Traffic Trace Info
DumpFile: 201003271400.dump
FileSize: 2293.40MB
Id: 201003271400
StartTime: Sat Mar 27 14:00:01 2010
EndTime: Sat Mar 27 14:15:01 2010
TotalTime: 900.48 seconds
TotalCapSize: 1788.97MB CapLen: 96 bytes
# of packets: 33057747 (20240.58MB)
AvgRate: 188.59Mbps stddev:14.18M
IP flow (unique src/dst pair) Information
# of flows: 722596 (avg. 45.75 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.1% 2.2% 1.9% 1.6% 0.8% 0.8% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 432986
Top 10 bandwidth usage (bytes/total in %):
25.0% 21.2% 8.5% 7.3% 6.2% 4.1% 2.2% 2.1% 2.1% 1.9%
# of IPv6 addresses: 851
Top 10 bandwidth usage (bytes/total in %):
38.1% 10.3% 9.0% 6.2% 5.5% 3.8% 3.1% 3.0% 2.9% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201003271400.pktlen.png)
detailed numbers
[ 32- 63]: 3196160
[ 64- 127]: 11634834
[ 128- 255]: 2524537
[ 256- 511]: 2056041
[ 512- 1023]: 812732
[ 1024- 2047]: 12833443
Protocol Breakdown
![[protocol breakdown chart]](201003271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33057747 (100.00%) 21223783393 (100.00%) 642.02
ip 33022883 ( 99.89%) 21218002993 ( 99.97%) 642.52
tcp 17850376 ( 54.00%) 13637240780 ( 64.25%) 763.97
http(s) 7804401 ( 23.61%) 10831706829 ( 51.04%) 1387.90
http(c) 6322271 ( 19.12%) 727651207 ( 3.43%) 115.09
squid 181679 ( 0.55%) 43534999 ( 0.21%) 239.63
smtp 180872 ( 0.55%) 35479145 ( 0.17%) 196.16
ftp 36491 ( 0.11%) 9619692 ( 0.05%) 263.62
pop3 15654 ( 0.05%) 11802432 ( 0.06%) 753.96
imap 1716 ( 0.01%) 609047 ( 0.00%) 354.92
telnet 573 ( 0.00%) 71093 ( 0.00%) 124.07
ssh 21719 ( 0.07%) 3638973 ( 0.02%) 167.55
dns 64001 ( 0.19%) 4336796 ( 0.02%) 67.76
bgp 174 ( 0.00%) 71736 ( 0.00%) 412.28
napster 1097 ( 0.00%) 839025 ( 0.00%) 764.84
realaud 147 ( 0.00%) 18446 ( 0.00%) 125.48
rtsp 176638 ( 0.53%) 15887027 ( 0.07%) 89.94
icecast 1191 ( 0.00%) 103019 ( 0.00%) 86.50
hotline 2 ( 0.00%) 124 ( 0.00%) 62.00
other 3041746 ( 9.20%) 1951870950 ( 9.20%) 641.69
udp 12034964 ( 36.41%) 5984202129 ( 28.20%) 497.23
dns 892108 ( 2.70%) 132324079 ( 0.62%) 148.33
realaud 78 ( 0.00%) 13591 ( 0.00%) 174.24
halflif 284 ( 0.00%) 30327 ( 0.00%) 106.79
starcra 199 ( 0.00%) 19697 ( 0.00%) 98.98
everque 235 ( 0.00%) 61667 ( 0.00%) 262.41
unreal 29 ( 0.00%) 4117 ( 0.00%) 141.97
quake 24 ( 0.00%) 3242 ( 0.00%) 135.08
cuseeme 9 ( 0.00%) 1728 ( 0.00%) 192.00
other 11141877 ( 33.70%) 5851691109 ( 27.57%) 525.20
icmp 351577 ( 1.06%) 28545864 ( 0.13%) 81.19
ipip 364 ( 0.00%) 44932 ( 0.00%) 123.44
ipsec 257 ( 0.00%) 65398 ( 0.00%) 254.47
ip6 2755993 ( 8.34%) 1560738794 ( 7.35%) 566.31
other 29352 ( 0.09%) 7165096 ( 0.03%) 244.11
frag 1736 ( 0.01%) 1493378 ( 0.01%) 860.24
ip6 34864 ( 0.11%) 5780400 ( 0.03%) 165.80
tcp6 7841 ( 0.02%) 771293 ( 0.00%) 98.37
http(s) 55 ( 0.00%) 27516 ( 0.00%) 500.29
http(c) 3589 ( 0.01%) 326550 ( 0.00%) 90.99
smtp 101 ( 0.00%) 55250 ( 0.00%) 547.03
ssh 3227 ( 0.01%) 267546 ( 0.00%) 82.91
dns 38 ( 0.00%) 8099 ( 0.00%) 213.13
bgp 128 ( 0.00%) 18043 ( 0.00%) 140.96
other 703 ( 0.00%) 68289 ( 0.00%) 97.14
udp6 24062 ( 0.07%) 4633742 ( 0.02%) 192.58
dns 23989 ( 0.07%) 4610484 ( 0.02%) 192.19
other 73 ( 0.00%) 23258 ( 0.00%) 318.60
icmp6 2915 ( 0.01%) 358089 ( 0.00%) 122.84
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 16 ( 0.00%) 13196 ( 0.00%) 824.75
tcpdump file: 201003271400.dump.gz (784.45 MB)