Traffic Trace Info
DumpFile: 201003061400.dump
FileSize: 1911.65MB
Id: 201003061400
StartTime: Sat Mar 6 14:00:00 2010
EndTime: Sat Mar 6 14:15:00 2010
TotalTime: 900.03 seconds
TotalCapSize: 1481.85MB CapLen: 96 bytes
# of packets: 28166260 (15879.19MB)
AvgRate: 147.99Mbps stddev:21.23M
IP flow (unique src/dst pair) Information
# of flows: 989580 (avg. 28.46 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.4% 1.7% 1.5% 1.5% 1.5% 1.3% 1.2% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 587068
Top 10 bandwidth usage (bytes/total in %):
25.5% 7.1% 5.0% 4.2% 4.0% 3.6% 3.2% 3.1% 2.6% 2.4%
# of IPv6 addresses: 1020
Top 10 bandwidth usage (bytes/total in %):
52.4% 52.3% 13.0% 4.2% 3.1% 2.6% 2.4% 2.3% 1.9% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201003061400.pktlen.png)
detailed numbers
[ 32- 63]: 4757894
[ 64- 127]: 8781809
[ 128- 255]: 1921865
[ 256- 511]: 2142457
[ 512- 1023]: 812563
[ 1024- 2047]: 9749672
Protocol Breakdown
![[protocol breakdown chart]](201003061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28166260 (100.00%) 16650541461 (100.00%) 591.15
ip 28040826 ( 99.55%) 16636626497 ( 99.92%) 593.30
tcp 14713488 ( 52.24%) 10459461587 ( 62.82%) 710.88
http(s) 5526323 ( 19.62%) 7536645876 ( 45.26%) 1363.77
http(c) 3226508 ( 11.46%) 430193969 ( 2.58%) 133.33
squid 718419 ( 2.55%) 114543589 ( 0.69%) 159.44
smtp 302146 ( 1.07%) 46718496 ( 0.28%) 154.62
ftp 39536 ( 0.14%) 7285315 ( 0.04%) 184.27
pop3 20511 ( 0.07%) 14979320 ( 0.09%) 730.31
imap 5526 ( 0.02%) 5472433 ( 0.03%) 990.31
telnet 19 ( 0.00%) 3839 ( 0.00%) 202.05
ssh 246554 ( 0.88%) 43177408 ( 0.26%) 175.12
dns 61744 ( 0.22%) 4206111 ( 0.03%) 68.12
bgp 141 ( 0.00%) 53476 ( 0.00%) 379.26
napster 38 ( 0.00%) 8753 ( 0.00%) 230.34
realaud 10 ( 0.00%) 1257 ( 0.00%) 125.70
rtsp 159733 ( 0.57%) 41889815 ( 0.25%) 262.25
icecast 664 ( 0.00%) 47841 ( 0.00%) 72.05
other 4405612 ( 15.64%) 2214233849 ( 13.30%) 502.59
udp 10519206 ( 37.35%) 4931967150 ( 29.62%) 468.85
dns 1024582 ( 3.64%) 146928563 ( 0.88%) 143.40
rip 1 ( 0.00%) 109 ( 0.00%) 109.00
realaud 3793 ( 0.01%) 231481 ( 0.00%) 61.03
halflif 66 ( 0.00%) 8235 ( 0.00%) 124.77
starcra 145 ( 0.00%) 18003 ( 0.00%) 124.16
everque 192 ( 0.00%) 39686 ( 0.00%) 206.70
unreal 133 ( 0.00%) 21283 ( 0.00%) 160.02
quake 30 ( 0.00%) 3002 ( 0.00%) 100.07
cuseeme 2 ( 0.00%) 144 ( 0.00%) 72.00
other 9489602 ( 33.69%) 4784578060 ( 28.74%) 504.19
icmp 587354 ( 2.09%) 43204374 ( 0.26%) 73.56
ipip 321 ( 0.00%) 39558 ( 0.00%) 123.23
ipsec 1069 ( 0.00%) 216982 ( 0.00%) 202.98
ip6 2171138 ( 7.71%) 1193958806 ( 7.17%) 549.92
other 48250 ( 0.17%) 7778040 ( 0.05%) 161.20
frag 4588 ( 0.02%) 3550730 ( 0.02%) 773.92
ip6 125434 ( 0.45%) 13914964 ( 0.08%) 110.93
tcp6 94600 ( 0.34%) 8544971 ( 0.05%) 90.33
http(s) 84 ( 0.00%) 38364 ( 0.00%) 456.71
http(c) 4306 ( 0.02%) 377478 ( 0.00%) 87.66
smtp 78 ( 0.00%) 31807 ( 0.00%) 407.78
ssh 3216 ( 0.01%) 266284 ( 0.00%) 82.80
dns 387 ( 0.00%) 37911 ( 0.00%) 97.96
bgp 120 ( 0.00%) 15378 ( 0.00%) 128.15
other 86409 ( 0.31%) 7777749 ( 0.05%) 90.01
udp6 25856 ( 0.09%) 4724962 ( 0.03%) 182.74
dns 25126 ( 0.09%) 4574548 ( 0.03%) 182.06
cuseeme 1 ( 0.00%) 124 ( 0.00%) 124.00
other 729 ( 0.00%) 150290 ( 0.00%) 206.16
icmp6 4880 ( 0.02%) 589815 ( 0.00%) 120.86
dstopt6 17 ( 0.00%) 4250 ( 0.00%) 250.00
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 51 ( 0.00%) 46886 ( 0.00%) 919.33
tcpdump file: 201003061400.dump.gz (706.78 MB)