Traffic Trace Info
DumpFile: 201004160630.dump
FileSize: 1894.39MB
Id: 201004160630
StartTime: Fri Apr 16 06:30:01 2010
EndTime: Fri Apr 16 06:45:00 2010
TotalTime: 899.16 seconds
TotalCapSize: 1488.56MB CapLen: 96 bytes
# of packets: 26595662 (16930.39MB)
AvgRate: 157.95Mbps stddev:13.76M
IP flow (unique src/dst pair) Information
# of flows: 1034665 (avg. 25.70 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.8% 1.6% 1.4% 1.3% 1.2% 1.2% 1.1% 1.1% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 562966
Top 10 bandwidth usage (bytes/total in %):
18.5% 13.3% 7.6% 4.9% 4.6% 3.9% 3.7% 3.6% 3.1% 2.6%
# of IPv6 addresses: 913
Top 10 bandwidth usage (bytes/total in %):
25.9% 8.2% 7.7% 6.6% 6.4% 5.5% 4.6% 4.6% 4.1% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004160630.pktlen.png)
detailed numbers
[ 32- 63]: 3348628
[ 64- 127]: 7251331
[ 128- 255]: 2488127
[ 256- 511]: 2012011
[ 512- 1023]: 835655
[ 1024- 2047]: 10659910
Protocol Breakdown
![[protocol breakdown chart]](201004160630.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26595662 (100.00%) 17752795522 (100.00%) 667.51
ip 26548521 ( 99.82%) 17745567875 ( 99.96%) 668.42
tcp 14113907 ( 53.07%) 11210181685 ( 63.15%) 794.26
http(s) 5742954 ( 21.59%) 7975341432 ( 44.92%) 1388.72
http(c) 2758133 ( 10.37%) 302023470 ( 1.70%) 109.50
squid 330962 ( 1.24%) 102460763 ( 0.58%) 309.58
smtp 389935 ( 1.47%) 78473962 ( 0.44%) 201.25
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 5567 ( 0.02%) 595370 ( 0.00%) 106.95
pop3 9721 ( 0.04%) 7203445 ( 0.04%) 741.02
imap 949 ( 0.00%) 109875 ( 0.00%) 115.78
telnet 4705 ( 0.02%) 2268842 ( 0.01%) 482.22
ssh 715662 ( 2.69%) 101707489 ( 0.57%) 142.12
dns 52482 ( 0.20%) 3610934 ( 0.02%) 68.80
bgp 156 ( 0.00%) 59079 ( 0.00%) 378.71
realaud 4 ( 0.00%) 244 ( 0.00%) 61.00
rtsp 126 ( 0.00%) 28808 ( 0.00%) 228.63
icecast 509 ( 0.00%) 60702 ( 0.00%) 119.26
hotline 10 ( 0.00%) 614 ( 0.00%) 61.40
other 4102022 ( 15.42%) 2636236054 ( 14.85%) 642.67
udp 7597250 ( 28.57%) 3980033080 ( 22.42%) 523.88
dns 630873 ( 2.37%) 112431009 ( 0.63%) 178.21
realaud 55 ( 0.00%) 7325 ( 0.00%) 133.18
halflif 62 ( 0.00%) 6837 ( 0.00%) 110.27
starcra 272 ( 0.00%) 34583 ( 0.00%) 127.14
everque 484 ( 0.00%) 89027 ( 0.00%) 183.94
unreal 54 ( 0.00%) 7143 ( 0.00%) 132.28
quake 31 ( 0.00%) 3221 ( 0.00%) 103.90
cuseeme 8 ( 0.00%) 645 ( 0.00%) 80.62
other 6965042 ( 26.19%) 3867253678 ( 21.78%) 555.24
icmp 991614 ( 3.73%) 184677586 ( 1.04%) 186.24
ipip 359 ( 0.00%) 44374 ( 0.00%) 123.60
ipsec 2029 ( 0.01%) 616598 ( 0.00%) 303.89
ip6 3835403 ( 14.42%) 2368973227 ( 13.34%) 617.66
other 7959 ( 0.03%) 1041325 ( 0.01%) 130.84
frag 1854 ( 0.01%) 1841613 ( 0.01%) 993.32
ip6 47141 ( 0.18%) 7227647 ( 0.04%) 153.32
tcp6 17424 ( 0.07%) 2022244 ( 0.01%) 116.06
http(s) 28 ( 0.00%) 15908 ( 0.00%) 568.14
http(c) 4327 ( 0.02%) 392686 ( 0.00%) 90.75
smtp 498 ( 0.00%) 180331 ( 0.00%) 362.11
ftp 2600 ( 0.01%) 279491 ( 0.00%) 107.50
imap 350 ( 0.00%) 41259 ( 0.00%) 117.88
ssh 5056 ( 0.02%) 599320 ( 0.00%) 118.54
dns 48 ( 0.00%) 12918 ( 0.00%) 269.12
bgp 133 ( 0.00%) 23888 ( 0.00%) 179.61
other 4384 ( 0.02%) 476443 ( 0.00%) 108.68
udp6 23404 ( 0.09%) 4381233 ( 0.02%) 187.20
dns 23233 ( 0.09%) 4356304 ( 0.02%) 187.51
other 171 ( 0.00%) 24929 ( 0.00%) 145.78
icmp6 6219 ( 0.02%) 755634 ( 0.00%) 121.50
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 63 ( 0.00%) 64320 ( 0.00%) 1020.95
tcpdump file: 201004160630.dump.gz (671.02 MB)