Traffic Trace Info
DumpFile: 201004160715.dump
FileSize: 1878.30MB
Id: 201004160715
StartTime: Fri Apr 16 07:15:01 2010
EndTime: Fri Apr 16 07:30:01 2010
TotalTime: 900.44 seconds
TotalCapSize: 1472.12MB CapLen: 96 bytes
# of packets: 26619177 (16362.21MB)
AvgRate: 152.43Mbps stddev:13.41M
IP flow (unique src/dst pair) Information
# of flows: 1091703 (avg. 24.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 3.3% 2.3% 1.8% 1.7% 1.5% 1.1% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 646683
Top 10 bandwidth usage (bytes/total in %):
18.1% 14.5% 5.0% 4.5% 4.2% 3.9% 3.9% 3.7% 3.5% 3.4%
# of IPv6 addresses: 896
Top 10 bandwidth usage (bytes/total in %):
24.0% 16.3% 7.6% 6.6% 6.2% 6.0% 5.5% 4.3% 4.3% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004160715.pktlen.png)
detailed numbers
[ 32- 63]: 3770506
[ 64- 127]: 7236472
[ 128- 255]: 2709095
[ 256- 511]: 1903428
[ 512- 1023]: 700504
[ 1024- 2047]: 10299172
Protocol Breakdown
![[protocol breakdown chart]](201004160715.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26619177 (100.00%) 17157023305 (100.00%) 644.54
ip 26564465 ( 99.79%) 17149234404 ( 99.95%) 645.57
tcp 13861535 ( 52.07%) 10728127885 ( 62.53%) 773.95
http(s) 5652841 ( 21.24%) 7832743360 ( 45.65%) 1385.63
http(c) 3031712 ( 11.39%) 329818240 ( 1.92%) 108.79
squid 338089 ( 1.27%) 100202251 ( 0.58%) 296.38
smtp 347441 ( 1.31%) 63278939 ( 0.37%) 182.13
ftp 6376 ( 0.02%) 643109 ( 0.00%) 100.86
pop3 14011 ( 0.05%) 11259891 ( 0.07%) 803.65
imap 1808 ( 0.01%) 794974 ( 0.00%) 439.70
telnet 798 ( 0.00%) 72383 ( 0.00%) 90.71
ssh 691006 ( 2.60%) 100648654 ( 0.59%) 145.66
dns 56508 ( 0.21%) 3891938 ( 0.02%) 68.87
bgp 157 ( 0.00%) 65852 ( 0.00%) 419.44
napster 28 ( 0.00%) 5209 ( 0.00%) 186.04
realaud 12 ( 0.00%) 1731 ( 0.00%) 144.25
rtsp 137 ( 0.00%) 16631 ( 0.00%) 121.39
icecast 399 ( 0.00%) 40825 ( 0.00%) 102.32
hotline 9 ( 0.00%) 582 ( 0.00%) 64.67
other 3720187 ( 13.98%) 2284642356 ( 13.32%) 614.12
udp 7576730 ( 28.46%) 3747659191 ( 21.84%) 494.63
dns 615848 ( 2.31%) 111124855 ( 0.65%) 180.44
realaud 24 ( 0.00%) 2094 ( 0.00%) 87.25
halflif 84 ( 0.00%) 8593 ( 0.00%) 102.30
starcra 258 ( 0.00%) 30314 ( 0.00%) 117.50
everque 505 ( 0.00%) 89876 ( 0.00%) 177.97
unreal 75 ( 0.00%) 11317 ( 0.00%) 150.89
quake 25 ( 0.00%) 2971 ( 0.00%) 118.84
cuseeme 9 ( 0.00%) 934 ( 0.00%) 103.78
other 6959508 ( 26.14%) 3636123803 ( 21.19%) 522.47
icmp 871193 ( 3.27%) 152754874 ( 0.89%) 175.34
ipip 343 ( 0.00%) 42036 ( 0.00%) 122.55
ipsec 5654 ( 0.02%) 1979178 ( 0.01%) 350.05
ip6 3956376 ( 14.86%) 2488522816 ( 14.50%) 628.99
other 292634 ( 1.10%) 30148424 ( 0.18%) 103.02
frag 2326 ( 0.01%) 2374511 ( 0.01%) 1020.86
ip6 54712 ( 0.21%) 7788901 ( 0.05%) 142.36
tcp6 26076 ( 0.10%) 2836260 ( 0.02%) 108.77
http(s) 36 ( 0.00%) 23752 ( 0.00%) 659.78
http(c) 4508 ( 0.02%) 403006 ( 0.00%) 89.40
smtp 376 ( 0.00%) 183177 ( 0.00%) 487.17
ftp 6872 ( 0.03%) 690806 ( 0.00%) 100.52
imap 246 ( 0.00%) 28427 ( 0.00%) 115.56
ssh 5077 ( 0.02%) 601530 ( 0.00%) 118.48
dns 89 ( 0.00%) 36457 ( 0.00%) 409.63
bgp 115 ( 0.00%) 14970 ( 0.00%) 130.17
other 8757 ( 0.03%) 854135 ( 0.00%) 97.54
udp6 22407 ( 0.08%) 4163444 ( 0.02%) 185.81
dns 22231 ( 0.08%) 4136220 ( 0.02%) 186.06
other 176 ( 0.00%) 27224 ( 0.00%) 154.68
icmp6 6133 ( 0.02%) 729952 ( 0.00%) 119.02
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 66 ( 0.00%) 55165 ( 0.00%) 835.83
tcpdump file: 201004160715.dump.gz (661.74 MB)