Traffic Trace Info
DumpFile: 201004201400.dump
FileSize: 2581.28MB
Id: 201004201400
StartTime: Tue Apr 20 14:00:00 2010
EndTime: Tue Apr 20 14:15:01 2010
TotalTime: 900.69 seconds
TotalCapSize: 2022.13MB CapLen: 96 bytes
# of packets: 36644208 (22703.84MB)
AvgRate: 211.45Mbps stddev:20.28M
IP flow (unique src/dst pair) Information
# of flows: 948160 (avg. 38.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 1.2% 1.2% 1.1% 1.0% 0.9% 0.8% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 506170
Top 10 bandwidth usage (bytes/total in %):
15.4% 8.5% 2.8% 2.7% 2.3% 2.3% 2.2% 2.1% 2.1% 2.1%
# of IPv6 addresses: 1078
Top 10 bandwidth usage (bytes/total in %):
19.0% 10.4% 6.2% 6.0% 5.3% 5.3% 5.0% 4.9% 4.7% 4.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004201400.pktlen.png)
detailed numbers
[ 32- 63]: 6033388
[ 64- 127]: 10306745
[ 128- 255]: 2738292
[ 256- 511]: 1856832
[ 512- 1023]: 1197877
[ 1024- 2047]: 14511074
Protocol Breakdown
![[protocol breakdown chart]](201004201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36644208 (100.00%) 23806697769 (100.00%) 649.67
ip 36588544 ( 99.85%) 23796803710 ( 99.96%) 650.39
tcp 22707726 ( 61.97%) 16605946594 ( 69.75%) 731.29
http(s) 8541194 ( 23.31%) 11294367903 ( 47.44%) 1322.34
http(c) 6524241 ( 17.80%) 928819635 ( 3.90%) 142.36
squid 276364 ( 0.75%) 99274090 ( 0.42%) 359.21
smtp 398349 ( 1.09%) 164653801 ( 0.69%) 413.34
ftp 33437 ( 0.09%) 6217706 ( 0.03%) 185.95
pop3 17796 ( 0.05%) 7990331 ( 0.03%) 449.00
imap 22904 ( 0.06%) 5633806 ( 0.02%) 245.97
telnet 987 ( 0.00%) 120341 ( 0.00%) 121.93
ssh 840410 ( 2.29%) 123934456 ( 0.52%) 147.47
dns 52977 ( 0.14%) 3627645 ( 0.02%) 68.48
bgp 209 ( 0.00%) 96556 ( 0.00%) 461.99
napster 358 ( 0.00%) 43644 ( 0.00%) 121.91
realaud 21 ( 0.00%) 2755 ( 0.00%) 131.19
rtsp 126314 ( 0.34%) 65247103 ( 0.27%) 516.55
icecast 10294 ( 0.03%) 1202304 ( 0.01%) 116.80
hotline 18 ( 0.00%) 5307 ( 0.00%) 294.83
other 5861534 ( 16.00%) 3904690071 ( 16.40%) 666.15
udp 9865945 ( 26.92%) 5078949824 ( 21.33%) 514.80
dns 720100 ( 1.97%) 122781978 ( 0.52%) 170.51
realaud 103 ( 0.00%) 18151 ( 0.00%) 176.22
halflif 73 ( 0.00%) 6976 ( 0.00%) 95.56
starcra 367 ( 0.00%) 61458 ( 0.00%) 167.46
everque 484 ( 0.00%) 89388 ( 0.00%) 184.69
unreal 78 ( 0.00%) 10553 ( 0.00%) 135.29
quake 41 ( 0.00%) 4739 ( 0.00%) 115.59
cuseeme 4 ( 0.00%) 394 ( 0.00%) 98.50
other 9143889 ( 24.95%) 4955802725 ( 20.82%) 541.98
icmp 552341 ( 1.51%) 69650469 ( 0.29%) 126.10
ipip 374 ( 0.00%) 45996 ( 0.00%) 122.98
ipsec 1935 ( 0.01%) 657070 ( 0.00%) 339.57
ip6 3456066 ( 9.43%) 2040639786 ( 8.57%) 590.45
other 4157 ( 0.01%) 913971 ( 0.00%) 219.86
frag 5631 ( 0.02%) 4588293 ( 0.02%) 814.83
ip6 55664 ( 0.15%) 9894059 ( 0.04%) 177.75
tcp6 18032 ( 0.05%) 2784745 ( 0.01%) 154.43
http(s) 473 ( 0.00%) 513516 ( 0.00%) 1085.66
http(c) 3991 ( 0.01%) 367577 ( 0.00%) 92.10
smtp 291 ( 0.00%) 34814 ( 0.00%) 119.64
ftp 2683 ( 0.01%) 274782 ( 0.00%) 102.42
imap 401 ( 0.00%) 43977 ( 0.00%) 109.67
ssh 5352 ( 0.01%) 795712 ( 0.00%) 148.68
dns 77 ( 0.00%) 21354 ( 0.00%) 277.32
bgp 124 ( 0.00%) 27400 ( 0.00%) 220.97
other 4640 ( 0.01%) 705613 ( 0.00%) 152.07
udp6 29601 ( 0.08%) 6106529 ( 0.03%) 206.29
dns 29073 ( 0.08%) 6027628 ( 0.03%) 207.33
unreal 1 ( 0.00%) 109 ( 0.00%) 109.00
other 527 ( 0.00%) 78792 ( 0.00%) 149.51
icmp6 7964 ( 0.02%) 964174 ( 0.00%) 121.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 36 ( 0.00%) 34395 ( 0.00%) 955.42
tcpdump file: 201004201400.dump.gz (960.58 MB)