Traffic Trace Info
DumpFile: 201003241400.dump
FileSize: 2127.14MB
Id: 201003241400
StartTime: Wed Mar 24 14:00:01 2010
EndTime: Wed Mar 24 14:15:01 2010
TotalTime: 899.43 seconds
TotalCapSize: 1653.46MB CapLen: 96 bytes
# of packets: 31042399 (18387.02MB)
AvgRate: 171.51Mbps stddev:16.62M
IP flow (unique src/dst pair) Information
# of flows: 828274 (avg. 37.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 2.2% 1.8% 1.3% 1.0% 0.9% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 475945
Top 10 bandwidth usage (bytes/total in %):
27.9% 9.3% 3.6% 3.3% 2.9% 2.7% 2.6% 2.4% 2.3% 1.8%
# of IPv6 addresses: 1092
Top 10 bandwidth usage (bytes/total in %):
30.1% 30.1% 14.5% 10.9% 4.5% 4.5% 4.5% 4.3% 4.3% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201003241400.pktlen.png)
detailed numbers
[ 32- 63]: 4087207
[ 64- 127]: 9668367
[ 128- 255]: 2440529
[ 256- 511]: 2407799
[ 512- 1023]: 837370
[ 1024- 2047]: 11601127
Protocol Breakdown
![[protocol breakdown chart]](201003241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31042399 (100.00%) 19280184929 (100.00%) 621.09
ip 30991023 ( 99.83%) 19265047671 ( 99.92%) 621.63
tcp 15277690 ( 49.22%) 11269218026 ( 58.45%) 737.63
http(s) 5490479 ( 17.69%) 7171695205 ( 37.20%) 1306.21
http(c) 4197268 ( 13.52%) 513075709 ( 2.66%) 122.24
squid 287076 ( 0.92%) 64265872 ( 0.33%) 223.86
smtp 310185 ( 1.00%) 109194675 ( 0.57%) 352.03
ftp 59130 ( 0.19%) 9609171 ( 0.05%) 162.51
pop3 29027 ( 0.09%) 17954747 ( 0.09%) 618.55
imap 4536 ( 0.01%) 2264512 ( 0.01%) 499.23
telnet 23 ( 0.00%) 4097 ( 0.00%) 178.13
ssh 222245 ( 0.72%) 183837973 ( 0.95%) 827.19
dns 54512 ( 0.18%) 3711157 ( 0.02%) 68.08
bgp 181 ( 0.00%) 75967 ( 0.00%) 419.71
napster 102 ( 0.00%) 22725 ( 0.00%) 222.79
realaud 134 ( 0.00%) 14378 ( 0.00%) 107.30
rtsp 41458 ( 0.13%) 9612698 ( 0.05%) 231.87
icecast 22423 ( 0.07%) 12991703 ( 0.07%) 579.39
hotline 24 ( 0.00%) 1488 ( 0.00%) 62.00
other 4558883 ( 14.69%) 3170885709 ( 16.45%) 695.54
udp 12307312 ( 39.65%) 6142446156 ( 31.86%) 499.09
dns 1071190 ( 3.45%) 174056084 ( 0.90%) 162.49
realaud 48 ( 0.00%) 7385 ( 0.00%) 153.85
halflif 28 ( 0.00%) 3212 ( 0.00%) 114.71
starcra 277 ( 0.00%) 27383 ( 0.00%) 98.86
everque 223 ( 0.00%) 49051 ( 0.00%) 219.96
unreal 49 ( 0.00%) 6663 ( 0.00%) 135.98
quake 21 ( 0.00%) 2106 ( 0.00%) 100.29
cuseeme 3 ( 0.00%) 507 ( 0.00%) 169.00
other 11234467 ( 36.19%) 5967917715 ( 30.95%) 531.22
icmp 354853 ( 1.14%) 42997841 ( 0.22%) 121.17
ipip 311 ( 0.00%) 36294 ( 0.00%) 116.70
ipsec 714 ( 0.00%) 124284 ( 0.00%) 174.07
ip6 3048523 ( 9.82%) 1809872891 ( 9.39%) 593.69
other 1620 ( 0.01%) 352179 ( 0.00%) 217.39
frag 15869 ( 0.05%) 14175218 ( 0.07%) 893.26
ip6 51376 ( 0.17%) 15137258 ( 0.08%) 294.64
tcp6 17018 ( 0.05%) 7576844 ( 0.04%) 445.23
http(s) 4245 ( 0.01%) 5772415 ( 0.03%) 1359.82
http(c) 4462 ( 0.01%) 417942 ( 0.00%) 93.67
smtp 801 ( 0.00%) 148748 ( 0.00%) 185.70
ssh 4374 ( 0.01%) 939096 ( 0.00%) 214.70
dns 30 ( 0.00%) 6996 ( 0.00%) 233.20
bgp 125 ( 0.00%) 17141 ( 0.00%) 137.13
other 2981 ( 0.01%) 274506 ( 0.00%) 92.09
udp6 30453 ( 0.10%) 6721624 ( 0.03%) 220.72
dns 30299 ( 0.10%) 6679352 ( 0.03%) 220.45
other 154 ( 0.00%) 42272 ( 0.00%) 274.49
icmp6 3440 ( 0.01%) 407439 ( 0.00%) 118.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 435 ( 0.00%) 427271 ( 0.00%) 982.23
tcpdump file: 201003241400.dump.gz (755.70 MB)