Traffic Trace Info
DumpFile: 201003211400.dump
FileSize: 1580.22MB
Id: 201003211400
StartTime: Sun Mar 21 14:00:00 2010
EndTime: Sun Mar 21 14:15:00 2010
TotalTime: 899.93 seconds
TotalCapSize: 1224.65MB CapLen: 96 bytes
# of packets: 23302029 (12695.12MB)
AvgRate: 118.33Mbps stddev:9.35M
IP flow (unique src/dst pair) Information
# of flows: 769179 (avg. 30.29 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.5% 3.0% 1.7% 1.7% 1.6% 1.5% 1.3% 1.2% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 493057
Top 10 bandwidth usage (bytes/total in %):
33.1% 12.3% 8.7% 8.7% 5.0% 3.2% 3.1% 3.1% 2.7% 2.6%
# of IPv6 addresses: 862
Top 10 bandwidth usage (bytes/total in %):
77.6% 77.6% 9.6% 2.4% 1.0% 1.0% 0.8% 0.8% 0.7% 0.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201003211400.pktlen.png)
detailed numbers
[ 32- 63]: 2896594
[ 64- 127]: 7452847
[ 128- 255]: 2433771
[ 256- 511]: 2074477
[ 512- 1023]: 717644
[ 1024- 2047]: 7726696
Protocol Breakdown
![[protocol breakdown chart]](201003211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23302029 (100.00%) 13311797666 (100.00%) 571.27
ip 23248394 ( 99.77%) 13287302216 ( 99.82%) 571.54
tcp 9460597 ( 40.60%) 6656340039 ( 50.00%) 703.59
http(s) 3633624 ( 15.59%) 4674091715 ( 35.11%) 1286.34
http(c) 2340372 ( 10.04%) 225939097 ( 1.70%) 96.54
squid 222595 ( 0.96%) 54015371 ( 0.41%) 242.66
smtp 201647 ( 0.87%) 52810524 ( 0.40%) 261.90
ftp 78463 ( 0.34%) 14834538 ( 0.11%) 189.06
pop3 13178 ( 0.06%) 14789366 ( 0.11%) 1122.28
imap 1879 ( 0.01%) 922637 ( 0.01%) 491.03
telnet 280 ( 0.00%) 20547 ( 0.00%) 73.38
ssh 72740 ( 0.31%) 91406487 ( 0.69%) 1256.62
dns 45889 ( 0.20%) 3133694 ( 0.02%) 68.29
bgp 153 ( 0.00%) 61369 ( 0.00%) 401.10
napster 36 ( 0.00%) 2881 ( 0.00%) 80.03
realaud 74 ( 0.00%) 8722 ( 0.00%) 117.86
rtsp 157474 ( 0.68%) 63847248 ( 0.48%) 405.45
icecast 315 ( 0.00%) 20677 ( 0.00%) 65.64
other 2691874 ( 11.55%) 1460434926 ( 10.97%) 542.53
udp 10301313 ( 44.21%) 4870224554 ( 36.59%) 472.78
dns 758492 ( 3.26%) 111387932 ( 0.84%) 146.85
realaud 2474 ( 0.01%) 151956 ( 0.00%) 61.42
halflif 52 ( 0.00%) 5370 ( 0.00%) 103.27
starcra 158 ( 0.00%) 16831 ( 0.00%) 106.53
everque 146 ( 0.00%) 28378 ( 0.00%) 194.37
unreal 94 ( 0.00%) 14483 ( 0.00%) 154.07
quake 24 ( 0.00%) 2666 ( 0.00%) 111.08
cuseeme 4 ( 0.00%) 317 ( 0.00%) 79.25
other 9539572 ( 40.94%) 4758579349 ( 35.75%) 498.83
icmp 458846 ( 1.97%) 32835304 ( 0.25%) 71.56
ipip 323 ( 0.00%) 40914 ( 0.00%) 126.67
ipsec 133522 ( 0.57%) 82704712 ( 0.62%) 619.41
ip6 2892023 ( 12.41%) 1644946432 ( 12.36%) 568.79
other 1770 ( 0.01%) 210261 ( 0.00%) 118.79
frag 1196 ( 0.01%) 878678 ( 0.01%) 734.68
ip6 53635 ( 0.23%) 24495450 ( 0.18%) 456.71
tcp6 27854 ( 0.12%) 20001707 ( 0.15%) 718.09
http(s) 39 ( 0.00%) 17029 ( 0.00%) 436.64
http(c) 3808 ( 0.02%) 359688 ( 0.00%) 94.46
smtp 40 ( 0.00%) 12736 ( 0.00%) 318.40
ssh 3224 ( 0.01%) 267304 ( 0.00%) 82.91
dns 194 ( 0.00%) 18712 ( 0.00%) 96.45
bgp 119 ( 0.00%) 16873 ( 0.00%) 141.79
other 20430 ( 0.09%) 19309365 ( 0.15%) 945.15
udp6 22438 ( 0.10%) 4081977 ( 0.03%) 181.92
dns 22022 ( 0.09%) 3999434 ( 0.03%) 181.61
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
other 415 ( 0.00%) 82437 ( 0.00%) 198.64
icmp6 3288 ( 0.01%) 384420 ( 0.00%) 116.92
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 24 ( 0.00%) 23130 ( 0.00%) 963.75
tcpdump file: 201003211400.dump.gz (564.56 MB)