Traffic Trace Info
DumpFile: 201003091400.dump
FileSize: 2362.11MB
Id: 201003091400
StartTime: Tue Mar 9 14:00:01 2010
EndTime: Tue Mar 9 14:15:00 2010
TotalTime: 899.54 seconds
TotalCapSize: 1836.30MB CapLen: 96 bytes
# of packets: 34453852 (19355.57MB)
AvgRate: 180.48Mbps stddev:24.14M
IP flow (unique src/dst pair) Information
# of flows: 944491 (avg. 36.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.5% 2.1% 1.4% 1.2% 1.1% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 522779
Top 10 bandwidth usage (bytes/total in %):
22.6% 6.7% 5.2% 4.4% 4.0% 3.0% 2.8% 2.8% 2.7% 2.7%
# of IPv6 addresses: 1051
Top 10 bandwidth usage (bytes/total in %):
28.8% 28.8% 17.2% 5.7% 3.6% 3.2% 2.9% 2.4% 2.2% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201003091400.pktlen.png)
detailed numbers
[ 32- 63]: 5199729
[ 64- 127]: 11631279
[ 128- 255]: 2403941
[ 256- 511]: 2350325
[ 512- 1023]: 850197
[ 1024- 2047]: 12018381
Protocol Breakdown
![[protocol breakdown chart]](201003091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34453852 (100.00%) 20295787641 (100.00%) 589.07
ip 34375895 ( 99.77%) 20285284842 ( 99.95%) 590.10
tcp 18815061 ( 54.61%) 13108765781 ( 64.59%) 696.72
http(s) 6920955 ( 20.09%) 9169077864 ( 45.18%) 1324.83
http(c) 4953802 ( 14.38%) 675107616 ( 3.33%) 136.28
squid 730535 ( 2.12%) 120070286 ( 0.59%) 164.36
smtp 240564 ( 0.70%) 115555249 ( 0.57%) 480.35
ftp 42431 ( 0.12%) 7939986 ( 0.04%) 187.13
pop3 30886 ( 0.09%) 18525783 ( 0.09%) 599.81
imap 5128 ( 0.01%) 2703602 ( 0.01%) 527.22
telnet 723 ( 0.00%) 51439 ( 0.00%) 71.15
ssh 233131 ( 0.68%) 27249558 ( 0.13%) 116.89
dns 62054 ( 0.18%) 4219230 ( 0.02%) 67.99
bgp 155 ( 0.00%) 60299 ( 0.00%) 389.03
napster 58 ( 0.00%) 11365 ( 0.00%) 195.95
realaud 12 ( 0.00%) 1236 ( 0.00%) 103.00
rtsp 112651 ( 0.33%) 7037054 ( 0.03%) 62.47
icecast 10792 ( 0.03%) 679524 ( 0.00%) 62.97
hotline 1 ( 0.00%) 62 ( 0.00%) 62.00
other 5471179 ( 15.88%) 2960475388 ( 14.59%) 541.10
udp 11319249 ( 32.85%) 5678839676 ( 27.98%) 501.70
dns 1039516 ( 3.02%) 151534298 ( 0.75%) 145.77
realaud 31 ( 0.00%) 4701 ( 0.00%) 151.65
halflif 46 ( 0.00%) 4533 ( 0.00%) 98.54
starcra 127 ( 0.00%) 16399 ( 0.00%) 129.13
everque 177 ( 0.00%) 42592 ( 0.00%) 240.63
unreal 149 ( 0.00%) 21866 ( 0.00%) 146.75
quake 35 ( 0.00%) 4035 ( 0.00%) 115.29
cuseeme 2 ( 0.00%) 162 ( 0.00%) 81.00
other 10279135 ( 29.83%) 5527184683 ( 27.23%) 537.71
icmp 1779334 ( 5.16%) 134639573 ( 0.66%) 75.67
ipip 316 ( 0.00%) 39608 ( 0.00%) 125.34
ipsec 2286 ( 0.01%) 749110 ( 0.00%) 327.69
ip6 2458943 ( 7.14%) 1362162141 ( 6.71%) 553.96
other 706 ( 0.00%) 88953 ( 0.00%) 126.00
frag 1380 ( 0.00%) 1090490 ( 0.01%) 790.21
ip6 77957 ( 0.23%) 10502799 ( 0.05%) 134.73
tcp6 47331 ( 0.14%) 4710837 ( 0.02%) 99.53
http(s) 309 ( 0.00%) 275609 ( 0.00%) 891.94
http(c) 5615 ( 0.02%) 570953 ( 0.00%) 101.68
smtp 185 ( 0.00%) 71328 ( 0.00%) 385.56
ssh 3426 ( 0.01%) 304884 ( 0.00%) 88.99
dns 106 ( 0.00%) 16485 ( 0.00%) 155.52
bgp 119 ( 0.00%) 16597 ( 0.00%) 139.47
other 37571 ( 0.11%) 3454981 ( 0.02%) 91.96
udp6 25483 ( 0.07%) 5107399 ( 0.03%) 200.42
dns 23608 ( 0.07%) 4809492 ( 0.02%) 203.72
other 1875 ( 0.01%) 297907 ( 0.00%) 158.88
icmp6 4716 ( 0.01%) 558787 ( 0.00%) 118.49
dstopt6 373 ( 0.00%) 100710 ( 0.00%) 270.00
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 24 ( 0.00%) 20986 ( 0.00%) 874.42
tcpdump file: 201003091400.dump.gz (865.22 MB)