Traffic Trace Info
DumpFile: 201004071400.dump
FileSize: 2662.41MB
Id: 201004071400
StartTime: Wed Apr 7 14:00:00 2010
EndTime: Wed Apr 7 14:15:01 2010
TotalTime: 900.68 seconds
TotalCapSize: -2021.03MB CapLen: 96 bytes
# of packets: 38497857 (21825.43MB)
AvgRate: 203.28Mbps stddev:20.23M
IP flow (unique src/dst pair) Information
# of flows: 868566 (avg. 44.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.4% 1.3% 1.3% 1.2% 1.2% 1.2% 1.2% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 469636
Top 10 bandwidth usage (bytes/total in %):
28.6% 7.0% 5.8% 4.1% 4.0% 3.3% 2.2% 1.7% 1.5% 1.4%
# of IPv6 addresses: 1163
Top 10 bandwidth usage (bytes/total in %):
23.0% 10.6% 9.4% 7.1% 6.3% 6.0% 4.5% 4.1% 3.1% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004071400.pktlen.png)
detailed numbers
[ 32- 63]: 5059130
[ 64- 127]: 12955730
[ 128- 255]: 3404530
[ 256- 511]: 2430346
[ 512- 1023]: 1078916
[ 1024- 2047]: 13569205
Protocol Breakdown
![[protocol breakdown chart]](201004071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38497857 (100.00%) 22885617495 (100.00%) 594.46
ip 38450846 ( 99.88%) 22876727993 ( 99.96%) 594.96
tcp 21499658 ( 55.85%) 14304721040 ( 62.51%) 665.35
http(s) 6826972 ( 17.73%) 8902622732 ( 38.90%) 1304.04
http(c) 5192299 ( 13.49%) 935777891 ( 4.09%) 180.22
squid 278405 ( 0.72%) 90214141 ( 0.39%) 324.04
smtp 261247 ( 0.68%) 84005499 ( 0.37%) 321.56
nntp 4 ( 0.00%) 296 ( 0.00%) 74.00
ftp 73446 ( 0.19%) 12871228 ( 0.06%) 175.25
pop3 19206 ( 0.05%) 10082174 ( 0.04%) 524.95
imap 3967 ( 0.01%) 828818 ( 0.00%) 208.93
telnet 769 ( 0.00%) 89050 ( 0.00%) 115.80
ssh 3018426 ( 7.84%) 679395652 ( 2.97%) 225.08
dns 72053 ( 0.19%) 4946246 ( 0.02%) 68.65
bgp 150 ( 0.00%) 51128 ( 0.00%) 340.85
napster 23 ( 0.00%) 2636 ( 0.00%) 114.61
realaud 24 ( 0.00%) 4058 ( 0.00%) 169.08
rtsp 340028 ( 0.88%) 151915967 ( 0.66%) 446.77
icecast 38614 ( 0.10%) 17381641 ( 0.08%) 450.14
other 5374022 ( 13.96%) 3414531703 ( 14.92%) 635.38
udp 13373641 ( 34.74%) 6898388206 ( 30.14%) 515.82
dns 646618 ( 1.68%) 110534833 ( 0.48%) 170.94
realaud 78 ( 0.00%) 13957 ( 0.00%) 178.94
halflif 61 ( 0.00%) 5875 ( 0.00%) 96.31
starcra 204 ( 0.00%) 21765 ( 0.00%) 106.69
everque 569 ( 0.00%) 120332 ( 0.00%) 211.48
unreal 270 ( 0.00%) 56117 ( 0.00%) 207.84
quake 26 ( 0.00%) 2886 ( 0.00%) 111.00
cuseeme 1 ( 0.00%) 96 ( 0.00%) 96.00
other 12725538 ( 33.06%) 6787460107 ( 29.66%) 533.37
icmp 560711 ( 1.46%) 44501087 ( 0.19%) 79.37
ipip 314 ( 0.00%) 37976 ( 0.00%) 120.94
ipsec 1773 ( 0.00%) 635278 ( 0.00%) 358.31
ip6 3013615 ( 7.83%) 1628209079 ( 7.11%) 540.28
other 1134 ( 0.00%) 235327 ( 0.00%) 207.52
frag 1527 ( 0.00%) 1467230 ( 0.01%) 960.86
ip6 47011 ( 0.12%) 8889502 ( 0.04%) 189.09
tcp6 10426 ( 0.03%) 1678176 ( 0.01%) 160.96
http(s) 583 ( 0.00%) 635948 ( 0.00%) 1090.82
http(c) 5088 ( 0.01%) 475730 ( 0.00%) 93.50
smtp 242 ( 0.00%) 94038 ( 0.00%) 388.59
imap 432 ( 0.00%) 50096 ( 0.00%) 115.96
ssh 2935 ( 0.01%) 256130 ( 0.00%) 87.27
dns 131 ( 0.00%) 36942 ( 0.00%) 282.00
bgp 123 ( 0.00%) 22849 ( 0.00%) 185.76
other 892 ( 0.00%) 106443 ( 0.00%) 119.33
udp6 28218 ( 0.07%) 6151363 ( 0.03%) 217.99
dns 27860 ( 0.07%) 6079382 ( 0.03%) 218.21
realaud 1 ( 0.00%) 110 ( 0.00%) 110.00
other 357 ( 0.00%) 71871 ( 0.00%) 201.32
icmp6 8245 ( 0.02%) 978739 ( 0.00%) 118.71
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 92 ( 0.00%) 77144 ( 0.00%) 838.52
tcpdump file: 201004071400.dump.gz (975.98 MB)