Traffic Trace Info
DumpFile: 201004160615.dump
FileSize: 1899.05MB
Id: 201004160615
StartTime: Fri Apr 16 06:15:01 2010
EndTime: Fri Apr 16 06:30:01 2010
TotalTime: 899.94 seconds
TotalCapSize: 1492.59MB CapLen: 96 bytes
# of packets: 26637367 (16928.36MB)
AvgRate: 157.79Mbps stddev:13.00M
IP flow (unique src/dst pair) Information
# of flows: 1078125 (avg. 24.71 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.0% 1.5% 1.4% 1.1% 1.1% 1.0% 0.8% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 594208
Top 10 bandwidth usage (bytes/total in %):
18.3% 12.9% 7.8% 6.2% 5.6% 4.4% 4.3% 4.1% 3.7% 2.2%
# of IPv6 addresses: 929
Top 10 bandwidth usage (bytes/total in %):
24.1% 8.3% 7.7% 6.4% 6.2% 6.1% 4.4% 4.3% 4.3% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004160615.pktlen.png)
detailed numbers
[ 32- 63]: 3364405
[ 64- 127]: 7308412
[ 128- 255]: 2485116
[ 256- 511]: 2030209
[ 512- 1023]: 781267
[ 1024- 2047]: 10667958
Protocol Breakdown
![[protocol breakdown chart]](201004160615.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26637367 (100.00%) 17750670997 (100.00%) 666.38
ip 26585710 ( 99.81%) 17742912896 ( 99.96%) 667.39
tcp 14440197 ( 54.21%) 11393774425 ( 64.19%) 789.03
http(s) 5788400 ( 21.73%) 7985871495 ( 44.99%) 1379.63
http(c) 2818755 ( 10.58%) 303119885 ( 1.71%) 107.54
squid 366224 ( 1.37%) 136462860 ( 0.77%) 372.62
smtp 384533 ( 1.44%) 74568893 ( 0.42%) 193.92
nntp 7 ( 0.00%) 434 ( 0.00%) 62.00
ftp 9729 ( 0.04%) 938900 ( 0.01%) 96.51
pop3 8028 ( 0.03%) 5968249 ( 0.03%) 743.43
imap 1019 ( 0.00%) 373654 ( 0.00%) 366.69
telnet 9244 ( 0.03%) 5987849 ( 0.03%) 647.76
ssh 735072 ( 2.76%) 105066383 ( 0.59%) 142.93
dns 53497 ( 0.20%) 3701573 ( 0.02%) 69.19
bgp 196 ( 0.00%) 100759 ( 0.00%) 514.08
napster 2 ( 0.00%) 132 ( 0.00%) 66.00
realaud 15 ( 0.00%) 1960 ( 0.00%) 130.67
rtsp 86 ( 0.00%) 10448 ( 0.00%) 121.49
icecast 540 ( 0.00%) 63144 ( 0.00%) 116.93
hotline 5 ( 0.00%) 603 ( 0.00%) 120.60
other 4264845 ( 16.01%) 2771537204 ( 15.61%) 649.86
udp 7497835 ( 28.15%) 3862886041 ( 21.76%) 515.20
dns 648349 ( 2.43%) 115459870 ( 0.65%) 178.08
rip 13 ( 0.00%) 973 ( 0.00%) 74.85
realaud 52 ( 0.00%) 5197 ( 0.00%) 99.94
halflif 85 ( 0.00%) 7625 ( 0.00%) 89.71
starcra 253 ( 0.00%) 28920 ( 0.00%) 114.31
everque 548 ( 0.00%) 104849 ( 0.00%) 191.33
unreal 79 ( 0.00%) 10472 ( 0.00%) 132.56
quake 22 ( 0.00%) 2181 ( 0.00%) 99.14
cuseeme 12 ( 0.00%) 1302 ( 0.00%) 108.50
other 6847950 ( 25.71%) 3747008266 ( 21.11%) 547.17
icmp 963936 ( 3.62%) 175692278 ( 0.99%) 182.27
ipip 309 ( 0.00%) 36562 ( 0.00%) 118.32
ipsec 7840 ( 0.03%) 3832964 ( 0.02%) 488.90
ip6 3667670 ( 13.77%) 2305652615 ( 12.99%) 628.64
other 7923 ( 0.03%) 1038011 ( 0.01%) 131.01
frag 2106 ( 0.01%) 2180309 ( 0.01%) 1035.28
ip6 51655 ( 0.19%) 7757981 ( 0.04%) 150.19
tcp6 21170 ( 0.08%) 2365020 ( 0.01%) 111.72
http(s) 114 ( 0.00%) 95514 ( 0.00%) 837.84
http(c) 8493 ( 0.03%) 756447 ( 0.00%) 89.07
smtp 264 ( 0.00%) 89163 ( 0.00%) 337.74
ftp 2624 ( 0.01%) 286876 ( 0.00%) 109.33
imap 243 ( 0.00%) 28037 ( 0.00%) 115.38
ssh 5076 ( 0.02%) 601444 ( 0.00%) 118.49
dns 133 ( 0.00%) 44648 ( 0.00%) 335.70
bgp 125 ( 0.00%) 28313 ( 0.00%) 226.50
other 4098 ( 0.02%) 434578 ( 0.00%) 106.05
udp6 23647 ( 0.09%) 4535344 ( 0.03%) 191.79
dns 23459 ( 0.09%) 4506055 ( 0.03%) 192.08
other 188 ( 0.00%) 29289 ( 0.00%) 155.79
icmp6 6772 ( 0.03%) 822236 ( 0.00%) 121.42
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 36 ( 0.00%) 31301 ( 0.00%) 869.47
tcpdump file: 201004160615.dump.gz (674.68 MB)