Traffic Trace Info
DumpFile: 201004151400.dump
FileSize: 2435.07MB
Id: 201004151400
StartTime: Thu Apr 15 14:00:01 2010
EndTime: Thu Apr 15 14:15:00 2010
TotalTime: 899.74 seconds
TotalCapSize: 1906.02MB CapLen: 96 bytes
# of packets: 34670971 (21774.60MB)
AvgRate: 202.99Mbps stddev:16.87M
IP flow (unique src/dst pair) Information
# of flows: 1079533 (avg. 32.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 2.6% 1.9% 1.3% 1.1% 1.1% 1.0% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 630984
Top 10 bandwidth usage (bytes/total in %):
14.9% 7.2% 4.9% 4.7% 4.2% 3.8% 3.2% 3.0% 2.8% 2.6%
# of IPv6 addresses: 995
Top 10 bandwidth usage (bytes/total in %):
26.4% 9.6% 8.9% 6.3% 4.9% 4.9% 4.8% 4.7% 3.5% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004151400.pktlen.png)
detailed numbers
[ 32- 63]: 6235230
[ 64- 127]: 9164447
[ 128- 255]: 2233175
[ 256- 511]: 2012910
[ 512- 1023]: 1146204
[ 1024- 2047]: 13879005
Protocol Breakdown
![[protocol breakdown chart]](201004151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34670971 (100.00%) 22832322436 (100.00%) 658.54
ip 34613076 ( 99.83%) 22822846392 ( 99.96%) 659.37
tcp 22111248 ( 63.77%) 16267827457 ( 71.25%) 735.73
http(s) 8485695 ( 24.47%) 10995600413 ( 48.16%) 1295.78
http(c) 6986850 ( 20.15%) 1633525264 ( 7.15%) 233.80
squid 312656 ( 0.90%) 121899581 ( 0.53%) 389.88
smtp 327027 ( 0.94%) 121615164 ( 0.53%) 371.88
ftp 23871 ( 0.07%) 4166669 ( 0.02%) 174.55
pop3 25606 ( 0.07%) 15302456 ( 0.07%) 597.61
imap 7476 ( 0.02%) 2419352 ( 0.01%) 323.62
telnet 579 ( 0.00%) 78730 ( 0.00%) 135.98
ssh 684741 ( 1.97%) 102551226 ( 0.45%) 149.77
dns 55834 ( 0.16%) 3845576 ( 0.02%) 68.88
bgp 140 ( 0.00%) 54357 ( 0.00%) 388.26
napster 29 ( 0.00%) 3058 ( 0.00%) 105.45
realaud 11 ( 0.00%) 1084 ( 0.00%) 98.55
rtsp 95759 ( 0.28%) 6239964 ( 0.03%) 65.16
icecast 45370 ( 0.13%) 3180136 ( 0.01%) 70.09
hotline 2 ( 0.00%) 124 ( 0.00%) 62.00
other 5059589 ( 14.59%) 3257343523 ( 14.27%) 643.80
udp 8840439 ( 25.50%) 4806269119 ( 21.05%) 543.67
dns 726814 ( 2.10%) 123820508 ( 0.54%) 170.36
realaud 53 ( 0.00%) 4306 ( 0.00%) 81.25
halflif 187 ( 0.00%) 31031 ( 0.00%) 165.94
starcra 195 ( 0.00%) 21239 ( 0.00%) 108.92
everque 584 ( 0.00%) 113166 ( 0.00%) 193.78
unreal 64 ( 0.00%) 9626 ( 0.00%) 150.41
quake 21 ( 0.00%) 2295 ( 0.00%) 109.29
cuseeme 6 ( 0.00%) 905 ( 0.00%) 150.83
other 8112441 ( 23.40%) 4682207591 ( 20.51%) 577.16
icmp 567687 ( 1.64%) 73989178 ( 0.32%) 130.33
ipip 345 ( 0.00%) 42322 ( 0.00%) 122.67
ipsec 1766 ( 0.01%) 548564 ( 0.00%) 310.63
ip6 3067125 ( 8.85%) 1662885192 ( 7.28%) 542.16
other 24466 ( 0.07%) 11284560 ( 0.05%) 461.23
frag 572 ( 0.00%) 600521 ( 0.00%) 1049.86
ip6 57895 ( 0.17%) 9476044 ( 0.04%) 163.68
tcp6 19226 ( 0.06%) 2039741 ( 0.01%) 106.09
http(s) 85 ( 0.00%) 91844 ( 0.00%) 1080.52
http(c) 3754 ( 0.01%) 337393 ( 0.00%) 89.88
smtp 285 ( 0.00%) 117178 ( 0.00%) 411.15
ftp 5337 ( 0.02%) 530122 ( 0.00%) 99.33
imap 335 ( 0.00%) 39283 ( 0.00%) 117.26
ssh 3422 ( 0.01%) 344276 ( 0.00%) 100.61
dns 103 ( 0.00%) 26195 ( 0.00%) 254.32
bgp 116 ( 0.00%) 15734 ( 0.00%) 135.64
other 5789 ( 0.02%) 537716 ( 0.00%) 92.89
udp6 32016 ( 0.09%) 6580207 ( 0.03%) 205.53
dns 31733 ( 0.09%) 6535009 ( 0.03%) 205.94
other 283 ( 0.00%) 45198 ( 0.00%) 159.71
icmp6 6554 ( 0.02%) 791815 ( 0.00%) 120.81
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 69 ( 0.00%) 60201 ( 0.00%) 872.48
tcpdump file: 201004151400.dump.gz (884.25 MB)