Traffic Trace Info
DumpFile: 201004160445.dump
FileSize: 2061.33MB
Id: 201004160445
StartTime: Fri Apr 16 04:45:01 2010
EndTime: Fri Apr 16 05:00:00 2010
TotalTime: 899.75 seconds
TotalCapSize: 1617.03MB CapLen: 96 bytes
# of packets: 29116868 (18592.24MB)
AvgRate: 173.30Mbps stddev:15.05M
IP flow (unique src/dst pair) Information
# of flows: 1271803 (avg. 22.89 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 2.0% 1.9% 1.0% 0.9% 0.9% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 697139
Top 10 bandwidth usage (bytes/total in %):
15.7% 9.8% 8.1% 6.1% 6.1% 6.0% 5.0% 5.0% 3.9% 2.5%
# of IPv6 addresses: 940
Top 10 bandwidth usage (bytes/total in %):
23.5% 11.5% 8.0% 7.5% 6.5% 6.0% 6.0% 5.4% 4.1% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004160445.pktlen.png)
detailed numbers
[ 32- 63]: 4550481
[ 64- 127]: 7718099
[ 128- 255]: 2410436
[ 256- 511]: 1813081
[ 512- 1023]: 842087
[ 1024- 2047]: 11782684
Protocol Breakdown
![[protocol breakdown chart]](201004160445.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29116868 (100.00%) 19495371767 (100.00%) 669.56
ip 29067838 ( 99.83%) 19487414198 ( 99.96%) 670.41
tcp 17793599 ( 61.11%) 13825998837 ( 70.92%) 777.02
http(s) 7113447 ( 24.43%) 9886786281 ( 50.71%) 1389.87
http(c) 3937404 ( 13.52%) 383281537 ( 1.97%) 97.34
squid 405867 ( 1.39%) 160577376 ( 0.82%) 395.64
smtp 440151 ( 1.51%) 79778060 ( 0.41%) 181.25
ftp 12396 ( 0.04%) 1244588 ( 0.01%) 100.40
pop3 9252 ( 0.03%) 7526977 ( 0.04%) 813.55
imap 760 ( 0.00%) 194507 ( 0.00%) 255.93
telnet 2341 ( 0.01%) 169101 ( 0.00%) 72.23
ssh 764839 ( 2.63%) 111346306 ( 0.57%) 145.58
dns 57911 ( 0.20%) 6485798 ( 0.03%) 112.00
bgp 182 ( 0.00%) 84021 ( 0.00%) 461.65
napster 21 ( 0.00%) 1386 ( 0.00%) 66.00
rtsp 320 ( 0.00%) 77721 ( 0.00%) 242.88
icecast 388 ( 0.00%) 51413 ( 0.00%) 132.51
hotline 3 ( 0.00%) 198 ( 0.00%) 66.00
other 5048286 ( 17.34%) 3188391707 ( 16.35%) 631.58
udp 7078088 ( 24.31%) 3559738843 ( 18.26%) 502.92
dns 767839 ( 2.64%) 134275797 ( 0.69%) 174.87
rip 23 ( 0.00%) 1793 ( 0.00%) 77.96
realaud 1245 ( 0.00%) 79582 ( 0.00%) 63.92
halflif 113 ( 0.00%) 10534 ( 0.00%) 93.22
starcra 271 ( 0.00%) 30706 ( 0.00%) 113.31
everque 444 ( 0.00%) 78150 ( 0.00%) 176.01
unreal 68 ( 0.00%) 7873 ( 0.00%) 115.78
quake 29 ( 0.00%) 2932 ( 0.00%) 101.10
cuseeme 5 ( 0.00%) 481 ( 0.00%) 96.20
other 6307641 ( 21.66%) 3425033891 ( 17.57%) 543.00
icmp 1035067 ( 3.55%) 184399938 ( 0.95%) 178.15
ipip 323 ( 0.00%) 38410 ( 0.00%) 118.92
ipsec 976 ( 0.00%) 209712 ( 0.00%) 214.87
ip6 3148145 ( 10.81%) 1912716543 ( 9.81%) 607.57
other 11640 ( 0.04%) 4311915 ( 0.02%) 370.44
frag 2015 ( 0.01%) 2071329 ( 0.01%) 1027.95
ip6 49030 ( 0.17%) 7957569 ( 0.04%) 162.30
tcp6 11957 ( 0.04%) 1346940 ( 0.01%) 112.65
http(s) 10 ( 0.00%) 2639 ( 0.00%) 263.90
http(c) 4782 ( 0.02%) 447849 ( 0.00%) 93.65
smtp 256 ( 0.00%) 81322 ( 0.00%) 317.66
imap 242 ( 0.00%) 27999 ( 0.00%) 115.70
ssh 5037 ( 0.02%) 596170 ( 0.00%) 118.36
dns 59 ( 0.00%) 17500 ( 0.00%) 296.61
bgp 119 ( 0.00%) 15984 ( 0.00%) 134.32
other 1452 ( 0.00%) 157477 ( 0.00%) 108.46
udp6 30156 ( 0.10%) 5707398 ( 0.03%) 189.26
dns 29938 ( 0.10%) 5669260 ( 0.03%) 189.37
other 218 ( 0.00%) 38138 ( 0.00%) 174.94
icmp6 6808 ( 0.02%) 815848 ( 0.00%) 119.84
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 79 ( 0.00%) 83303 ( 0.00%) 1054.47
tcpdump file: 201004160445.dump.gz (746.42 MB)