Traffic Trace Info
DumpFile: 201004160700.dump
FileSize: 1882.46MB
Id: 201004160700
StartTime: Fri Apr 16 07:00:00 2010
EndTime: Fri Apr 16 07:15:01 2010
TotalTime: 900.24 seconds
TotalCapSize: 1475.82MB CapLen: 96 bytes
# of packets: 26649301 (16453.73MB)
AvgRate: 153.32Mbps stddev:15.62M
IP flow (unique src/dst pair) Information
# of flows: 913068 (avg. 29.19 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 2.9% 2.2% 1.6% 1.3% 1.3% 1.1% 0.9% 0.9% 0.7%
IP address Information
# of IPv4 addresses: 490146
Top 10 bandwidth usage (bytes/total in %):
17.8% 14.4% 4.7% 4.1% 3.9% 3.9% 3.8% 3.7% 3.4% 3.3%
# of IPv6 addresses: 912
Top 10 bandwidth usage (bytes/total in %):
25.4% 10.9% 8.0% 7.3% 6.9% 6.2% 4.5% 4.5% 4.4% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004160700.pktlen.png)
detailed numbers
[ 32- 63]: 3642266
[ 64- 127]: 7327025
[ 128- 255]: 2569604
[ 256- 511]: 1982983
[ 512- 1023]: 796409
[ 1024- 2047]: 10331014
Protocol Breakdown
![[protocol breakdown chart]](201004160700.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26649301 (100.00%) 17252984703 (100.00%) 647.41
ip 26598931 ( 99.81%) 17245595819 ( 99.96%) 648.36
tcp 13893244 ( 52.13%) 10871118258 ( 63.01%) 782.48
http(s) 6003662 ( 22.53%) 8226581752 ( 47.68%) 1370.26
http(c) 3067594 ( 11.51%) 325735429 ( 1.89%) 106.19
squid 330631 ( 1.24%) 100922295 ( 0.58%) 305.24
smtp 326802 ( 1.23%) 55104861 ( 0.32%) 168.62
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 8862 ( 0.03%) 1189462 ( 0.01%) 134.22
pop3 8548 ( 0.03%) 6310023 ( 0.04%) 738.19
imap 1109 ( 0.00%) 387533 ( 0.00%) 349.44
telnet 1683 ( 0.01%) 142901 ( 0.00%) 84.91
ssh 682019 ( 2.56%) 98257619 ( 0.57%) 144.07
dns 52796 ( 0.20%) 3672940 ( 0.02%) 69.57
bgp 165 ( 0.00%) 66002 ( 0.00%) 400.01
napster 758 ( 0.00%) 279191 ( 0.00%) 368.33
realaud 2 ( 0.00%) 124 ( 0.00%) 62.00
rtsp 4860 ( 0.02%) 2919064 ( 0.02%) 600.63
icecast 440 ( 0.00%) 60789 ( 0.00%) 138.16
hotline 7 ( 0.00%) 434 ( 0.00%) 62.00
other 3403254 ( 12.77%) 2049484717 ( 11.88%) 602.21
udp 7407272 ( 27.80%) 3643238691 ( 21.12%) 491.85
dns 626791 ( 2.35%) 112718261 ( 0.65%) 179.83
realaud 16 ( 0.00%) 1727 ( 0.00%) 107.94
halflif 139 ( 0.00%) 10620 ( 0.00%) 76.40
starcra 363 ( 0.00%) 38997 ( 0.00%) 107.43
everque 447 ( 0.00%) 88271 ( 0.00%) 197.47
unreal 56 ( 0.00%) 7892 ( 0.00%) 140.93
quake 42 ( 0.00%) 5483 ( 0.00%) 130.55
cuseeme 13 ( 0.00%) 1201 ( 0.00%) 92.38
other 6778965 ( 25.44%) 3530123565 ( 20.46%) 520.75
icmp 922189 ( 3.46%) 169516626 ( 0.98%) 183.82
ipip 339 ( 0.00%) 41918 ( 0.00%) 123.65
ipsec 52756 ( 0.20%) 31134516 ( 0.18%) 590.16
ip6 4026536 ( 15.11%) 2499827645 ( 14.49%) 620.84
other 296595 ( 1.11%) 30718165 ( 0.18%) 103.57
frag 1843 ( 0.01%) 1821064 ( 0.01%) 988.10
ip6 50370 ( 0.19%) 7388884 ( 0.04%) 146.69
tcp6 21167 ( 0.08%) 2281330 ( 0.01%) 107.78
http(s) 33 ( 0.00%) 17794 ( 0.00%) 539.21
http(c) 4723 ( 0.02%) 422504 ( 0.00%) 89.46
smtp 212 ( 0.00%) 71181 ( 0.00%) 335.76
ftp 4526 ( 0.02%) 465709 ( 0.00%) 102.90
imap 398 ( 0.00%) 45978 ( 0.00%) 115.52
ssh 5067 ( 0.02%) 600710 ( 0.00%) 118.55
dns 109 ( 0.00%) 23659 ( 0.00%) 217.06
bgp 130 ( 0.00%) 24426 ( 0.00%) 187.89
other 5969 ( 0.02%) 609369 ( 0.00%) 102.09
udp6 23042 ( 0.09%) 4313141 ( 0.02%) 187.19
dns 22871 ( 0.09%) 4285567 ( 0.02%) 187.38
everque 1 ( 0.00%) 112 ( 0.00%) 112.00
other 170 ( 0.00%) 27462 ( 0.00%) 161.54
icmp6 6067 ( 0.02%) 737440 ( 0.00%) 121.55
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 64 ( 0.00%) 52893 ( 0.00%) 826.45
tcpdump file: 201004160700.dump.gz (665.12 MB)