Traffic Trace Info
DumpFile: 201003071400.dump
FileSize: 1795.17MB
Id: 201003071400
StartTime: Sun Mar 7 14:00:01 2010
EndTime: Sun Mar 7 14:15:00 2010
TotalTime: 899.65 seconds
TotalCapSize: 1393.84MB CapLen: 96 bytes
# of packets: 26300810 (14721.01MB)
AvgRate: 137.25Mbps stddev:16.07M
IP flow (unique src/dst pair) Information
# of flows: 920352 (avg. 28.58 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.6% 4.0% 3.1% 2.9% 2.9% 1.8% 1.3% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 539193
Top 10 bandwidth usage (bytes/total in %):
26.6% 7.7% 7.0% 6.6% 6.6% 4.6% 4.2% 4.1% 3.3% 3.2%
# of IPv6 addresses: 965
Top 10 bandwidth usage (bytes/total in %):
22.3% 20.8% 20.7% 7.3% 5.5% 4.1% 3.8% 3.7% 3.7% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201003071400.pktlen.png)
detailed numbers
[ 32- 63]: 3847283
[ 64- 127]: 8749470
[ 128- 255]: 1981351
[ 256- 511]: 1955663
[ 512- 1023]: 700390
[ 1024- 2047]: 9066653
Protocol Breakdown
![[protocol breakdown chart]](201003071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26300810 (100.00%) 15436094887 (100.00%) 586.91
ip 26242109 ( 99.78%) 15427996287 ( 99.95%) 587.91
tcp 13372835 ( 50.85%) 9687236660 ( 62.76%) 724.40
http(s) 3904963 ( 14.85%) 5148477675 ( 33.35%) 1318.44
http(c) 2485640 ( 9.45%) 252906293 ( 1.64%) 101.75
squid 425155 ( 1.62%) 87865590 ( 0.57%) 206.67
smtp 238323 ( 0.91%) 55865342 ( 0.36%) 234.41
ftp 43300 ( 0.16%) 9386559 ( 0.06%) 216.78
pop3 24887 ( 0.09%) 20743272 ( 0.13%) 833.50
imap 3076 ( 0.01%) 2484658 ( 0.02%) 807.76
telnet 1531 ( 0.01%) 113781 ( 0.00%) 74.32
ssh 1463132 ( 5.56%) 1137126845 ( 7.37%) 777.19
dns 60940 ( 0.23%) 4164743 ( 0.03%) 68.34
bgp 175 ( 0.00%) 67624 ( 0.00%) 386.42
napster 99 ( 0.00%) 7220 ( 0.00%) 72.93
realaud 65 ( 0.00%) 9939 ( 0.00%) 152.91
rtsp 25997 ( 0.10%) 5411054 ( 0.04%) 208.14
icecast 6273 ( 0.02%) 377883 ( 0.00%) 60.24
hotline 28 ( 0.00%) 2325 ( 0.00%) 83.04
other 4689251 ( 17.83%) 2962225857 ( 19.19%) 631.71
udp 10137506 ( 38.54%) 4594442564 ( 29.76%) 453.21
dns 1060269 ( 4.03%) 145404694 ( 0.94%) 137.14
realaud 2360 ( 0.01%) 150284 ( 0.00%) 63.68
halflif 77 ( 0.00%) 8641 ( 0.00%) 112.22
starcra 217 ( 0.00%) 26877 ( 0.00%) 123.86
everque 202 ( 0.00%) 42959 ( 0.00%) 212.67
unreal 80 ( 0.00%) 11575 ( 0.00%) 144.69
quake 34 ( 0.00%) 3884 ( 0.00%) 114.24
cuseeme 5 ( 0.00%) 430 ( 0.00%) 86.00
other 9074204 ( 34.50%) 4448737294 ( 28.82%) 490.26
icmp 538710 ( 2.05%) 40069711 ( 0.26%) 74.38
ipip 332 ( 0.00%) 43044 ( 0.00%) 129.65
ipsec 849 ( 0.00%) 152390 ( 0.00%) 179.49
ip6 2101857 ( 7.99%) 1096635090 ( 7.10%) 521.75
other 90020 ( 0.34%) 9416828 ( 0.06%) 104.61
frag 319 ( 0.00%) 346505 ( 0.00%) 1086.22
ip6 58701 ( 0.22%) 8098600 ( 0.05%) 137.96
tcp6 29738 ( 0.11%) 3109079 ( 0.02%) 104.55
http(s) 49 ( 0.00%) 22137 ( 0.00%) 451.78
http(c) 3048 ( 0.01%) 290187 ( 0.00%) 95.21
smtp 14 ( 0.00%) 1795 ( 0.00%) 128.21
ssh 3188 ( 0.01%) 264032 ( 0.00%) 82.82
dns 199 ( 0.00%) 24674 ( 0.00%) 123.99
bgp 117 ( 0.00%) 16164 ( 0.00%) 138.15
other 23123 ( 0.09%) 2490090 ( 0.02%) 107.69
udp6 24988 ( 0.10%) 4486241 ( 0.03%) 179.54
dns 24633 ( 0.09%) 4418576 ( 0.03%) 179.38
other 355 ( 0.00%) 67665 ( 0.00%) 190.61
icmp6 3915 ( 0.01%) 471916 ( 0.00%) 120.54
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 30 ( 0.00%) 27284 ( 0.00%) 909.47
tcpdump file: 201003071400.dump.gz (656.97 MB)