Traffic Trace Info
DumpFile: 201004051400.dump
FileSize: 2264.09MB
Id: 201004051400
StartTime: Mon Apr 5 14:00:01 2010
EndTime: Mon Apr 5 14:15:00 2010
TotalTime: 899.34 seconds
TotalCapSize: 1764.95MB CapLen: 96 bytes
# of packets: 32710981 (19687.99MB)
AvgRate: 183.65Mbps stddev:16.12M
IP flow (unique src/dst pair) Information
# of flows: 827407 (avg. 39.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.5% 4.6% 2.2% 1.3% 1.2% 1.2% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 509952
Top 10 bandwidth usage (bytes/total in %):
26.4% 9.1% 7.8% 7.8% 7.5% 4.6% 2.3% 2.3% 2.3% 2.2%
# of IPv6 addresses: 955
Top 10 bandwidth usage (bytes/total in %):
24.7% 8.4% 7.1% 6.6% 5.3% 5.3% 4.9% 4.9% 3.7% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004051400.pktlen.png)
detailed numbers
[ 32- 63]: 4081152
[ 64- 127]: 10254295
[ 128- 255]: 2464647
[ 256- 511]: 2422663
[ 512- 1023]: 1185552
[ 1024- 2047]: 12302672
Protocol Breakdown
![[protocol breakdown chart]](201004051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32710981 (100.00%) 20644355041 (100.00%) 631.11
ip 32664883 ( 99.86%) 20635425493 ( 99.96%) 631.73
tcp 17431355 ( 53.29%) 13045507437 ( 63.19%) 748.39
http(s) 6463766 ( 19.76%) 8263197496 ( 40.03%) 1278.39
http(c) 4873041 ( 14.90%) 534378760 ( 2.59%) 109.66
squid 317508 ( 0.97%) 66776616 ( 0.32%) 210.31
smtp 211813 ( 0.65%) 92336822 ( 0.45%) 435.94
nntp 5 ( 0.00%) 328 ( 0.00%) 65.60
ftp 26131 ( 0.08%) 4293180 ( 0.02%) 164.29
pop3 31139 ( 0.10%) 20789257 ( 0.10%) 667.63
imap 4426 ( 0.01%) 1621623 ( 0.01%) 366.39
telnet 812 ( 0.00%) 207873 ( 0.00%) 256.00
ssh 46585 ( 0.14%) 9595847 ( 0.05%) 205.99
dns 63739 ( 0.19%) 4326707 ( 0.02%) 67.88
bgp 151 ( 0.00%) 59296 ( 0.00%) 392.69
napster 7 ( 0.00%) 440 ( 0.00%) 62.86
realaud 48 ( 0.00%) 3686 ( 0.00%) 76.79
rtsp 109095 ( 0.33%) 6818499 ( 0.03%) 62.50
icecast 6802 ( 0.02%) 442807 ( 0.00%) 65.10
hotline 10 ( 0.00%) 907 ( 0.00%) 90.70
other 5276272 ( 16.13%) 4040656993 ( 19.57%) 765.82
udp 11962000 ( 36.57%) 5998297626 ( 29.06%) 501.45
dns 499920 ( 1.53%) 82635756 ( 0.40%) 165.30
rip 4 ( 0.00%) 300 ( 0.00%) 75.00
realaud 1911 ( 0.01%) 132562 ( 0.00%) 69.37
halflif 40 ( 0.00%) 3031 ( 0.00%) 75.78
starcra 197 ( 0.00%) 27384 ( 0.00%) 139.01
everque 3948 ( 0.01%) 2664177 ( 0.01%) 674.82
unreal 92 ( 0.00%) 16515 ( 0.00%) 179.51
quake 27 ( 0.00%) 3404 ( 0.00%) 126.07
cuseeme 3 ( 0.00%) 586 ( 0.00%) 195.33
other 11454816 ( 35.02%) 5912663665 ( 28.64%) 516.17
icmp 355169 ( 1.09%) 28524190 ( 0.14%) 80.31
ipip 333 ( 0.00%) 40618 ( 0.00%) 121.98
ipsec 741 ( 0.00%) 145118 ( 0.00%) 195.84
ip6 2913144 ( 8.91%) 1562285720 ( 7.57%) 536.29
other 2141 ( 0.01%) 624784 ( 0.00%) 291.82
frag 7046 ( 0.02%) 5551364 ( 0.03%) 787.87
ip6 46098 ( 0.14%) 8929548 ( 0.04%) 193.71
tcp6 15104 ( 0.05%) 2390537 ( 0.01%) 158.27
http(s) 835 ( 0.00%) 873597 ( 0.00%) 1046.22
http(c) 4373 ( 0.01%) 439489 ( 0.00%) 100.50
smtp 116 ( 0.00%) 33115 ( 0.00%) 285.47
ftp 2733 ( 0.01%) 279570 ( 0.00%) 102.29
imap 389 ( 0.00%) 44529 ( 0.00%) 114.47
ssh 3449 ( 0.01%) 401650 ( 0.00%) 116.45
dns 163 ( 0.00%) 36918 ( 0.00%) 226.49
bgp 103 ( 0.00%) 13373 ( 0.00%) 129.83
other 2943 ( 0.01%) 268296 ( 0.00%) 91.16
udp6 26690 ( 0.08%) 5975643 ( 0.03%) 223.89
dns 26642 ( 0.08%) 5969667 ( 0.03%) 224.07
other 48 ( 0.00%) 5976 ( 0.00%) 124.50
icmp6 4211 ( 0.01%) 504851 ( 0.00%) 119.89
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 62 ( 0.00%) 54301 ( 0.00%) 875.82
tcpdump file: 201004051400.dump.gz (793.51 MB)