Traffic Trace Info
DumpFile: 201004160600.dump
FileSize: 1893.30MB
Id: 201004160600
StartTime: Fri Apr 16 06:00:00 2010
EndTime: Fri Apr 16 06:15:01 2010
TotalTime: 900.66 seconds
TotalCapSize: 1487.67MB CapLen: 96 bytes
# of packets: 26582947 (16744.98MB)
AvgRate: 155.97Mbps stddev:14.82M
IP flow (unique src/dst pair) Information
# of flows: 1107989 (avg. 23.99 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 2.2% 1.2% 1.1% 1.0% 0.7% 0.6% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 596438
Top 10 bandwidth usage (bytes/total in %):
16.8% 12.9% 6.5% 6.2% 5.4% 5.4% 4.9% 4.7% 4.4% 2.8%
# of IPv6 addresses: 962
Top 10 bandwidth usage (bytes/total in %):
23.1% 7.3% 6.4% 6.1% 6.0% 5.9% 4.5% 4.1% 4.1% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004160600.pktlen.png)
detailed numbers
[ 32- 63]: 3640773
[ 64- 127]: 7278844
[ 128- 255]: 2345377
[ 256- 511]: 2008903
[ 512- 1023]: 762355
[ 1024- 2047]: 10546695
Protocol Breakdown
![[protocol breakdown chart]](201004160600.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26582947 (100.00%) 17558380193 (100.00%) 660.51
ip 26530023 ( 99.80%) 17550240638 ( 99.95%) 661.52
tcp 14818864 ( 55.75%) 11672391982 ( 66.48%) 787.67
http(s) 5983403 ( 22.51%) 8239473816 ( 46.93%) 1377.05
http(c) 3025020 ( 11.38%) 315441732 ( 1.80%) 104.28
squid 321206 ( 1.21%) 95437160 ( 0.54%) 297.12
smtp 399014 ( 1.50%) 135369519 ( 0.77%) 339.26
ftp 9583 ( 0.04%) 978443 ( 0.01%) 102.10
pop3 8244 ( 0.03%) 6194816 ( 0.04%) 751.43
imap 692 ( 0.00%) 76118 ( 0.00%) 110.00
telnet 1795 ( 0.01%) 149646 ( 0.00%) 83.37
ssh 708070 ( 2.66%) 101836564 ( 0.58%) 143.82
dns 52597 ( 0.20%) 3619587 ( 0.02%) 68.82
bgp 171 ( 0.00%) 72210 ( 0.00%) 422.28
napster 12 ( 0.00%) 760 ( 0.00%) 63.33
rtsp 131 ( 0.00%) 45054 ( 0.00%) 343.92
icecast 505 ( 0.00%) 46872 ( 0.00%) 92.82
hotline 3 ( 0.00%) 186 ( 0.00%) 62.00
other 4308416 ( 16.21%) 2773649379 ( 15.80%) 643.77
udp 7059909 ( 26.56%) 3409570228 ( 19.42%) 482.95
dns 678293 ( 2.55%) 118744632 ( 0.68%) 175.06
realaud 52 ( 0.00%) 6862 ( 0.00%) 131.96
halflif 72 ( 0.00%) 7163 ( 0.00%) 99.49
starcra 281 ( 0.00%) 33761 ( 0.00%) 120.15
everque 454 ( 0.00%) 82339 ( 0.00%) 181.36
unreal 46 ( 0.00%) 6329 ( 0.00%) 137.59
quake 26 ( 0.00%) 2664 ( 0.00%) 102.46
cuseeme 9 ( 0.00%) 967 ( 0.00%) 107.44
other 6380190 ( 24.00%) 3290315769 ( 18.74%) 515.71
icmp 1052551 ( 3.96%) 194550934 ( 1.11%) 184.84
ipip 376 ( 0.00%) 46980 ( 0.00%) 124.95
ipsec 6725 ( 0.03%) 3345534 ( 0.02%) 497.48
ip6 3583665 ( 13.48%) 2269282224 ( 12.92%) 633.23
other 7933 ( 0.03%) 1052756 ( 0.01%) 132.71
frag 2715 ( 0.01%) 3138868 ( 0.02%) 1156.12
ip6 52924 ( 0.20%) 8139555 ( 0.05%) 153.80
tcp6 20751 ( 0.08%) 2345299 ( 0.01%) 113.02
http(s) 28 ( 0.00%) 16201 ( 0.00%) 578.61
http(c) 7756 ( 0.03%) 649610 ( 0.00%) 83.76
smtp 581 ( 0.00%) 266456 ( 0.00%) 458.62
ftp 2517 ( 0.01%) 271126 ( 0.00%) 107.72
imap 340 ( 0.00%) 40260 ( 0.00%) 118.41
ssh 5060 ( 0.02%) 600060 ( 0.00%) 118.59
dns 112 ( 0.00%) 34111 ( 0.00%) 304.56
bgp 130 ( 0.00%) 29606 ( 0.00%) 227.74
other 4227 ( 0.02%) 437869 ( 0.00%) 103.59
udp6 25118 ( 0.09%) 4900753 ( 0.03%) 195.11
dns 24970 ( 0.09%) 4877376 ( 0.03%) 195.33
other 148 ( 0.00%) 23377 ( 0.00%) 157.95
icmp6 6968 ( 0.03%) 842860 ( 0.00%) 120.96
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 57 ( 0.00%) 46563 ( 0.00%) 816.89
tcpdump file: 201004160600.dump.gz (678.72 MB)