Traffic Trace Info
DumpFile: 201004181400.dump
FileSize: 1902.60MB
Id: 201004181400
StartTime: Sun Apr 18 14:00:01 2010
EndTime: Sun Apr 18 14:15:00 2010
TotalTime: 899.59 seconds
TotalCapSize: 1486.47MB CapLen: 96 bytes
# of packets: 27265340 (17400.05MB)
AvgRate: 162.26Mbps stddev:11.70M
IP flow (unique src/dst pair) Information
# of flows: 811550 (avg. 33.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.2% 1.7% 1.5% 1.5% 1.2% 0.8% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 458575
Top 10 bandwidth usage (bytes/total in %):
19.4% 10.7% 3.6% 3.3% 3.2% 3.2% 2.8% 2.8% 2.6% 2.6%
# of IPv6 addresses: 1024
Top 10 bandwidth usage (bytes/total in %):
25.1% 10.7% 7.9% 6.6% 6.2% 6.2% 4.9% 3.5% 3.5% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004181400.pktlen.png)
detailed numbers
[ 32- 63]: 4100617
[ 64- 127]: 7220673
[ 128- 255]: 2176408
[ 256- 511]: 1871717
[ 512- 1023]: 871393
[ 1024- 2047]: 11024532
Protocol Breakdown
![[protocol breakdown chart]](201004181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27265340 (100.00%) 18245273265 (100.00%) 669.17
ip 27217482 ( 99.82%) 18237789366 ( 99.96%) 670.08
tcp 14537019 ( 53.32%) 11588756800 ( 63.52%) 797.19
http(s) 6334720 ( 23.23%) 8525804241 ( 46.73%) 1345.88
http(c) 4129471 ( 15.15%) 624484034 ( 3.42%) 151.23
squid 213337 ( 0.78%) 61534044 ( 0.34%) 288.44
smtp 228462 ( 0.84%) 35213043 ( 0.19%) 154.13
ftp 19218 ( 0.07%) 1848867 ( 0.01%) 96.20
pop3 17242 ( 0.06%) 13338988 ( 0.07%) 773.63
imap 1061 ( 0.00%) 287852 ( 0.00%) 271.30
telnet 358 ( 0.00%) 58810 ( 0.00%) 164.27
ssh 17040 ( 0.06%) 2025308 ( 0.01%) 118.86
dns 54238 ( 0.20%) 3726182 ( 0.02%) 68.70
bgp 166 ( 0.00%) 62015 ( 0.00%) 373.58
napster 65 ( 0.00%) 9785 ( 0.00%) 150.54
realaud 870 ( 0.00%) 118881 ( 0.00%) 136.64
rtsp 29676 ( 0.11%) 1949765 ( 0.01%) 65.70
icecast 21163 ( 0.08%) 15801098 ( 0.09%) 746.64
hotline 2 ( 0.00%) 122 ( 0.00%) 61.00
other 3469919 ( 12.73%) 2302493105 ( 12.62%) 663.56
udp 8658890 ( 31.76%) 4614894060 ( 25.29%) 532.97
dns 527963 ( 1.94%) 92333640 ( 0.51%) 174.89
realaud 31 ( 0.00%) 2993 ( 0.00%) 96.55
halflif 186 ( 0.00%) 17721 ( 0.00%) 95.27
starcra 364 ( 0.00%) 42620 ( 0.00%) 117.09
everque 741 ( 0.00%) 116902 ( 0.00%) 157.76
unreal 86 ( 0.00%) 11831 ( 0.00%) 137.57
quake 44 ( 0.00%) 4561 ( 0.00%) 103.66
cuseeme 4 ( 0.00%) 655 ( 0.00%) 163.75
other 8128320 ( 29.81%) 4522047849 ( 24.78%) 556.33
icmp 528469 ( 1.94%) 69520110 ( 0.38%) 131.55
ipip 332 ( 0.00%) 41844 ( 0.00%) 126.04
ipsec 2045 ( 0.01%) 674022 ( 0.00%) 329.60
ip6 3486068 ( 12.79%) 1963310862 ( 10.76%) 563.19
other 4659 ( 0.02%) 591668 ( 0.00%) 126.99
frag 3862 ( 0.01%) 3385145 ( 0.02%) 876.53
ip6 47856 ( 0.18%) 7483779 ( 0.04%) 156.38
tcp6 15208 ( 0.06%) 1814381 ( 0.01%) 119.30
http(s) 47 ( 0.00%) 46297 ( 0.00%) 985.04
http(c) 3799 ( 0.01%) 349418 ( 0.00%) 91.98
smtp 208 ( 0.00%) 94077 ( 0.00%) 452.29
ftp 2675 ( 0.01%) 274497 ( 0.00%) 102.62
imap 315 ( 0.00%) 37990 ( 0.00%) 120.60
ssh 3230 ( 0.01%) 268028 ( 0.00%) 82.98
dns 70 ( 0.00%) 26580 ( 0.00%) 379.71
bgp 113 ( 0.00%) 15633 ( 0.00%) 138.35
other 4751 ( 0.02%) 701861 ( 0.00%) 147.73
udp6 25605 ( 0.09%) 4768158 ( 0.03%) 186.22
dns 24653 ( 0.09%) 4619075 ( 0.03%) 187.36
other 952 ( 0.00%) 149083 ( 0.00%) 156.60
icmp6 6946 ( 0.03%) 843381 ( 0.00%) 121.42
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 66 ( 0.00%) 53643 ( 0.00%) 812.77
tcpdump file: 201004181400.dump.gz (677.86 MB)