Traffic Trace Info
DumpFile: 201003051400.dump
FileSize: 2088.92MB
Id: 201003051400
StartTime: Fri Mar 5 14:00:00 2010
EndTime: Fri Mar 5 14:15:01 2010
TotalTime: 900.21 seconds
TotalCapSize: 1619.27MB CapLen: 96 bytes
# of packets: 30778696 (16115.76MB)
AvgRate: 150.18Mbps stddev:14.19M
IP flow (unique src/dst pair) Information
# of flows: 1106909 (avg. 27.81 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 2.3% 1.7% 1.2% 1.1% 1.0% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 608041
Top 10 bandwidth usage (bytes/total in %):
25.0% 6.0% 4.9% 4.9% 2.7% 2.7% 2.6% 2.5% 2.3% 2.3%
# of IPv6 addresses: 979
Top 10 bandwidth usage (bytes/total in %):
18.5% 14.1% 14.1% 7.7% 7.0% 5.6% 5.6% 5.4% 5.4% 5.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201003051400.pktlen.png)
detailed numbers
[ 32- 63]: 5443311
[ 64- 127]: 9863028
[ 128- 255]: 2731356
[ 256- 511]: 2050353
[ 512- 1023]: 779664
[ 1024- 2047]: 9910984
Protocol Breakdown
![[protocol breakdown chart]](201003051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30778696 (100.00%) 16898594761 (100.00%) 549.04
ip 30727108 ( 99.83%) 16888823219 ( 99.94%) 549.64
tcp 16113896 ( 52.35%) 10340059007 ( 61.19%) 641.69
http(s) 5233760 ( 17.00%) 6902230338 ( 40.84%) 1318.79
http(c) 3843108 ( 12.49%) 499198990 ( 2.95%) 129.89
squid 803416 ( 2.61%) 143666576 ( 0.85%) 178.82
smtp 344101 ( 1.12%) 157988940 ( 0.93%) 459.14
nntp 10 ( 0.00%) 644 ( 0.00%) 64.40
ftp 33482 ( 0.11%) 6032497 ( 0.04%) 180.17
pop3 28140 ( 0.09%) 17477784 ( 0.10%) 621.10
imap 5612 ( 0.02%) 2657251 ( 0.02%) 473.49
telnet 1165 ( 0.00%) 84927 ( 0.00%) 72.90
ssh 196529 ( 0.64%) 23943258 ( 0.14%) 121.83
dns 58942 ( 0.19%) 4053072 ( 0.02%) 68.76
bgp 155 ( 0.00%) 57172 ( 0.00%) 368.85
napster 68 ( 0.00%) 64424 ( 0.00%) 947.41
realaud 115 ( 0.00%) 13311 ( 0.00%) 115.75
rtsp 54768 ( 0.18%) 10909050 ( 0.06%) 199.19
icecast 26741 ( 0.09%) 18552464 ( 0.11%) 693.78
hotline 3 ( 0.00%) 194 ( 0.00%) 64.67
other 5483774 ( 17.82%) 2553127695 ( 15.11%) 465.58
udp 11782714 ( 38.28%) 5374308346 ( 31.80%) 456.12
dns 1231226 ( 4.00%) 179359490 ( 1.06%) 145.68
realaud 2723 ( 0.01%) 164924 ( 0.00%) 60.57
halflif 54 ( 0.00%) 5488 ( 0.00%) 101.63
starcra 244 ( 0.00%) 31602 ( 0.00%) 129.52
everque 172 ( 0.00%) 35194 ( 0.00%) 204.62
unreal 173 ( 0.00%) 24393 ( 0.00%) 141.00
quake 22 ( 0.00%) 2131 ( 0.00%) 96.86
cuseeme 3 ( 0.00%) 263 ( 0.00%) 87.67
other 10547730 ( 34.27%) 5194626913 ( 30.74%) 492.49
icmp 629840 ( 2.05%) 59537980 ( 0.35%) 94.53
ipip 335 ( 0.00%) 40028 ( 0.00%) 119.49
ipsec 670 ( 0.00%) 185300 ( 0.00%) 276.57
ip6 2145732 ( 6.97%) 1098228552 ( 6.50%) 511.82
other 53921 ( 0.18%) 16464006 ( 0.10%) 305.34
frag 3405 ( 0.01%) 2757616 ( 0.02%) 809.87
ip6 51588 ( 0.17%) 9771542 ( 0.06%) 189.42
tcp6 17767 ( 0.06%) 3682472 ( 0.02%) 207.26
http(s) 740 ( 0.00%) 781774 ( 0.00%) 1056.45
http(c) 3177 ( 0.01%) 298479 ( 0.00%) 93.95
smtp 168 ( 0.00%) 65204 ( 0.00%) 388.12
pop3 18 ( 0.00%) 11045 ( 0.00%) 613.61
ssh 6102 ( 0.02%) 1607336 ( 0.01%) 263.41
dns 6 ( 0.00%) 2319 ( 0.00%) 386.50
bgp 120 ( 0.00%) 15363 ( 0.00%) 128.03
other 7436 ( 0.02%) 900952 ( 0.01%) 121.16
udp6 27726 ( 0.09%) 5327746 ( 0.03%) 192.16
dns 27686 ( 0.09%) 5323914 ( 0.03%) 192.30
other 40 ( 0.00%) 3832 ( 0.00%) 95.80
icmp6 6004 ( 0.02%) 708768 ( 0.00%) 118.05
pim6 36 ( 0.00%) 4696 ( 0.00%) 130.44
other6 55 ( 0.00%) 47860 ( 0.00%) 870.18
tcpdump file: 201003051400.dump.gz (776.66 MB)