Traffic Trace Info
DumpFile: 201003111400.dump
FileSize: 2015.94MB
Id: 201003111400
StartTime: Thu Mar 11 14:00:01 2010
EndTime: Thu Mar 11 14:15:00 2010
TotalTime: 899.58 seconds
TotalCapSize: 1565.49MB CapLen: 96 bytes
# of packets: 29520404 (16385.95MB)
AvgRate: 152.83Mbps stddev:13.89M
IP flow (unique src/dst pair) Information
# of flows: 929247 (avg. 31.77 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 1.3% 1.2% 1.0% 0.9% 0.9% 0.8% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 558864
Top 10 bandwidth usage (bytes/total in %):
25.2% 9.1% 4.9% 3.6% 2.9% 2.7% 2.4% 2.4% 1.8% 1.4%
# of IPv6 addresses: 1128
Top 10 bandwidth usage (bytes/total in %):
24.8% 7.7% 7.7% 7.0% 7.0% 5.0% 4.2% 3.8% 3.4% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201003111400.pktlen.png)
detailed numbers
[ 32- 63]: 4076019
[ 64- 127]: 9439910
[ 128- 255]: 2835042
[ 256- 511]: 2193826
[ 512- 1023]: 791235
[ 1024- 2047]: 10184372
Protocol Breakdown
![[protocol breakdown chart]](201003111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29520404 (100.00%) 17181908820 (100.00%) 582.04
ip 29472131 ( 99.84%) 17173371556 ( 99.95%) 582.70
tcp 14484920 ( 49.07%) 9790735105 ( 56.98%) 675.93
http(s) 5234667 ( 17.73%) 6855068818 ( 39.90%) 1309.55
http(c) 4085632 ( 13.84%) 654902164 ( 3.81%) 160.29
squid 585357 ( 1.98%) 102879037 ( 0.60%) 175.75
smtp 242356 ( 0.82%) 106607186 ( 0.62%) 439.88
ftp 49452 ( 0.17%) 10659631 ( 0.06%) 215.56
pop3 22898 ( 0.08%) 13771773 ( 0.08%) 601.44
imap 8699 ( 0.03%) 7575950 ( 0.04%) 870.90
telnet 628 ( 0.00%) 47703 ( 0.00%) 75.96
ssh 240002 ( 0.81%) 37281558 ( 0.22%) 155.34
dns 61752 ( 0.21%) 4210673 ( 0.02%) 68.19
bgp 173 ( 0.00%) 62982 ( 0.00%) 364.06
napster 79 ( 0.00%) 7272 ( 0.00%) 92.05
realaud 67 ( 0.00%) 6205 ( 0.00%) 92.61
rtsp 80457 ( 0.27%) 20975296 ( 0.12%) 260.70
icecast 10612 ( 0.04%) 700214 ( 0.00%) 65.98
hotline 16 ( 0.00%) 1259 ( 0.00%) 78.69
other 3862073 ( 13.08%) 1975977384 ( 11.50%) 511.64
udp 11757460 ( 39.83%) 5759056088 ( 33.52%) 489.82
dns 1308571 ( 4.43%) 222930662 ( 1.30%) 170.36
realaud 30 ( 0.00%) 3328 ( 0.00%) 110.93
halflif 33 ( 0.00%) 3595 ( 0.00%) 108.94
starcra 132 ( 0.00%) 13615 ( 0.00%) 103.14
everque 163 ( 0.00%) 43572 ( 0.00%) 267.31
unreal 183 ( 0.00%) 31063 ( 0.00%) 169.74
quake 50 ( 0.00%) 5967 ( 0.00%) 119.34
cuseeme 3 ( 0.00%) 265 ( 0.00%) 88.33
other 10447846 ( 35.39%) 5535856631 ( 32.22%) 529.86
icmp 574947 ( 1.95%) 55787304 ( 0.32%) 97.03
ipip 347 ( 0.00%) 42794 ( 0.00%) 123.33
ipsec 1221 ( 0.00%) 646062 ( 0.00%) 529.13
ip6 2645203 ( 8.96%) 1565990756 ( 9.11%) 592.01
other 8033 ( 0.03%) 1113447 ( 0.01%) 138.61
frag 3837 ( 0.01%) 3027461 ( 0.02%) 789.02
ip6 48273 ( 0.16%) 8537264 ( 0.05%) 176.85
tcp6 13825 ( 0.05%) 1806847 ( 0.01%) 130.69
http(s) 144 ( 0.00%) 83848 ( 0.00%) 582.28
http(c) 2985 ( 0.01%) 278465 ( 0.00%) 93.29
smtp 164 ( 0.00%) 32940 ( 0.00%) 200.85
ssh 5538 ( 0.02%) 865612 ( 0.01%) 156.30
dns 336 ( 0.00%) 39830 ( 0.00%) 118.54
bgp 119 ( 0.00%) 17328 ( 0.00%) 145.61
other 4539 ( 0.02%) 488824 ( 0.00%) 107.69
udp6 27560 ( 0.09%) 5847433 ( 0.03%) 212.17
dns 27343 ( 0.09%) 5801096 ( 0.03%) 212.16
other 217 ( 0.00%) 46337 ( 0.00%) 213.53
icmp6 6758 ( 0.02%) 788797 ( 0.00%) 116.72
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 99 ( 0.00%) 89971 ( 0.00%) 908.80
tcpdump file: 201003111400.dump.gz (736.17 MB)