Traffic Trace Info
DumpFile: 201003101400.dump
FileSize: 2212.23MB
Id: 201003101400
StartTime: Wed Mar 10 14:00:01 2010
EndTime: Wed Mar 10 14:15:01 2010
TotalTime: 900.05 seconds
TotalCapSize: 1718.70MB CapLen: 96 bytes
# of packets: 32343467 (18326.75MB)
AvgRate: 170.80Mbps stddev:19.05M
IP flow (unique src/dst pair) Information
# of flows: 914809 (avg. 35.36 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 1.9% 1.8% 1.7% 1.7% 1.5% 1.2% 1.1% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 536492
Top 10 bandwidth usage (bytes/total in %):
26.4% 8.6% 5.8% 5.1% 5.1% 4.1% 3.4% 2.1% 1.9% 1.9%
# of IPv6 addresses: 1078
Top 10 bandwidth usage (bytes/total in %):
63.6% 63.6% 8.6% 3.7% 3.7% 2.8% 1.8% 1.6% 1.4% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201003101400.pktlen.png)
detailed numbers
[ 32- 63]: 5363594
[ 64- 127]: 9771662
[ 128- 255]: 2692799
[ 256- 511]: 2255201
[ 512- 1023]: 763945
[ 1024- 2047]: 11496266
Protocol Breakdown
![[protocol breakdown chart]](201003101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32343467 (100.00%) 19216992251 (100.00%) 594.15
ip 32285930 ( 99.82%) 19196020449 ( 99.89%) 594.56
tcp 17527401 ( 54.19%) 11920874450 ( 62.03%) 680.13
http(s) 6551755 ( 20.26%) 8643218839 ( 44.98%) 1319.22
http(c) 4484641 ( 13.87%) 609475320 ( 3.17%) 135.90
squid 866381 ( 2.68%) 136892111 ( 0.71%) 158.00
smtp 198700 ( 0.61%) 70668219 ( 0.37%) 355.65
ftp 52273 ( 0.16%) 15690112 ( 0.08%) 300.16
pop3 25987 ( 0.08%) 19618814 ( 0.10%) 754.95
imap 6922 ( 0.02%) 4388682 ( 0.02%) 634.02
telnet 1223 ( 0.00%) 88883 ( 0.00%) 72.68
ssh 1080242 ( 3.34%) 994341539 ( 5.17%) 920.48
dns 62724 ( 0.19%) 4267486 ( 0.02%) 68.04
bgp 248 ( 0.00%) 133650 ( 0.00%) 538.91
napster 254 ( 0.00%) 42706 ( 0.00%) 168.13
realaud 3 ( 0.00%) 186 ( 0.00%) 62.00
rtsp 223052 ( 0.69%) 64790499 ( 0.34%) 290.47
icecast 16115 ( 0.05%) 1043102 ( 0.01%) 64.73
other 3956872 ( 12.23%) 1356213762 ( 7.06%) 342.75
udp 11283428 ( 34.89%) 5577045160 ( 29.02%) 494.27
dns 973616 ( 3.01%) 166385947 ( 0.87%) 170.89
realaud 38 ( 0.00%) 4388 ( 0.00%) 115.47
halflif 53 ( 0.00%) 6166 ( 0.00%) 116.34
starcra 308 ( 0.00%) 50916 ( 0.00%) 165.31
everque 219 ( 0.00%) 54699 ( 0.00%) 249.77
unreal 118 ( 0.00%) 19162 ( 0.00%) 162.39
quake 29 ( 0.00%) 3589 ( 0.00%) 123.76
cuseeme 2 ( 0.00%) 148 ( 0.00%) 74.00
other 10308272 ( 31.87%) 5410360692 ( 28.15%) 524.86
icmp 511706 ( 1.58%) 38269326 ( 0.20%) 74.79
ipip 342 ( 0.00%) 40354 ( 0.00%) 117.99
ipsec 920 ( 0.00%) 354496 ( 0.00%) 385.32
ip6 2952738 ( 9.13%) 1658080413 ( 8.63%) 561.54
other 9395 ( 0.03%) 1356250 ( 0.01%) 144.36
frag 7176 ( 0.02%) 5177654 ( 0.03%) 721.52
ip6 57537 ( 0.18%) 20971802 ( 0.11%) 364.49
tcp6 26899 ( 0.08%) 14708533 ( 0.08%) 546.81
http(s) 250 ( 0.00%) 196288 ( 0.00%) 785.15
http(c) 2967 ( 0.01%) 273948 ( 0.00%) 92.33
squid 4 ( 0.00%) 296 ( 0.00%) 74.00
smtp 151 ( 0.00%) 40738 ( 0.00%) 269.79
ssh 3281 ( 0.01%) 286494 ( 0.00%) 87.32
dns 82 ( 0.00%) 10037 ( 0.00%) 122.40
bgp 118 ( 0.00%) 22065 ( 0.00%) 186.99
icecast 2 ( 0.00%) 148 ( 0.00%) 74.00
other 20044 ( 0.06%) 13878519 ( 0.07%) 692.40
udp6 24717 ( 0.08%) 4991081 ( 0.03%) 201.93
dns 23717 ( 0.07%) 4665563 ( 0.02%) 196.72
other 1000 ( 0.00%) 325518 ( 0.00%) 325.52
icmp6 4967 ( 0.02%) 602501 ( 0.00%) 121.30
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 924 ( 0.00%) 665607 ( 0.00%) 720.35
tcpdump file: 201003101400.dump.gz (795.26 MB)