Traffic Trace Info
DumpFile: 201003191400.dump
FileSize: 2372.23MB
Id: 201003191400
StartTime: Fri Mar 19 14:00:01 2010
EndTime: Fri Mar 19 14:15:01 2010
TotalTime: 899.87 seconds
TotalCapSize: 1843.26MB CapLen: 96 bytes
# of packets: 34666280 (20813.29MB)
AvgRate: 194.04Mbps stddev:16.34M
IP flow (unique src/dst pair) Information
# of flows: 1026826 (avg. 33.76 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.6% 7.7% 2.5% 2.1% 1.7% 1.6% 1.2% 1.2% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 627667
Top 10 bandwidth usage (bytes/total in %):
24.0% 9.7% 9.7% 8.0% 8.0% 7.2% 2.6% 2.6% 2.3% 2.3%
# of IPv6 addresses: 1009
Top 10 bandwidth usage (bytes/total in %):
97.0% 97.0% 0.8% 0.2% 0.2% 0.2% 0.2% 0.1% 0.1% 0.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201003191400.pktlen.png)
detailed numbers
[ 32- 63]: 5309271
[ 64- 127]: 10487373
[ 128- 255]: 2535152
[ 256- 511]: 2255156
[ 512- 1023]: 761997
[ 1024- 2047]: 13317331
Protocol Breakdown
![[protocol breakdown chart]](201003191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34666280 (100.00%) 21824319837 (100.00%) 629.55
ip 34450445 ( 99.38%) 21559891458 ( 98.79%) 625.82
tcp 18434222 ( 53.18%) 13236060830 ( 60.65%) 718.02
http(s) 5422783 ( 15.64%) 7301625715 ( 33.46%) 1346.47
http(c) 4835770 ( 13.95%) 877263088 ( 4.02%) 181.41
squid 844034 ( 2.43%) 259189618 ( 1.19%) 307.08
smtp 303482 ( 0.88%) 125517058 ( 0.58%) 413.59
ftp 34065 ( 0.10%) 9960135 ( 0.05%) 292.39
pop3 32417 ( 0.09%) 19970340 ( 0.09%) 616.05
imap 2217 ( 0.01%) 477624 ( 0.00%) 215.44
telnet 23 ( 0.00%) 4113 ( 0.00%) 178.83
ssh 1480962 ( 4.27%) 2096617075 ( 9.61%) 1415.71
dns 55345 ( 0.16%) 3743874 ( 0.02%) 67.65
bgp 170 ( 0.00%) 58523 ( 0.00%) 344.25
napster 168 ( 0.00%) 47468 ( 0.00%) 282.55
realaud 54 ( 0.00%) 4869 ( 0.00%) 90.17
rtsp 179379 ( 0.52%) 22276461 ( 0.10%) 124.19
icecast 6661 ( 0.02%) 435433 ( 0.00%) 65.37
hotline 37 ( 0.00%) 2967 ( 0.00%) 80.19
other 5236649 ( 15.11%) 2518866109 ( 11.54%) 481.01
udp 12980160 ( 37.44%) 6673054780 ( 30.58%) 514.10
dns 973142 ( 2.81%) 147263414 ( 0.67%) 151.33
realaud 92 ( 0.00%) 8135 ( 0.00%) 88.42
halflif 44 ( 0.00%) 5079 ( 0.00%) 115.43
starcra 189 ( 0.00%) 19782 ( 0.00%) 104.67
everque 289 ( 0.00%) 66615 ( 0.00%) 230.50
unreal 58 ( 0.00%) 9705 ( 0.00%) 167.33
quake 29 ( 0.00%) 3358 ( 0.00%) 115.79
cuseeme 4 ( 0.00%) 685 ( 0.00%) 171.25
other 12006173 ( 34.63%) 6525640045 ( 29.90%) 543.52
icmp 522256 ( 1.51%) 42375375 ( 0.19%) 81.14
ipip 290 ( 0.00%) 35205 ( 0.00%) 121.40
ipsec 1211 ( 0.00%) 278802 ( 0.00%) 230.22
ip6 2487647 ( 7.18%) 1598701656 ( 7.33%) 642.66
other 24659 ( 0.07%) 9384810 ( 0.04%) 380.58
frag 1511 ( 0.00%) 1210107 ( 0.01%) 800.86
ip6 215835 ( 0.62%) 264428379 ( 1.21%) 1225.14
tcp6 181801 ( 0.52%) 258398063 ( 1.18%) 1421.32
http(s) 692 ( 0.00%) 751385 ( 0.00%) 1085.82
http(c) 3989 ( 0.01%) 394393 ( 0.00%) 98.87
smtp 106 ( 0.00%) 41418 ( 0.00%) 390.74
ssh 3155 ( 0.01%) 279090 ( 0.00%) 88.46
dns 20 ( 0.00%) 12496 ( 0.00%) 624.80
bgp 118 ( 0.00%) 18062 ( 0.00%) 153.07
other 173721 ( 0.50%) 256901219 ( 1.18%) 1478.81
udp6 27987 ( 0.08%) 5256156 ( 0.02%) 187.81
dns 27635 ( 0.08%) 5199113 ( 0.02%) 188.14
other 352 ( 0.00%) 57043 ( 0.00%) 162.05
icmp6 5984 ( 0.02%) 738750 ( 0.00%) 123.45
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 33 ( 0.00%) 31330 ( 0.00%) 949.39
tcpdump file: 201003191400.dump.gz (836.00 MB)