Traffic Trace Info
DumpFile: 201003031400.dump
FileSize: 2127.79MB
Id: 201003031400
StartTime: Wed Mar 3 14:00:01 2010
EndTime: Wed Mar 3 14:15:01 2010
TotalTime: 900.13 seconds
TotalCapSize: 1650.17MB CapLen: 96 bytes
# of packets: 31300811 (17241.92MB)
AvgRate: 160.68Mbps stddev:10.36M
IP flow (unique src/dst pair) Information
# of flows: 798699 (avg. 39.19 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.1% 1.4% 1.2% 1.2% 1.2% 1.1% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 470140
Top 10 bandwidth usage (bytes/total in %):
28.2% 10.2% 8.6% 5.3% 4.8% 3.4% 2.7% 2.1% 2.1% 1.4%
# of IPv6 addresses: 968
Top 10 bandwidth usage (bytes/total in %):
35.1% 35.1% 13.6% 9.9% 9.7% 5.2% 5.2% 4.5% 3.4% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201003031400.pktlen.png)
detailed numbers
[ 32- 63]: 4561701
[ 64- 127]: 9741820
[ 128- 255]: 3196931
[ 256- 511]: 2315457
[ 512- 1023]: 803804
[ 1024- 2047]: 10681098
Protocol Breakdown
![[protocol breakdown chart]](201003031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31300811 (100.00%) 18079466620 (100.00%) 577.60
ip 31201974 ( 99.68%) 18066168182 ( 99.93%) 579.01
tcp 14981900 ( 47.86%) 10009555737 ( 55.36%) 668.11
http(s) 5639062 ( 18.02%) 7501078875 ( 41.49%) 1330.20
http(c) 4119986 ( 13.16%) 585125235 ( 3.24%) 142.02
squid 1070010 ( 3.42%) 156093872 ( 0.86%) 145.88
smtp 209499 ( 0.67%) 78147526 ( 0.43%) 373.02
ftp 49620 ( 0.16%) 10676137 ( 0.06%) 215.16
pop3 25955 ( 0.08%) 19073909 ( 0.11%) 734.88
imap 3526 ( 0.01%) 1348756 ( 0.01%) 382.52
telnet 1444 ( 0.00%) 108985 ( 0.00%) 75.47
ssh 23286 ( 0.07%) 4435641 ( 0.02%) 190.49
dns 57355 ( 0.18%) 3928619 ( 0.02%) 68.50
bgp 172 ( 0.00%) 75155 ( 0.00%) 436.95
napster 77 ( 0.00%) 5756 ( 0.00%) 74.75
realaud 18 ( 0.00%) 1211 ( 0.00%) 67.28
rtsp 127588 ( 0.41%) 49138210 ( 0.27%) 385.13
icecast 24907 ( 0.08%) 15821028 ( 0.09%) 635.20
other 3629382 ( 11.60%) 1584496042 ( 8.76%) 436.57
udp 12387716 ( 39.58%) 6140882769 ( 33.97%) 495.72
dns 931178 ( 2.97%) 140668517 ( 0.78%) 151.07
realaud 1001 ( 0.00%) 67565 ( 0.00%) 67.50
halflif 274 ( 0.00%) 22517 ( 0.00%) 82.18
starcra 254 ( 0.00%) 29577 ( 0.00%) 116.44
everque 237 ( 0.00%) 77815 ( 0.00%) 328.33
unreal 153 ( 0.00%) 20636 ( 0.00%) 134.88
quake 29 ( 0.00%) 3247 ( 0.00%) 111.97
cuseeme 7 ( 0.00%) 1034 ( 0.00%) 147.71
other 11454186 ( 36.59%) 5999868100 ( 33.19%) 523.81
icmp 512364 ( 1.64%) 37391335 ( 0.21%) 72.98
ipip 321 ( 0.00%) 41946 ( 0.00%) 130.67
ipsec 792 ( 0.00%) 191488 ( 0.00%) 241.78
ip6 3121158 ( 9.97%) 1851068045 ( 10.24%) 593.07
other 197723 ( 0.63%) 27036862 ( 0.15%) 136.74
frag 6032 ( 0.02%) 4740112 ( 0.03%) 785.83
ip6 98837 ( 0.32%) 13298438 ( 0.07%) 134.55
tcp6 71121 ( 0.23%) 8050616 ( 0.04%) 113.20
http(s) 638 ( 0.00%) 885822 ( 0.00%) 1388.44
http(c) 3712 ( 0.01%) 342903 ( 0.00%) 92.38
smtp 137 ( 0.00%) 75260 ( 0.00%) 549.34
ssh 9289 ( 0.03%) 1577922 ( 0.01%) 169.87
dns 6 ( 0.00%) 2192 ( 0.00%) 365.33
bgp 122 ( 0.00%) 18794 ( 0.00%) 154.05
other 57217 ( 0.18%) 5147723 ( 0.03%) 89.97
udp6 23190 ( 0.07%) 4685565 ( 0.03%) 202.05
dns 23105 ( 0.07%) 4676265 ( 0.03%) 202.39
other 85 ( 0.00%) 9300 ( 0.00%) 109.41
icmp6 4454 ( 0.01%) 520263 ( 0.00%) 116.81
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 41 ( 0.00%) 37778 ( 0.00%) 921.41
tcpdump file: 201003031400.dump.gz (771.83 MB)