Traffic Trace Info
DumpFile: 201003291400.dump
FileSize: 2164.60MB
Id: 201003291400
StartTime: Mon Mar 29 14:00:01 2010
EndTime: Mon Mar 29 14:15:01 2010
TotalTime: 900.23 seconds
TotalCapSize: 1680.08MB CapLen: 96 bytes
# of packets: 31752749 (17977.19MB)
AvgRate: 167.52Mbps stddev:13.78M
IP flow (unique src/dst pair) Information
# of flows: 931012 (avg. 34.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.7% 1.1% 1.1% 1.0% 1.0% 0.9% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 560090
Top 10 bandwidth usage (bytes/total in %):
25.0% 8.0% 4.2% 4.1% 3.4% 2.7% 2.5% 2.5% 2.3% 1.9%
# of IPv6 addresses: 1005
Top 10 bandwidth usage (bytes/total in %):
29.8% 9.4% 5.8% 5.3% 4.3% 4.3% 4.0% 4.0% 3.8% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201003291400.pktlen.png)
detailed numbers
[ 32- 63]: 4262088
[ 64- 127]: 10305852
[ 128- 255]: 2940478
[ 256- 511]: 2097514
[ 512- 1023]: 897443
[ 1024- 2047]: 11249374
Protocol Breakdown
![[protocol breakdown chart]](201003291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31752749 (100.00%) 18850447835 (100.00%) 593.66
ip 31716200 ( 99.88%) 18844106793 ( 99.97%) 594.15
tcp 16077349 ( 50.63%) 11097785630 ( 58.87%) 690.27
http(s) 5813710 ( 18.31%) 7618573628 ( 40.42%) 1310.45
http(c) 4431640 ( 13.96%) 943398253 ( 5.00%) 212.88
squid 205462 ( 0.65%) 63599087 ( 0.34%) 309.54
smtp 312315 ( 0.98%) 165214090 ( 0.88%) 529.00
ftp 43527 ( 0.14%) 7614280 ( 0.04%) 174.93
pop3 11541 ( 0.04%) 4149208 ( 0.02%) 359.52
imap 4259 ( 0.01%) 1889202 ( 0.01%) 443.58
telnet 585 ( 0.00%) 75642 ( 0.00%) 129.30
ssh 1664425 ( 5.24%) 194590398 ( 1.03%) 116.91
dns 63837 ( 0.20%) 4329031 ( 0.02%) 67.81
bgp 156 ( 0.00%) 57432 ( 0.00%) 368.15
napster 38 ( 0.00%) 3560 ( 0.00%) 93.68
realaud 136 ( 0.00%) 23079 ( 0.00%) 169.70
rtsp 153209 ( 0.48%) 9449390 ( 0.05%) 61.68
icecast 6468 ( 0.02%) 397036 ( 0.00%) 61.38
other 3366037 ( 10.60%) 2084422074 ( 11.06%) 619.25
udp 12587977 ( 39.64%) 6205084523 ( 32.92%) 492.94
dns 1038359 ( 3.27%) 159269900 ( 0.84%) 153.39
rip 1 ( 0.00%) 109 ( 0.00%) 109.00
realaud 1765 ( 0.01%) 108179 ( 0.00%) 61.29
halflif 73 ( 0.00%) 6635 ( 0.00%) 90.89
starcra 163 ( 0.00%) 17393 ( 0.00%) 106.71
everque 274 ( 0.00%) 56674 ( 0.00%) 206.84
unreal 95 ( 0.00%) 17978 ( 0.00%) 189.24
quake 124 ( 0.00%) 10399 ( 0.00%) 83.86
cuseeme 9 ( 0.00%) 721 ( 0.00%) 80.11
other 11546281 ( 36.36%) 6045404353 ( 32.07%) 523.58
icmp 337256 ( 1.06%) 27932782 ( 0.15%) 82.82
ipip 326 ( 0.00%) 40896 ( 0.00%) 125.45
ipsec 1915 ( 0.01%) 628978 ( 0.00%) 328.45
ip6 2708606 ( 8.53%) 1511383152 ( 8.02%) 557.99
other 2771 ( 0.01%) 1250832 ( 0.01%) 451.40
frag 4079 ( 0.01%) 3192646 ( 0.02%) 782.70
ip6 36549 ( 0.12%) 6341042 ( 0.03%) 173.49
tcp6 8274 ( 0.03%) 1077961 ( 0.01%) 130.28
http(s) 130 ( 0.00%) 98177 ( 0.00%) 755.21
http(c) 3755 ( 0.01%) 358188 ( 0.00%) 95.39
smtp 82 ( 0.00%) 10015 ( 0.00%) 122.13
ssh 3504 ( 0.01%) 519232 ( 0.00%) 148.18
dns 41 ( 0.00%) 7816 ( 0.00%) 190.63
bgp 117 ( 0.00%) 16024 ( 0.00%) 136.96
other 645 ( 0.00%) 68509 ( 0.00%) 106.22
udp6 24402 ( 0.08%) 4772154 ( 0.03%) 195.56
dns 24207 ( 0.08%) 4728764 ( 0.03%) 195.35
other 195 ( 0.00%) 43390 ( 0.00%) 222.51
icmp6 3824 ( 0.01%) 471431 ( 0.00%) 123.28
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 19 ( 0.00%) 15416 ( 0.00%) 811.37
tcpdump file: 201003291400.dump.gz (783.86 MB)