Traffic Trace Info
DumpFile: 201004091400.dump
FileSize: 2175.53MB
Id: 201004091400
StartTime: Fri Apr 9 14:00:00 2010
EndTime: Fri Apr 9 14:15:00 2010
TotalTime: 900.05 seconds
TotalCapSize: 1686.78MB CapLen: 96 bytes
# of packets: 32029942 (18392.82MB)
AvgRate: 171.42Mbps stddev:19.21M
IP flow (unique src/dst pair) Information
# of flows: 965845 (avg. 33.16 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.0% 1.4% 1.0% 0.9% 0.8% 0.7% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 536156
Top 10 bandwidth usage (bytes/total in %):
29.7% 9.0% 3.1% 2.9% 2.8% 2.8% 2.5% 2.4% 2.4% 2.2%
# of IPv6 addresses: 1099
Top 10 bandwidth usage (bytes/total in %):
66.0% 66.0% 7.3% 7.3% 4.5% 4.2% 2.9% 2.3% 2.0% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004091400.pktlen.png)
detailed numbers
[ 32- 63]: 4616362
[ 64- 127]: 9322057
[ 128- 255]: 3359393
[ 256- 511]: 2355233
[ 512- 1023]: 867318
[ 1024- 2047]: 11509579
Protocol Breakdown
![[protocol breakdown chart]](201004091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32029942 (100.00%) 19286267799 (100.00%) 602.13
ip 31970496 ( 99.81%) 19251815921 ( 99.82%) 602.17
tcp 15562337 ( 48.59%) 11181625301 ( 57.98%) 718.51
http(s) 5967928 ( 18.63%) 7676697166 ( 39.80%) 1286.33
http(c) 4832069 ( 15.09%) 734791500 ( 3.81%) 152.07
squid 369364 ( 1.15%) 108147285 ( 0.56%) 292.79
smtp 397492 ( 1.24%) 254937102 ( 1.32%) 641.36
ftp 28177 ( 0.09%) 6913265 ( 0.04%) 245.35
pop3 22932 ( 0.07%) 16571314 ( 0.09%) 722.63
imap 2723 ( 0.01%) 540455 ( 0.00%) 198.48
telnet 815 ( 0.00%) 92621 ( 0.00%) 113.65
ssh 23041 ( 0.07%) 3216046 ( 0.02%) 139.58
dns 73798 ( 0.23%) 5090582 ( 0.03%) 68.98
bgp 148 ( 0.00%) 45952 ( 0.00%) 310.49
napster 98 ( 0.00%) 6468 ( 0.00%) 66.00
realaud 56 ( 0.00%) 7458 ( 0.00%) 133.18
rtsp 180823 ( 0.56%) 22103909 ( 0.11%) 122.24
icecast 30337 ( 0.09%) 16474317 ( 0.09%) 543.04
hotline 2 ( 0.00%) 124 ( 0.00%) 62.00
other 3632528 ( 11.34%) 2335989377 ( 12.11%) 643.08
udp 12852412 ( 40.13%) 6250384246 ( 32.41%) 486.32
dns 658504 ( 2.06%) 115143937 ( 0.60%) 174.86
rip 9 ( 0.00%) 709 ( 0.00%) 78.78
realaud 980 ( 0.00%) 69650 ( 0.00%) 71.07
halflif 81 ( 0.00%) 12094 ( 0.00%) 149.31
starcra 199 ( 0.00%) 20899 ( 0.00%) 105.02
everque 402 ( 0.00%) 66330 ( 0.00%) 165.00
unreal 122 ( 0.00%) 18741 ( 0.00%) 153.61
quake 37 ( 0.00%) 4802 ( 0.00%) 129.78
cuseeme 2 ( 0.00%) 215 ( 0.00%) 107.50
other 12159019 ( 37.96%) 6132940221 ( 31.80%) 504.39
icmp 508148 ( 1.59%) 64927090 ( 0.34%) 127.77
ipip 328 ( 0.00%) 40800 ( 0.00%) 124.39
ipsec 396 ( 0.00%) 153032 ( 0.00%) 386.44
ip6 3033947 ( 9.47%) 1752531096 ( 9.09%) 577.64
other 12928 ( 0.04%) 2154356 ( 0.01%) 166.64
frag 95525 ( 0.30%) 66170907 ( 0.34%) 692.71
ip6 59446 ( 0.19%) 34451878 ( 0.18%) 579.55
tcp6 30749 ( 0.10%) 28627613 ( 0.15%) 931.01
http(s) 3899 ( 0.01%) 4788216 ( 0.02%) 1228.06
http(c) 3423 ( 0.01%) 312161 ( 0.00%) 91.20
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 185 ( 0.00%) 41215 ( 0.00%) 222.78
ftp 53 ( 0.00%) 6810 ( 0.00%) 128.49
imap 374 ( 0.00%) 43211 ( 0.00%) 115.54
ssh 3374 ( 0.01%) 494908 ( 0.00%) 146.68
dns 75 ( 0.00%) 20298 ( 0.00%) 270.64
bgp 114 ( 0.00%) 14694 ( 0.00%) 128.89
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 19249 ( 0.06%) 22905878 ( 0.12%) 1189.98
udp6 22326 ( 0.07%) 5004695 ( 0.03%) 224.16
dns 21998 ( 0.07%) 4956027 ( 0.03%) 225.29
realaud 1 ( 0.00%) 168 ( 0.00%) 168.00
other 327 ( 0.00%) 48500 ( 0.00%) 148.32
icmp6 6262 ( 0.02%) 749315 ( 0.00%) 119.66
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 79 ( 0.00%) 66175 ( 0.00%) 837.66
tcpdump file: 201004091400.dump.gz (778.68 MB)