Traffic Trace Info
DumpFile: 201003131400.dump
FileSize: 1837.67MB
Id: 201003131400
StartTime: Sat Mar 13 14:00:00 2010
EndTime: Sat Mar 13 14:15:00 2010
TotalTime: 899.93 seconds
TotalCapSize: 1429.08MB CapLen: 96 bytes
# of packets: 26777079 (14800.45MB)
AvgRate: 137.98Mbps stddev:18.00M
IP flow (unique src/dst pair) Information
# of flows: 801723 (avg. 33.40 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 2.5% 2.4% 1.2% 1.2% 1.1% 0.9% 0.8% 0.7% 0.5%
IP address Information
# of IPv4 addresses: 484451
Top 10 bandwidth usage (bytes/total in %):
23.1% 5.4% 5.4% 5.1% 3.5% 3.3% 2.8% 2.7% 2.7% 2.5%
# of IPv6 addresses: 988
Top 10 bandwidth usage (bytes/total in %):
27.8% 13.6% 13.6% 7.8% 5.9% 5.5% 5.5% 3.0% 2.8% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201003131400.pktlen.png)
detailed numbers
[ 32- 63]: 3629670
[ 64- 127]: 9418816
[ 128- 255]: 1966209
[ 256- 511]: 1781661
[ 512- 1023]: 1038937
[ 1024- 2047]: 8941786
Protocol Breakdown
![[protocol breakdown chart]](201003131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26777079 (100.00%) 15519401184 (100.00%) 579.58
ip 26736585 ( 99.85%) 15511768137 ( 99.95%) 580.17
tcp 15148880 ( 56.57%) 10521795667 ( 67.80%) 694.56
http(s) 6151266 ( 22.97%) 8189428964 ( 52.77%) 1331.34
http(c) 2878682 ( 10.75%) 284719752 ( 1.83%) 98.91
squid 634744 ( 2.37%) 126338874 ( 0.81%) 199.04
smtp 211926 ( 0.79%) 60963446 ( 0.39%) 287.66
ftp 56989 ( 0.21%) 9224324 ( 0.06%) 161.86
pop3 21933 ( 0.08%) 17881230 ( 0.12%) 815.27
imap 2826 ( 0.01%) 1520614 ( 0.01%) 538.08
telnet 1493 ( 0.01%) 132269 ( 0.00%) 88.59
ssh 1480378 ( 5.53%) 268633288 ( 1.73%) 181.46
dns 63426 ( 0.24%) 6747036 ( 0.04%) 106.38
bgp 154 ( 0.00%) 55396 ( 0.00%) 359.71
napster 8 ( 0.00%) 835 ( 0.00%) 104.38
realaud 145 ( 0.00%) 19851 ( 0.00%) 136.90
rtsp 337575 ( 1.26%) 227047651 ( 1.46%) 672.58
icecast 5038 ( 0.02%) 340375 ( 0.00%) 67.56
other 3302089 ( 12.33%) 1328578648 ( 8.56%) 402.34
udp 9341616 ( 34.89%) 4150644312 ( 26.74%) 444.32
dns 837292 ( 3.13%) 125100867 ( 0.81%) 149.41
rip 1 ( 0.00%) 109 ( 0.00%) 109.00
realaud 1978 ( 0.01%) 125980 ( 0.00%) 63.69
halflif 37 ( 0.00%) 3818 ( 0.00%) 103.19
starcra 210 ( 0.00%) 28075 ( 0.00%) 133.69
everque 181 ( 0.00%) 33678 ( 0.00%) 186.07
unreal 96 ( 0.00%) 14469 ( 0.00%) 150.72
quake 37 ( 0.00%) 3821 ( 0.00%) 103.27
cuseeme 1 ( 0.00%) 81 ( 0.00%) 81.00
other 8501680 ( 31.75%) 4025285227 ( 25.94%) 473.47
icmp 519221 ( 1.94%) 38445275 ( 0.25%) 74.04
ipip 348 ( 0.00%) 45572 ( 0.00%) 130.95
ipsec 871 ( 0.00%) 247106 ( 0.00%) 283.70
ip6 1710380 ( 6.39%) 794367055 ( 5.12%) 464.44
other 15269 ( 0.06%) 6223150 ( 0.04%) 407.57
frag 2537 ( 0.01%) 2211084 ( 0.01%) 871.53
ip6 40494 ( 0.15%) 7633047 ( 0.05%) 188.50
tcp6 11668 ( 0.04%) 2340811 ( 0.02%) 200.62
http(s) 894 ( 0.00%) 1220969 ( 0.01%) 1365.74
http(c) 2724 ( 0.01%) 250505 ( 0.00%) 91.96
smtp 50 ( 0.00%) 6038 ( 0.00%) 120.76
ssh 3229 ( 0.01%) 267738 ( 0.00%) 82.92
dns 471 ( 0.00%) 44084 ( 0.00%) 93.60
bgp 119 ( 0.00%) 15764 ( 0.00%) 132.47
other 4181 ( 0.02%) 535713 ( 0.00%) 128.13
udp6 24104 ( 0.09%) 4684326 ( 0.03%) 194.34
dns 22382 ( 0.08%) 4256730 ( 0.03%) 190.19
other 1722 ( 0.01%) 427596 ( 0.00%) 248.31
icmp6 4669 ( 0.02%) 582303 ( 0.00%) 124.72
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 23 ( 0.00%) 21527 ( 0.00%) 935.96
tcpdump file: 201003131400.dump.gz (691.44 MB)