004 ( 0.34%) 1123.87
ip6 50878 ( 0.17%) 8770169 ( 0.04%) 172.38
tcp6 12648 ( 0.04%) 1620262 ( 0.01%) 128.10
http(s) 32 ( 0.00%) 16816 ( 0.00%) 525.50
http(c) 4778 ( 0.02%) 428357 ( 0.00%) 89.65
smtp 512 ( 0.00%) 292400 ( 0.00%) 571.09
imap 340 ( 0.00%) 40220 ( 0.00%) 118.29
ssh 5031 ( 0.02%) 595690 ( 0.00%) 118.40
dns 106 ( 0.00%) 33647 ( 0.00%) 317.42
bgp 107 ( 0.00%) 14050 ( 0.00%) 131.31
other 1742 ( 0.01%) 199082 ( 0.00%) 114.28
udp6 31364 ( 0.10%) 6207573 ( 0.03%) 197.92
dns 31153 ( 0.10%) 6170707 ( 0.03%) 198.08
other 211 ( 0.00%) 36866 ( 0.00%) 174.72
icmp6 6701 ( 0.02%) 809795 ( 0.00%) 120.85
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 135 ( 0.00%) 128459 ( 0.00%) 951.55
tcpdump file: 201004160400.dump.gz (788.03 MB)