Traffic Trace Info
DumpFile: 201003081400.dump
FileSize: 1991.34MB
Id: 201003081400
StartTime: Mon Mar 8 14:00:01 2010
EndTime: Mon Mar 8 14:15:01 2010
TotalTime: 899.89 seconds
TotalCapSize: 1544.51MB CapLen: 96 bytes
# of packets: 29282886 (15006.15MB)
AvgRate: 139.88Mbps stddev:9.59M
IP flow (unique src/dst pair) Information
# of flows: 922726 (avg. 31.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.6% 1.5% 1.4% 1.2% 1.2% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 544496
Top 10 bandwidth usage (bytes/total in %):
29.1% 9.1% 5.8% 5.4% 3.2% 3.0% 2.0% 2.0% 1.7% 1.6%
# of IPv6 addresses: 1049
Top 10 bandwidth usage (bytes/total in %):
19.6% 17.1% 17.1% 6.5% 6.4% 5.6% 5.3% 5.0% 3.0% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201003081400.pktlen.png)
detailed numbers
[ 32- 63]: 4905881
[ 64- 127]: 9771164
[ 128- 255]: 2464626
[ 256- 511]: 2202065
[ 512- 1023]: 775119
[ 1024- 2047]: 9164031
Protocol Breakdown
![[protocol breakdown chart]](201003081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29282886 (100.00%) 15735088655 (100.00%) 537.35
ip 29221178 ( 99.79%) 15725889385 ( 99.94%) 538.17
tcp 14552324 ( 49.70%) 8700701238 ( 55.29%) 597.89
http(s) 4898829 ( 16.73%) 6405243851 ( 40.71%) 1307.51
http(c) 3880500 ( 13.25%) 412848751 ( 2.62%) 106.39
squid 569704 ( 1.95%) 100838031 ( 0.64%) 177.00
smtp 259286 ( 0.89%) 83621974 ( 0.53%) 322.51
nntp 9 ( 0.00%) 582 ( 0.00%) 64.67
ftp 25574 ( 0.09%) 2339188 ( 0.01%) 91.47
pop3 33356 ( 0.11%) 20211162 ( 0.13%) 605.92
imap 4269 ( 0.01%) 1533135 ( 0.01%) 359.13
telnet 540 ( 0.00%) 39727 ( 0.00%) 73.57
ssh 40799 ( 0.14%) 5479565 ( 0.03%) 134.31
dns 59593 ( 0.20%) 4068679 ( 0.03%) 68.27
bgp 139 ( 0.00%) 46047 ( 0.00%) 331.27
napster 6 ( 0.00%) 1368 ( 0.00%) 228.00
realaud 74 ( 0.00%) 7178 ( 0.00%) 97.00
rtsp 532730 ( 1.82%) 33588100 ( 0.21%) 63.05
icecast 5172 ( 0.02%) 342966 ( 0.00%) 66.31
other 4241741 ( 14.49%) 1630490754 ( 10.36%) 384.39
udp 11556613 ( 39.47%) 5535713537 ( 35.18%) 479.01
dns 1267022 ( 4.33%) 191088183 ( 1.21%) 150.82
rip 8 ( 0.00%) 600 ( 0.00%) 75.00
realaud 508 ( 0.00%) 32592 ( 0.00%) 64.16
halflif 98 ( 0.00%) 9920 ( 0.00%) 101.22
starcra 308 ( 0.00%) 41141 ( 0.00%) 133.57
everque 207 ( 0.00%) 67730 ( 0.00%) 327.20
unreal 169 ( 0.00%) 28192 ( 0.00%) 166.82
quake 90 ( 0.00%) 7564 ( 0.00%) 84.04
cuseeme 4 ( 0.00%) 338 ( 0.00%) 84.50
other 10287431 ( 35.13%) 5343653564 ( 33.96%) 519.44
icmp 547149 ( 1.87%) 41493559 ( 0.26%) 75.84
ipip 325 ( 0.00%) 41074 ( 0.00%) 126.38
ipsec 576 ( 0.00%) 123072 ( 0.00%) 213.67
ip6 2563340 ( 8.75%) 1447710423 ( 9.20%) 564.78
other 851 ( 0.00%) 106482 ( 0.00%) 125.13
frag 6782 ( 0.02%) 7399753 ( 0.05%) 1091.09
ip6 61708 ( 0.21%) 9199270 ( 0.06%) 149.08
tcp6 29950 ( 0.10%) 3364750 ( 0.02%) 112.35
http(s) 431 ( 0.00%) 400479 ( 0.00%) 929.19
http(c) 2802 ( 0.01%) 254775 ( 0.00%) 90.93
smtp 460 ( 0.00%) 203318 ( 0.00%) 442.00
ssh 3288 ( 0.01%) 272624 ( 0.00%) 82.91
dns 143 ( 0.00%) 29181 ( 0.00%) 204.06
bgp 125 ( 0.00%) 16690 ( 0.00%) 133.52
other 22701 ( 0.08%) 2187683 ( 0.01%) 96.37
udp6 27503 ( 0.09%) 5261640 ( 0.03%) 191.31
dns 27315 ( 0.09%) 5218276 ( 0.03%) 191.04
other 188 ( 0.00%) 43364 ( 0.00%) 230.66
icmp6 4146 ( 0.01%) 498811 ( 0.00%) 120.31
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 78 ( 0.00%) 69853 ( 0.00%) 895.55
tcpdump file: 201003081400.dump.gz (733.94 MB)