Traffic Trace Info
DumpFile: 201003141400.dump
FileSize: 1706.15MB
Id: 201003141400
StartTime: Sun Mar 14 14:00:01 2010
EndTime: Sun Mar 14 14:15:00 2010
TotalTime: 899.42 seconds
TotalCapSize: 1319.44MB CapLen: 96 bytes
# of packets: 25342677 (12811.28MB)
AvgRate: 119.47Mbps stddev:14.82M
IP flow (unique src/dst pair) Information
# of flows: 1021295 (avg. 24.81 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.0% 1.4% 1.3% 1.1% 0.9% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 610583
Top 10 bandwidth usage (bytes/total in %):
31.6% 7.4% 3.8% 3.0% 2.9% 2.8% 2.4% 2.1% 1.9% 1.9%
# of IPv6 addresses: 910
Top 10 bandwidth usage (bytes/total in %):
33.8% 9.4% 6.9% 6.0% 5.2% 4.2% 3.4% 2.9% 2.9% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201003141400.pktlen.png)
detailed numbers
[ 32- 63]: 3860297
[ 64- 127]: 8872548
[ 128- 255]: 2202582
[ 256- 511]: 2080554
[ 512- 1023]: 589561
[ 1024- 2047]: 7737135
Protocol Breakdown
![[protocol breakdown chart]](201003141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25342677 (100.00%) 13433601434 (100.00%) 530.08
ip 25302403 ( 99.84%) 13427328272 ( 99.95%) 530.67
tcp 12137101 ( 47.89%) 7581015770 ( 56.43%) 624.62
http(s) 3474670 ( 13.71%) 4600357164 ( 34.25%) 1323.97
http(c) 2173212 ( 8.58%) 286165820 ( 2.13%) 131.68
squid 833130 ( 3.29%) 138063605 ( 1.03%) 165.72
smtp 242392 ( 0.96%) 43198989 ( 0.32%) 178.22
ftp 105524 ( 0.42%) 12784296 ( 0.10%) 121.15
pop3 17129 ( 0.07%) 13595318 ( 0.10%) 793.70
imap 1283 ( 0.01%) 865331 ( 0.01%) 674.46
telnet 713 ( 0.00%) 54919 ( 0.00%) 77.03
ssh 350716 ( 1.38%) 73987766 ( 0.55%) 210.96
dns 46385 ( 0.18%) 3186713 ( 0.02%) 68.70
bgp 147 ( 0.00%) 53921 ( 0.00%) 366.81
napster 121 ( 0.00%) 10520 ( 0.00%) 86.94
realaud 6 ( 0.00%) 1487 ( 0.00%) 247.83
rtsp 29920 ( 0.12%) 28840756 ( 0.21%) 963.93
icecast 4924 ( 0.02%) 331487 ( 0.00%) 67.32
other 4856828 ( 19.16%) 2379517618 ( 17.71%) 489.93
udp 10604181 ( 41.84%) 4807543610 ( 35.79%) 453.36
dns 774208 ( 3.05%) 113329872 ( 0.84%) 146.38
realaud 107 ( 0.00%) 9893 ( 0.00%) 92.46
halflif 41 ( 0.00%) 4172 ( 0.00%) 101.76
starcra 162 ( 0.00%) 17893 ( 0.00%) 110.45
everque 136 ( 0.00%) 26063 ( 0.00%) 191.64
unreal 138 ( 0.00%) 23718 ( 0.00%) 171.87
quake 33 ( 0.00%) 3797 ( 0.00%) 115.06
cuseeme 3 ( 0.00%) 266 ( 0.00%) 88.67
other 9828342 ( 38.78%) 4694017818 ( 34.94%) 477.60
icmp 541716 ( 2.14%) 40073036 ( 0.30%) 73.97
ipip 317 ( 0.00%) 39538 ( 0.00%) 124.73
ipsec 751 ( 0.00%) 167114 ( 0.00%) 222.52
ip6 2013649 ( 7.95%) 997929344 ( 7.43%) 495.58
other 4688 ( 0.02%) 559860 ( 0.00%) 119.42
frag 3608 ( 0.01%) 2590873 ( 0.02%) 718.09
ip6 40274 ( 0.16%) 6273162 ( 0.05%) 155.76
tcp6 11055 ( 0.04%) 1146708 ( 0.01%) 103.73
http(s) 126 ( 0.00%) 128377 ( 0.00%) 1018.87
http(c) 2848 ( 0.01%) 261198 ( 0.00%) 91.71
smtp 70 ( 0.00%) 18121 ( 0.00%) 258.87
ssh 3234 ( 0.01%) 268448 ( 0.00%) 83.01
dns 593 ( 0.00%) 56893 ( 0.00%) 95.94
bgp 124 ( 0.00%) 15662 ( 0.00%) 126.31
other 4060 ( 0.02%) 398009 ( 0.00%) 98.03
udp6 23883 ( 0.09%) 4434107 ( 0.03%) 185.66
dns 23742 ( 0.09%) 4403732 ( 0.03%) 185.48
other 141 ( 0.00%) 30375 ( 0.00%) 215.43
icmp6 5261 ( 0.02%) 647857 ( 0.00%) 123.14
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 45 ( 0.00%) 40410 ( 0.00%) 898.00
tcpdump file: 201003141400.dump.gz (640.06 MB)