Traffic Trace Info
DumpFile: 201003311400.dump
FileSize: 2675.48MB
Id: 201003311400
StartTime: Wed Mar 31 14:00:01 2010
EndTime: Wed Mar 31 14:15:01 2010
TotalTime: 899.51 seconds
TotalCapSize: -2009.79MB CapLen: 96 bytes
# of packets: 38617680 (24786.68MB)
AvgRate: 231.16Mbps stddev:22.50M
IP flow (unique src/dst pair) Information
# of flows: 853382 (avg. 45.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.5% 2.2% 1.4% 1.2% 0.8% 0.8% 0.8% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 482688
Top 10 bandwidth usage (bytes/total in %):
16.5% 16.0% 8.1% 7.8% 5.1% 4.9% 3.9% 2.7% 2.3% 2.2%
# of IPv6 addresses: 1122
Top 10 bandwidth usage (bytes/total in %):
24.8% 15.4% 7.1% 6.7% 6.5% 6.4% 3.2% 3.0% 3.0% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201003311400.pktlen.png)
detailed numbers
[ 32- 63]: 5254517
[ 64- 127]: 12051149
[ 128- 255]: 2430686
[ 256- 511]: 2015354
[ 512- 1023]: 1086507
[ 1024- 2047]: 15779467
Protocol Breakdown
![[protocol breakdown chart]](201003311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38617680 (100.00%) 25990717466 (100.00%) 673.03
ip 38568575 ( 99.87%) 25981829929 ( 99.97%) 673.65
tcp 23143756 ( 59.93%) 17602965158 ( 67.73%) 760.59
http(s) 7874189 ( 20.39%) 10737836984 ( 41.31%) 1363.68
http(c) 6940757 ( 17.97%) 808883122 ( 3.11%) 116.54
squid 313232 ( 0.81%) 87434396 ( 0.34%) 279.14
smtp 349315 ( 0.90%) 144547968 ( 0.56%) 413.80
ftp 36235 ( 0.09%) 12424317 ( 0.05%) 342.88
pop3 34077 ( 0.09%) 11463419 ( 0.04%) 336.40
imap 3375 ( 0.01%) 1389155 ( 0.01%) 411.60
telnet 337 ( 0.00%) 58343 ( 0.00%) 173.12
ssh 149773 ( 0.39%) 14792224 ( 0.06%) 98.76
dns 62793 ( 0.16%) 4274770 ( 0.02%) 68.08
bgp 178 ( 0.00%) 78300 ( 0.00%) 439.89
napster 327 ( 0.00%) 241507 ( 0.00%) 738.55
realaud 4448 ( 0.01%) 293972 ( 0.00%) 66.09
rtsp 85599 ( 0.22%) 5518495 ( 0.02%) 64.47
icecast 37867 ( 0.10%) 16290847 ( 0.06%) 430.21
hotline 14 ( 0.00%) 934 ( 0.00%) 66.71
other 7251238 ( 18.78%) 5757436285 ( 22.15%) 793.99
udp 12686247 ( 32.85%) 6914529676 ( 26.60%) 545.04
dns 1187457 ( 3.07%) 183455459 ( 0.71%) 154.49
realaud 80 ( 0.00%) 14152 ( 0.00%) 176.90
halflif 47 ( 0.00%) 4782 ( 0.00%) 101.74
starcra 214 ( 0.00%) 27440 ( 0.00%) 128.22
everque 202 ( 0.00%) 50476 ( 0.00%) 249.88
unreal 105 ( 0.00%) 17215 ( 0.00%) 163.95
quake 80 ( 0.00%) 10736 ( 0.00%) 134.20
cuseeme 3 ( 0.00%) 254 ( 0.00%) 84.67
other 11496847 ( 29.77%) 6730635524 ( 25.90%) 585.43
icmp 357201 ( 0.92%) 29284127 ( 0.11%) 81.98
ipip 331 ( 0.00%) 40056 ( 0.00%) 121.02
ipsec 102827 ( 0.27%) 89801210 ( 0.35%) 873.32
ip6 2218773 ( 5.75%) 1328172639 ( 5.11%) 598.61
other 59440 ( 0.15%) 17037063 ( 0.07%) 286.63
frag 3982 ( 0.01%) 2858431 ( 0.01%) 717.84
ip6 49105 ( 0.13%) 8887537 ( 0.03%) 180.99
tcp6 10220 ( 0.03%) 2221688 ( 0.01%) 217.39
http(s) 1024 ( 0.00%) 1093097 ( 0.00%) 1067.48
http(c) 4248 ( 0.01%) 454122 ( 0.00%) 106.90
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 506 ( 0.00%) 125744 ( 0.00%) 248.51
ssh 3811 ( 0.01%) 479934 ( 0.00%) 125.93
dns 38 ( 0.00%) 4718 ( 0.00%) 124.16
bgp 120 ( 0.00%) 17147 ( 0.00%) 142.89
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 470 ( 0.00%) 46704 ( 0.00%) 99.37
udp6 25724 ( 0.07%) 5059610 ( 0.02%) 196.69
dns 25516 ( 0.07%) 5010148 ( 0.02%) 196.35
other 208 ( 0.00%) 49462 ( 0.00%) 237.80
icmp6 13093 ( 0.03%) 1568166 ( 0.01%) 119.77
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 38 ( 0.00%) 33993 ( 0.00%) 894.55
tcpdump file: 201003311400.dump.gz (947.70 MB)