Traffic Trace Info
DumpFile: 201004160930.dump
FileSize: 2515.47MB
Id: 201004160930
StartTime: Fri Apr 16 09:30:01 2010
EndTime: Fri Apr 16 09:45:01 2010
TotalTime: 899.87 seconds
TotalCapSize: 1961.06MB CapLen: 96 bytes
# of packets: 36333077 (23590.42MB)
AvgRate: 219.93Mbps stddev:50.17M
IP flow (unique src/dst pair) Information
# of flows: 892370 (avg. 40.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 1.8% 1.8% 1.8% 1.8% 1.7% 1.6% 1.6% 1.5% 1.4%
IP address Information
# of IPv4 addresses: 467118
Top 10 bandwidth usage (bytes/total in %):
20.1% 17.2% 8.6% 4.3% 2.6% 2.6% 2.4% 2.3% 2.3% 2.3%
# of IPv6 addresses: 976
Top 10 bandwidth usage (bytes/total in %):
17.7% 12.4% 7.7% 7.7% 7.2% 6.3% 6.2% 5.1% 4.3% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004160930.pktlen.png)
detailed numbers
[ 32- 63]: 5830142
[ 64- 127]: 8506813
[ 128- 255]: 2790518
[ 256- 511]: 3163280
[ 512- 1023]: 1223143
[ 1024- 2047]: 14819181
Protocol Breakdown
![[protocol breakdown chart]](201004160930.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36333077 (100.00%) 24736346111 (100.00%) 680.82
ip 36282535 ( 99.86%) 24728670748 ( 99.97%) 681.56
tcp 21709586 ( 59.75%) 17054421804 ( 68.94%) 785.57
http(s) 10081518 ( 27.75%) 13941421406 ( 56.36%) 1382.87
http(c) 6209108 ( 17.09%) 652357002 ( 2.64%) 105.06
squid 392026 ( 1.08%) 171534616 ( 0.69%) 437.56
smtp 279271 ( 0.77%) 63193352 ( 0.26%) 226.28
ftp 16833 ( 0.05%) 1480763 ( 0.01%) 87.97
pop3 39560 ( 0.11%) 30432568 ( 0.12%) 769.28
imap 1859 ( 0.01%) 589576 ( 0.00%) 317.15
telnet 760 ( 0.00%) 84490 ( 0.00%) 111.17
ssh 960101 ( 2.64%) 144388024 ( 0.58%) 150.39
dns 64567 ( 0.18%) 4972456 ( 0.02%) 77.01
bgp 156 ( 0.00%) 58868 ( 0.00%) 377.36
napster 145 ( 0.00%) 9164 ( 0.00%) 63.20
realaud 27 ( 0.00%) 3317 ( 0.00%) 122.85
rtsp 32502 ( 0.09%) 2024398 ( 0.01%) 62.29
icecast 25048 ( 0.07%) 1571484 ( 0.01%) 62.74
other 3605512 ( 9.92%) 2040264740 ( 8.25%) 565.87
udp 9380858 ( 25.82%) 4997660079 ( 20.20%) 532.75
dns 929977 ( 2.56%) 176105560 ( 0.71%) 189.37
realaud 68 ( 0.00%) 6458 ( 0.00%) 94.97
halflif 117 ( 0.00%) 11753 ( 0.00%) 100.45
starcra 235 ( 0.00%) 32060 ( 0.00%) 136.43
everque 651 ( 0.00%) 125229 ( 0.00%) 192.36
unreal 59 ( 0.00%) 7662 ( 0.00%) 129.86
quake 47 ( 0.00%) 5597 ( 0.00%) 119.09
cuseeme 15 ( 0.00%) 1146 ( 0.00%) 76.40
other 8449377 ( 23.26%) 4821224584 ( 19.49%) 570.60
icmp 554661 ( 1.53%) 70637337 ( 0.29%) 127.35
ipip 361 ( 0.00%) 43543 ( 0.00%) 120.62
ipsec 1090798 ( 3.00%) 450833776 ( 1.82%) 413.31
ip6 3517799 ( 9.68%) 2131540775 ( 8.62%) 605.93
other 28472 ( 0.08%) 23533434 ( 0.10%) 826.55
frag 2985 ( 0.01%) 2750083 ( 0.01%) 921.30
ip6 50542 ( 0.14%) 7675363 ( 0.03%) 151.86
tcp6 22338 ( 0.06%) 2505889 ( 0.01%) 112.18
http(s) 85 ( 0.00%) 78720 ( 0.00%) 926.12
http(c) 4025 ( 0.01%) 365798 ( 0.00%) 90.88
smtp 252 ( 0.00%) 118208 ( 0.00%) 469.08
ftp 5060 ( 0.01%) 518977 ( 0.00%) 102.56
imap 436 ( 0.00%) 51180 ( 0.00%) 117.39
ssh 5063 ( 0.01%) 599898 ( 0.00%) 118.49
dns 105 ( 0.00%) 28621 ( 0.00%) 272.58
bgp 120 ( 0.00%) 22044 ( 0.00%) 183.70
other 7192 ( 0.02%) 722443 ( 0.00%) 100.45
udp6 21937 ( 0.06%) 4387035 ( 0.02%) 199.98
dns 21744 ( 0.06%) 4357020 ( 0.02%) 200.38
other 193 ( 0.00%) 30015 ( 0.00%) 155.52
icmp6 6198 ( 0.02%) 743491 ( 0.00%) 119.96
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 38 ( 0.00%) 34732 ( 0.00%) 914.00
tcpdump file: 201004160930.dump.gz (855.94 MB)