Traffic Trace Info
DumpFile: 201004101400.dump
FileSize: 2177.47MB
Id: 201004101400
StartTime: Sat Apr 10 14:00:01 2010
EndTime: Sat Apr 10 14:15:01 2010
TotalTime: 900.55 seconds
TotalCapSize: 1686.15MB CapLen: 96 bytes
# of packets: 32197985 (18635.36MB)
AvgRate: 173.56Mbps stddev:21.59M
IP flow (unique src/dst pair) Information
# of flows: 844139 (avg. 38.14 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 1.9% 1.7% 1.1% 1.1% 1.1% 1.1% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 468522
Top 10 bandwidth usage (bytes/total in %):
29.9% 8.2% 7.5% 5.3% 2.4% 2.3% 2.2% 2.0% 2.0% 2.0%
# of IPv6 addresses: 893
Top 10 bandwidth usage (bytes/total in %):
24.4% 11.6% 8.9% 7.1% 6.7% 5.9% 5.7% 4.6% 4.3% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004101400.pktlen.png)
detailed numbers
[ 32- 63]: 3560853
[ 64- 127]: 10774060
[ 128- 255]: 2918604
[ 256- 511]: 2406005
[ 512- 1023]: 1009909
[ 1024- 2047]: 11528554
Protocol Breakdown
![[protocol breakdown chart]](201004101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32197985 (100.00%) 19540593294 (100.00%) 606.89
ip 32144598 ( 99.83%) 19532230675 ( 99.96%) 607.64
tcp 14551066 ( 45.19%) 10630689832 ( 54.40%) 730.58
http(s) 4999108 ( 15.53%) 6633884814 ( 33.95%) 1327.01
http(c) 3145605 ( 9.77%) 511618201 ( 2.62%) 162.65
squid 296253 ( 0.92%) 121133443 ( 0.62%) 408.89
smtp 233501 ( 0.73%) 72017731 ( 0.37%) 308.43
nntp 3 ( 0.00%) 184 ( 0.00%) 61.33
ftp 28804 ( 0.09%) 5560785 ( 0.03%) 193.06
pop3 16903 ( 0.05%) 13048000 ( 0.07%) 771.93
imap 1286 ( 0.00%) 143245 ( 0.00%) 111.39
telnet 725 ( 0.00%) 105062 ( 0.00%) 144.91
ssh 1370585 ( 4.26%) 168195912 ( 0.86%) 122.72
dns 79481 ( 0.25%) 7862684 ( 0.04%) 98.93
bgp 141 ( 0.00%) 42396 ( 0.00%) 300.68
napster 104 ( 0.00%) 8791 ( 0.00%) 84.53
realaud 1 ( 0.00%) 60 ( 0.00%) 60.00
rtsp 230044 ( 0.71%) 14225885 ( 0.07%) 61.84
icecast 715 ( 0.00%) 61092 ( 0.00%) 85.44
hotline 68 ( 0.00%) 4458 ( 0.00%) 65.56
other 4147737 ( 12.88%) 3082776969 ( 15.78%) 743.24
udp 14202919 ( 44.11%) 7392547416 ( 37.83%) 520.49
dns 555034 ( 1.72%) 94781805 ( 0.49%) 170.77
rip 14 ( 0.00%) 1363 ( 0.00%) 97.36
realaud 976 ( 0.00%) 62590 ( 0.00%) 64.13
halflif 76 ( 0.00%) 8362 ( 0.00%) 110.03
starcra 224 ( 0.00%) 26022 ( 0.00%) 116.17
everque 479 ( 0.00%) 82240 ( 0.00%) 171.69
unreal 113 ( 0.00%) 23768 ( 0.00%) 210.34
quake 32 ( 0.00%) 3450 ( 0.00%) 107.81
cuseeme 5 ( 0.00%) 794 ( 0.00%) 158.80
other 13639176 ( 42.36%) 7296960692 ( 37.34%) 535.00
icmp 475861 ( 1.48%) 38927811 ( 0.20%) 81.81
ipip 332 ( 0.00%) 40816 ( 0.00%) 122.94
ipsec 1352 ( 0.00%) 369688 ( 0.00%) 273.44
ip6 2904894 ( 9.02%) 1468602918 ( 7.52%) 505.56
other 8174 ( 0.03%) 1052194 ( 0.01%) 128.72
frag 22086 ( 0.07%) 16786482 ( 0.09%) 760.05
ip6 53387 ( 0.17%) 8362619 ( 0.04%) 156.64
tcp6 22341 ( 0.07%) 2630364 ( 0.01%) 117.74
http(s) 224 ( 0.00%) 273095 ( 0.00%) 1219.17
http(c) 3616 ( 0.01%) 328193 ( 0.00%) 90.76
smtp 164 ( 0.00%) 60640 ( 0.00%) 369.76
ftp 5368 ( 0.02%) 554724 ( 0.00%) 103.34
imap 348 ( 0.00%) 41911 ( 0.00%) 120.43
ssh 5060 ( 0.02%) 600048 ( 0.00%) 118.59
dns 115 ( 0.00%) 25802 ( 0.00%) 224.37
bgp 101 ( 0.00%) 12587 ( 0.00%) 124.62
other 7345 ( 0.02%) 733364 ( 0.00%) 99.85
udp6 23072 ( 0.07%) 4729511 ( 0.02%) 204.99
dns 22727 ( 0.07%) 4671657 ( 0.02%) 205.56
other 345 ( 0.00%) 57854 ( 0.00%) 167.69
icmp6 7890 ( 0.02%) 955787 ( 0.00%) 121.14
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 54 ( 0.00%) 42877 ( 0.00%) 794.02
tcpdump file: 201004101400.dump.gz (797.00 MB)