Traffic Trace Info
DumpFile: 201003301400.dump
FileSize: 1993.33MB
Id: 201003301400
StartTime: Tue Mar 30 14:00:00 2010
EndTime: Tue Mar 30 14:15:01 2010
TotalTime: 900.65 seconds
TotalCapSize: 1546.67MB CapLen: 96 bytes
# of packets: 29272012 (16703.73MB)
AvgRate: 155.59Mbps stddev:13.72M
IP flow (unique src/dst pair) Information
# of flows: 930788 (avg. 31.45 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.0% 2.9% 2.7% 1.6% 1.4% 1.2% 1.2% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 556121
Top 10 bandwidth usage (bytes/total in %):
24.2% 12.9% 7.8% 7.1% 5.1% 3.2% 3.0% 2.8% 2.5% 2.0%
# of IPv6 addresses: 1051
Top 10 bandwidth usage (bytes/total in %):
27.5% 8.6% 7.7% 6.9% 6.2% 3.9% 3.8% 3.3% 2.9% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201003301400.pktlen.png)
detailed numbers
[ 32- 63]: 4896428
[ 64- 127]: 8590649
[ 128- 255]: 2306429
[ 256- 511]: 2360199
[ 512- 1023]: 874753
[ 1024- 2047]: 10243554
Protocol Breakdown
![[protocol breakdown chart]](201003301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29272012 (100.00%) 17515131184 (100.00%) 598.36
ip 29231993 ( 99.86%) 17508271992 ( 99.96%) 598.94
tcp 15218245 ( 51.99%) 11048779610 ( 63.08%) 726.02
http(s) 5714537 ( 19.52%) 7552262938 ( 43.12%) 1321.59
http(c) 4041763 ( 13.81%) 491045328 ( 2.80%) 121.49
squid 292059 ( 1.00%) 70607822 ( 0.40%) 241.76
smtp 491451 ( 1.68%) 180279064 ( 1.03%) 366.83
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 28794 ( 0.10%) 5637102 ( 0.03%) 195.77
pop3 20658 ( 0.07%) 6908631 ( 0.04%) 334.43
imap 4531 ( 0.02%) 2371540 ( 0.01%) 523.40
telnet 395 ( 0.00%) 61737 ( 0.00%) 156.30
ssh 42598 ( 0.15%) 6768089 ( 0.04%) 158.88
dns 65576 ( 0.22%) 4463308 ( 0.03%) 68.06
bgp 211 ( 0.00%) 108560 ( 0.00%) 514.50
napster 13 ( 0.00%) 2554 ( 0.00%) 196.46
realaud 48 ( 0.00%) 5996 ( 0.00%) 124.92
rtsp 108667 ( 0.37%) 17536170 ( 0.10%) 161.38
icecast 12301 ( 0.04%) 776666 ( 0.00%) 63.14
hotline 6 ( 0.00%) 1244 ( 0.00%) 207.33
other 4394634 ( 15.01%) 2709942681 ( 15.47%) 616.65
udp 11071697 ( 37.82%) 5046591849 ( 28.81%) 455.81
dns 1213038 ( 4.14%) 180896639 ( 1.03%) 149.13
realaud 1815 ( 0.01%) 111729 ( 0.00%) 61.56
halflif 45 ( 0.00%) 4161 ( 0.00%) 92.47
starcra 132 ( 0.00%) 13886 ( 0.00%) 105.20
everque 286 ( 0.00%) 54608 ( 0.00%) 190.94
unreal 57 ( 0.00%) 6846 ( 0.00%) 120.11
quake 53 ( 0.00%) 4882 ( 0.00%) 92.11
cuseeme 10 ( 0.00%) 920 ( 0.00%) 92.00
other 9854492 ( 33.67%) 4865255812 ( 27.78%) 493.71
icmp 347843 ( 1.19%) 28799560 ( 0.16%) 82.79
ipip 335 ( 0.00%) 41378 ( 0.00%) 123.52
ipsec 875 ( 0.00%) 331194 ( 0.00%) 378.51
ip6 2589642 ( 8.85%) 1383269991 ( 7.90%) 534.15
other 3356 ( 0.01%) 458410 ( 0.00%) 136.59
frag 6439 ( 0.02%) 5268356 ( 0.03%) 818.19
ip6 40019 ( 0.14%) 6859192 ( 0.04%) 171.40
tcp6 9618 ( 0.03%) 1110702 ( 0.01%) 115.48
http(s) 168 ( 0.00%) 194274 ( 0.00%) 1156.39
http(c) 4653 ( 0.02%) 435716 ( 0.00%) 93.64
smtp 90 ( 0.00%) 20976 ( 0.00%) 233.07
ssh 3356 ( 0.01%) 304748 ( 0.00%) 90.81
dns 55 ( 0.00%) 16025 ( 0.00%) 291.36
bgp 121 ( 0.00%) 15834 ( 0.00%) 130.86
other 1175 ( 0.00%) 123129 ( 0.00%) 104.79
udp6 26565 ( 0.09%) 5234341 ( 0.03%) 197.04
dns 26387 ( 0.09%) 5197850 ( 0.03%) 196.99
other 178 ( 0.00%) 36491 ( 0.00%) 205.01
icmp6 3750 ( 0.01%) 458952 ( 0.00%) 122.39
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 56 ( 0.00%) 51117 ( 0.00%) 912.80
tcpdump file: 201003301400.dump.gz (713.34 MB)