Traffic Trace Info
DumpFile: 201003171400.dump
FileSize: 2206.27MB
Id: 201003171400
StartTime: Wed Mar 17 14:00:01 2010
EndTime: Wed Mar 17 14:15:01 2010
TotalTime: 900.23 seconds
TotalCapSize: 1711.41MB CapLen: 96 bytes
# of packets: 32430403 (19391.66MB)
AvgRate: 180.71Mbps stddev:17.22M
IP flow (unique src/dst pair) Information
# of flows: 836582 (avg. 38.77 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.8% 2.1% 1.7% 1.2% 1.2% 1.0% 1.0% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 489090
Top 10 bandwidth usage (bytes/total in %):
25.6% 8.4% 5.9% 4.9% 4.5% 3.7% 2.6% 2.5% 2.3% 2.3%
# of IPv6 addresses: 1073
Top 10 bandwidth usage (bytes/total in %):
27.6% 7.4% 5.0% 4.9% 4.5% 4.4% 4.4% 4.1% 3.9% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201003171400.pktlen.png)
detailed numbers
[ 32- 63]: 5022888
[ 64- 127]: 9705245
[ 128- 255]: 2667777
[ 256- 511]: 1880089
[ 512- 1023]: 958592
[ 1024- 2047]: 12195812
Protocol Breakdown
![[protocol breakdown chart]](201003171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32430403 (100.00%) 20333626078 (100.00%) 626.99
ip 32385861 ( 99.86%) 20325629942 ( 99.96%) 627.61
tcp 18219889 ( 56.18%) 13215791046 ( 64.99%) 725.35
http(s) 6382060 ( 19.68%) 8586585076 ( 42.23%) 1345.43
http(c) 4371601 ( 13.48%) 470345244 ( 2.31%) 107.59
squid 674589 ( 2.08%) 142517394 ( 0.70%) 211.27
smtp 226209 ( 0.70%) 76927061 ( 0.38%) 340.07
ftp 38002 ( 0.12%) 11031927 ( 0.05%) 290.30
pop3 21958 ( 0.07%) 15080569 ( 0.07%) 686.79
imap 3348 ( 0.01%) 862590 ( 0.00%) 257.64
telnet 570 ( 0.00%) 43009 ( 0.00%) 75.45
ssh 48317 ( 0.15%) 8450303 ( 0.04%) 174.89
dns 52727 ( 0.16%) 3608264 ( 0.02%) 68.43
bgp 188 ( 0.00%) 81218 ( 0.00%) 432.01
napster 51 ( 0.00%) 6619 ( 0.00%) 129.78
realaud 254 ( 0.00%) 19005 ( 0.00%) 74.82
rtsp 268701 ( 0.83%) 293094035 ( 1.44%) 1090.78
icecast 18037 ( 0.06%) 1201348 ( 0.01%) 66.60
other 6113273 ( 18.85%) 3605937144 ( 17.73%) 589.85
udp 11472427 ( 35.38%) 5863808287 ( 28.84%) 511.12
dns 887814 ( 2.74%) 135632046 ( 0.67%) 152.77
rip 9 ( 0.00%) 743 ( 0.00%) 82.56
realaud 959 ( 0.00%) 67253 ( 0.00%) 70.13
halflif 66 ( 0.00%) 8627 ( 0.00%) 130.71
starcra 143 ( 0.00%) 13314 ( 0.00%) 93.10
everque 152 ( 0.00%) 28617 ( 0.00%) 188.27
unreal 64 ( 0.00%) 12946 ( 0.00%) 202.28
quake 15 ( 0.00%) 1722 ( 0.00%) 114.80
cuseeme 7 ( 0.00%) 557 ( 0.00%) 79.57
other 10580570 ( 32.63%) 5727664793 ( 28.17%) 541.34
icmp 525619 ( 1.62%) 38843044 ( 0.19%) 73.90
ipip 354 ( 0.00%) 44380 ( 0.00%) 125.37
ipsec 1267 ( 0.00%) 446914 ( 0.00%) 352.73
ip6 2164882 ( 6.68%) 1206480719 ( 5.93%) 557.30
other 1423 ( 0.00%) 215552 ( 0.00%) 151.48
frag 7032 ( 0.02%) 5868261 ( 0.03%) 834.51
ip6 44542 ( 0.14%) 7996136 ( 0.04%) 179.52
tcp6 11715 ( 0.04%) 1866229 ( 0.01%) 159.30
http(s) 659 ( 0.00%) 658188 ( 0.00%) 998.77
http(c) 3982 ( 0.01%) 369778 ( 0.00%) 92.86
smtp 526 ( 0.00%) 231125 ( 0.00%) 439.40
ssh 3225 ( 0.01%) 267398 ( 0.00%) 82.91
dns 11 ( 0.00%) 2439 ( 0.00%) 221.73
bgp 122 ( 0.00%) 16259 ( 0.00%) 133.27
other 3190 ( 0.01%) 321042 ( 0.00%) 100.64
udp6 27036 ( 0.08%) 5380116 ( 0.03%) 199.00
dns 26566 ( 0.08%) 5294359 ( 0.03%) 199.29
other 470 ( 0.00%) 85757 ( 0.00%) 182.46
icmp6 5724 ( 0.02%) 714958 ( 0.00%) 124.91
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 37 ( 0.00%) 30753 ( 0.00%) 831.16
tcpdump file: 201003171400.dump.gz (796.24 MB)