Traffic Trace Info
DumpFile: 201003121400.dump
FileSize: 2179.11MB
Id: 201003121400
StartTime: Fri Mar 12 14:00:01 2010
EndTime: Fri Mar 12 14:15:01 2010
TotalTime: 900.51 seconds
TotalCapSize: 1699.05MB CapLen: 96 bytes
# of packets: 31460550 (17590.39MB)
AvgRate: 163.86Mbps stddev:15.71M
IP flow (unique src/dst pair) Information
# of flows: 1020478 (avg. 30.83 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.0% 2.2% 1.6% 1.5% 1.3% 1.2% 1.2% 1.1% 1.0% 0.8%
IP address Information
# of IPv4 addresses: 618069
Top 10 bandwidth usage (bytes/total in %):
21.1% 8.2% 8.2% 7.6% 5.1% 4.0% 3.4% 3.3% 2.7% 2.4%
# of IPv6 addresses: 1090
Top 10 bandwidth usage (bytes/total in %):
26.1% 11.5% 11.5% 7.3% 4.9% 4.0% 3.6% 3.5% 3.4% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201003121400.pktlen.png)
detailed numbers
[ 32- 63]: 4951531
[ 64- 127]: 9872174
[ 128- 255]: 2709101
[ 256- 511]: 2166185
[ 512- 1023]: 871042
[ 1024- 2047]: 10890517
Protocol Breakdown
![[protocol breakdown chart]](201003121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31460550 (100.00%) 18444856895 (100.00%) 586.29
ip 31416100 ( 99.86%) 18436743990 ( 99.96%) 586.86
tcp 18114311 ( 57.58%) 12446738570 ( 67.48%) 687.12
http(s) 5241797 ( 16.66%) 6871860939 ( 37.26%) 1310.97
http(c) 3881877 ( 12.34%) 412519951 ( 2.24%) 106.27
squid 573612 ( 1.82%) 111984374 ( 0.61%) 195.23
smtp 192816 ( 0.61%) 48947131 ( 0.27%) 253.85
ftp 58599 ( 0.19%) 14415783 ( 0.08%) 246.01
pop3 18356 ( 0.06%) 9272521 ( 0.05%) 505.15
imap 3615 ( 0.01%) 1014010 ( 0.01%) 280.50
telnet 867 ( 0.00%) 82272 ( 0.00%) 94.89
ssh 2241314 ( 7.12%) 1584153878 ( 8.59%) 706.80
dns 61397 ( 0.20%) 4187137 ( 0.02%) 68.20
bgp 149 ( 0.00%) 53986 ( 0.00%) 362.32
napster 2 ( 0.00%) 156 ( 0.00%) 78.00
realaud 46 ( 0.00%) 6532 ( 0.00%) 142.00
rtsp 157139 ( 0.50%) 23404904 ( 0.13%) 148.94
icecast 286597 ( 0.91%) 237688388 ( 1.29%) 829.35
other 5396124 ( 17.15%) 3127146368 ( 16.95%) 579.52
udp 9808124 ( 31.18%) 4460430800 ( 24.18%) 454.77
dns 953570 ( 3.03%) 144218235 ( 0.78%) 151.24
rip 6 ( 0.00%) 618 ( 0.00%) 103.00
realaud 44 ( 0.00%) 5446 ( 0.00%) 123.77
halflif 59 ( 0.00%) 8867 ( 0.00%) 150.29
starcra 217 ( 0.00%) 34169 ( 0.00%) 157.46
everque 179 ( 0.00%) 33994 ( 0.00%) 189.91
unreal 182 ( 0.00%) 27376 ( 0.00%) 150.42
quake 23 ( 0.00%) 2452 ( 0.00%) 106.61
cuseeme 1 ( 0.00%) 89 ( 0.00%) 89.00
other 8849743 ( 28.13%) 4315341178 ( 23.40%) 487.62
icmp 626268 ( 1.99%) 91051621 ( 0.49%) 145.39
ipip 351 ( 0.00%) 45822 ( 0.00%) 130.55
ipsec 3955 ( 0.01%) 1205786 ( 0.01%) 304.88
ip6 2608309 ( 8.29%) 1406425811 ( 7.63%) 539.21
other 254782 ( 0.81%) 30845580 ( 0.17%) 121.07
frag 8143 ( 0.03%) 5739880 ( 0.03%) 704.89
ip6 44450 ( 0.14%) 8112905 ( 0.04%) 182.52
tcp6 11504 ( 0.04%) 1465408 ( 0.01%) 127.38
http(s) 156 ( 0.00%) 122123 ( 0.00%) 782.84
http(c) 3290 ( 0.01%) 326059 ( 0.00%) 99.11
smtp 43 ( 0.00%) 11536 ( 0.00%) 268.28
ssh 3319 ( 0.01%) 283778 ( 0.00%) 85.50
dns 406 ( 0.00%) 41054 ( 0.00%) 101.12
bgp 119 ( 0.00%) 19557 ( 0.00%) 164.34
other 4171 ( 0.01%) 661301 ( 0.00%) 158.55
udp6 26418 ( 0.08%) 5376916 ( 0.03%) 203.53
dns 25533 ( 0.08%) 5107002 ( 0.03%) 200.02
other 885 ( 0.00%) 269914 ( 0.00%) 304.99
icmp6 5726 ( 0.02%) 712982 ( 0.00%) 124.52
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 772 ( 0.00%) 553519 ( 0.00%) 716.99
tcpdump file: 201003121400.dump.gz (781.42 MB)