Traffic Trace Info
DumpFile: 201004021400.dump
FileSize: 1849.11MB
Id: 201004021400
StartTime: Fri Apr 2 14:00:00 2010
EndTime: Fri Apr 2 14:15:01 2010
TotalTime: 900.17 seconds
TotalCapSize: 1438.87MB CapLen: 96 bytes
# of packets: 26884788 (17687.97MB)
AvgRate: 164.83Mbps stddev:18.19M
IP flow (unique src/dst pair) Information
# of flows: 836299 (avg. 32.15 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 4.4% 2.3% 1.7% 1.3% 1.2% 1.2% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 503597
Top 10 bandwidth usage (bytes/total in %):
18.3% 11.2% 6.4% 5.9% 4.9% 4.7% 3.6% 3.2% 2.4% 2.2%
# of IPv6 addresses: 987
Top 10 bandwidth usage (bytes/total in %):
69.2% 69.2% 7.6% 3.5% 3.0% 2.8% 1.9% 1.8% 1.3% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004021400.pktlen.png)
detailed numbers
[ 32- 63]: 4459087
[ 64- 127]: 7365767
[ 128- 255]: 1376254
[ 256- 511]: 1230660
[ 512- 1023]: 1122669
[ 1024- 2047]: 11330351
Protocol Breakdown
![[protocol breakdown chart]](201004021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26884788 (100.00%) 18547179902 (100.00%) 689.88
ip 26828381 ( 99.79%) 18518158594 ( 99.84%) 690.25
tcp 19352972 ( 71.98%) 15085946881 ( 81.34%) 779.52
http(s) 7273040 ( 27.05%) 9085153196 ( 48.98%) 1249.15
http(c) 4382276 ( 16.30%) 1425344135 ( 7.68%) 325.25
squid 355787 ( 1.32%) 100108204 ( 0.54%) 281.37
smtp 276099 ( 1.03%) 95906625 ( 0.52%) 347.36
ftp 36991 ( 0.14%) 6584865 ( 0.04%) 178.01
pop3 201977 ( 0.75%) 31364196 ( 0.17%) 155.29
imap 2398 ( 0.01%) 737604 ( 0.00%) 307.59
telnet 497 ( 0.00%) 66477 ( 0.00%) 133.76
ssh 742472 ( 2.76%) 128167929 ( 0.69%) 172.62
dns 65168 ( 0.24%) 4413334 ( 0.02%) 67.72
bgp 166 ( 0.00%) 58114 ( 0.00%) 350.08
napster 7 ( 0.00%) 430 ( 0.00%) 61.43
realaud 12 ( 0.00%) 1299 ( 0.00%) 108.25
rtsp 135949 ( 0.51%) 8501665 ( 0.05%) 62.54
icecast 19968 ( 0.07%) 1309296 ( 0.01%) 65.57
other 5860157 ( 21.80%) 4198229032 ( 22.64%) 716.40
udp 6747589 ( 25.10%) 3286762040 ( 17.72%) 487.10
dns 628217 ( 2.34%) 138931918 ( 0.75%) 221.15
realaud 1881 ( 0.01%) 128193 ( 0.00%) 68.15
halflif 40 ( 0.00%) 6957 ( 0.00%) 173.93
starcra 191 ( 0.00%) 24185 ( 0.00%) 126.62
everque 2962 ( 0.01%) 2786211 ( 0.02%) 940.65
unreal 40 ( 0.00%) 6555 ( 0.00%) 163.88
quake 24 ( 0.00%) 3234 ( 0.00%) 134.75
cuseeme 7 ( 0.00%) 1200 ( 0.00%) 171.43
other 6113767 ( 22.74%) 3144599395 ( 16.95%) 514.35
icmp 477157 ( 1.77%) 55874141 ( 0.30%) 117.10
ipip 337 ( 0.00%) 41406 ( 0.00%) 122.87
ipsec 660 ( 0.00%) 158112 ( 0.00%) 239.56
ip6 241726 ( 0.90%) 88255026 ( 0.48%) 365.10
other 7940 ( 0.03%) 1120988 ( 0.01%) 141.18
frag 43468 ( 0.16%) 44479294 ( 0.24%) 1023.27
ip6 56407 ( 0.21%) 29021308 ( 0.16%) 514.50
tcp6 24556 ( 0.09%) 22570472 ( 0.12%) 919.14
http(s) 13416 ( 0.05%) 20256383 ( 0.11%) 1509.87
http(c) 3559 ( 0.01%) 334297 ( 0.00%) 93.93
squid 8 ( 0.00%) 656 ( 0.00%) 82.00
smtp 202 ( 0.00%) 33197 ( 0.00%) 164.34
ftp 20 ( 0.00%) 2307 ( 0.00%) 115.35
imap 55 ( 0.00%) 6786 ( 0.00%) 123.38
ssh 3698 ( 0.01%) 611376 ( 0.00%) 165.33
dns 146 ( 0.00%) 40457 ( 0.00%) 277.10
bgp 109 ( 0.00%) 14850 ( 0.00%) 136.24
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 3342 ( 0.01%) 1270089 ( 0.01%) 380.04
udp6 27386 ( 0.10%) 5824639 ( 0.03%) 212.69
dns 27362 ( 0.10%) 5820914 ( 0.03%) 212.74
realaud 1 ( 0.00%) 96 ( 0.00%) 96.00
other 23 ( 0.00%) 3629 ( 0.00%) 157.78
icmp6 4334 ( 0.02%) 529464 ( 0.00%) 122.17
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 101 ( 0.00%) 92653 ( 0.00%) 917.36
tcpdump file: 201004021400.dump.gz (673.08 MB)