Traffic Trace Info
DumpFile: 201003181400.dump
FileSize: 2323.79MB
Id: 201003181400
StartTime: Thu Mar 18 14:00:01 2010
EndTime: Thu Mar 18 14:15:01 2010
TotalTime: 900.40 seconds
TotalCapSize: 1798.85MB CapLen: 96 bytes
# of packets: 34401866 (19206.98MB)
AvgRate: 178.95Mbps stddev:20.35M
IP flow (unique src/dst pair) Information
# of flows: 946236 (avg. 36.36 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 1.5% 1.1% 1.1% 1.0% 1.0% 1.0% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 516118
Top 10 bandwidth usage (bytes/total in %):
23.8% 6.5% 4.0% 3.9% 3.0% 2.9% 2.8% 2.7% 2.2% 2.1%
# of IPv6 addresses: 1067
Top 10 bandwidth usage (bytes/total in %):
23.5% 8.3% 8.3% 6.9% 6.0% 3.7% 3.6% 3.1% 3.0% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201003181400.pktlen.png)
detailed numbers
[ 32- 63]: 5347757
[ 64- 127]: 11378850
[ 128- 255]: 2326437
[ 256- 511]: 2433889
[ 512- 1023]: 848575
[ 1024- 2047]: 12066358
Protocol Breakdown
![[protocol breakdown chart]](201003181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34401866 (100.00%) 20139978866 (100.00%) 585.43
ip 34352306 ( 99.86%) 20131299929 ( 99.96%) 586.02
tcp 18119397 ( 52.67%) 12176494459 ( 60.46%) 672.01
http(s) 5267196 ( 15.31%) 6969738161 ( 34.61%) 1323.24
http(c) 4470016 ( 12.99%) 797681927 ( 3.96%) 178.45
squid 1073589 ( 3.12%) 319970853 ( 1.59%) 298.04
smtp 221689 ( 0.64%) 71811987 ( 0.36%) 323.93
ftp 40426 ( 0.12%) 8862655 ( 0.04%) 219.23
pop3 28167 ( 0.08%) 16449414 ( 0.08%) 584.00
imap 2101 ( 0.01%) 375251 ( 0.00%) 178.61
telnet 478 ( 0.00%) 41137 ( 0.00%) 86.06
ssh 251545 ( 0.73%) 311156472 ( 1.54%) 1236.98
dns 55401 ( 0.16%) 7484708 ( 0.04%) 135.10
bgp 211 ( 0.00%) 63144 ( 0.00%) 299.26
napster 266 ( 0.00%) 26504 ( 0.00%) 99.64
realaud 27 ( 0.00%) 2682 ( 0.00%) 99.33
rtsp 289246 ( 0.84%) 79038011 ( 0.39%) 273.26
icecast 22240 ( 0.06%) 15470527 ( 0.08%) 695.62
other 6396792 ( 18.59%) 3578320606 ( 17.77%) 559.39
udp 13118262 ( 38.13%) 6560309133 ( 32.57%) 500.09
dns 867011 ( 2.52%) 131108155 ( 0.65%) 151.22
realaud 1823 ( 0.01%) 110886 ( 0.00%) 60.83
halflif 79 ( 0.00%) 7192 ( 0.00%) 91.04
starcra 158 ( 0.00%) 16861 ( 0.00%) 106.72
everque 246 ( 0.00%) 68211 ( 0.00%) 277.28
unreal 191 ( 0.00%) 29287 ( 0.00%) 153.34
quake 27 ( 0.00%) 2439 ( 0.00%) 90.33
cuseeme 3 ( 0.00%) 267 ( 0.00%) 89.00
other 12248063 ( 35.60%) 6428367260 ( 31.92%) 524.85
icmp 651507 ( 1.89%) 48712333 ( 0.24%) 74.77
ipip 331 ( 0.00%) 42942 ( 0.00%) 129.73
ipsec 5978 ( 0.02%) 1378628 ( 0.01%) 230.62
ip6 2305780 ( 6.70%) 1315363622 ( 6.53%) 570.46
other 151051 ( 0.44%) 28998812 ( 0.14%) 191.98
frag 5063 ( 0.01%) 5302969 ( 0.03%) 1047.40
ip6 49560 ( 0.14%) 8678937 ( 0.04%) 175.12
tcp6 16599 ( 0.05%) 2601349 ( 0.01%) 156.72
http(s) 764 ( 0.00%) 1017333 ( 0.01%) 1331.59
http(c) 6588 ( 0.02%) 610125 ( 0.00%) 92.61
smtp 295 ( 0.00%) 119875 ( 0.00%) 406.36
ssh 3338 ( 0.01%) 277128 ( 0.00%) 83.02
dns 22 ( 0.00%) 9884 ( 0.00%) 449.27
bgp 119 ( 0.00%) 16109 ( 0.00%) 135.37
other 5473 ( 0.02%) 550895 ( 0.00%) 100.66
udp6 26153 ( 0.08%) 5133901 ( 0.03%) 196.30
dns 25379 ( 0.07%) 4994453 ( 0.02%) 196.79
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
other 773 ( 0.00%) 139340 ( 0.00%) 180.26
icmp6 6632 ( 0.02%) 816529 ( 0.00%) 123.12
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 146 ( 0.00%) 123078 ( 0.00%) 843.00
tcpdump file: 201003181400.dump.gz (853.92 MB)