Traffic Trace Info
DumpFile: 201004211400.dump
FileSize: 2375.67MB
Id: 201004211400
StartTime: Wed Apr 21 14:00:01 2010
EndTime: Wed Apr 21 14:15:01 2010
TotalTime: 899.50 seconds
TotalCapSize: 1850.48MB CapLen: 96 bytes
# of packets: 34418519 (21552.12MB)
AvgRate: 200.99Mbps stddev:20.23M
IP flow (unique src/dst pair) Information
# of flows: 1140291 (avg. 30.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.4% 1.3% 1.1% 0.9% 0.9% 0.8% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 652632
Top 10 bandwidth usage (bytes/total in %):
17.8% 7.7% 2.8% 2.7% 2.7% 2.6% 2.6% 2.6% 2.5% 2.5%
# of IPv6 addresses: 1068
Top 10 bandwidth usage (bytes/total in %):
19.9% 11.6% 7.4% 6.5% 6.3% 4.9% 4.1% 4.0% 3.6% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004211400.pktlen.png)
detailed numbers
[ 32- 63]: 6248485
[ 64- 127]: 9072482
[ 128- 255]: 2403551
[ 256- 511]: 1892532
[ 512- 1023]: 1047460
[ 1024- 2047]: 13754009
Protocol Breakdown
![[protocol breakdown chart]](201004211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34418519 (100.00%) 22599035519 (100.00%) 656.60
ip 34363978 ( 99.84%) 22589608631 ( 99.96%) 657.36
tcp 20271538 ( 58.90%) 14729889459 ( 65.18%) 726.63
http(s) 8389902 ( 24.38%) 11150202773 ( 49.34%) 1329.00
http(c) 6632238 ( 19.27%) 939139871 ( 4.16%) 141.60
squid 264648 ( 0.77%) 73881258 ( 0.33%) 279.17
smtp 435154 ( 1.26%) 128193591 ( 0.57%) 294.59
nntp 3 ( 0.00%) 186 ( 0.00%) 62.00
ftp 32620 ( 0.09%) 3350274 ( 0.01%) 102.71
pop3 26640 ( 0.08%) 15123526 ( 0.07%) 567.70
imap 4528 ( 0.01%) 2309805 ( 0.01%) 510.12
telnet 718 ( 0.00%) 103875 ( 0.00%) 144.67
ssh 136210 ( 0.40%) 20757379 ( 0.09%) 152.39
dns 54615 ( 0.16%) 4050122 ( 0.02%) 74.16
bgp 206 ( 0.00%) 95912 ( 0.00%) 465.59
napster 168 ( 0.00%) 12541 ( 0.00%) 74.65
realaud 9 ( 0.00%) 2809 ( 0.00%) 312.11
rtsp 173840 ( 0.51%) 118958626 ( 0.53%) 684.30
icecast 51690 ( 0.15%) 28557087 ( 0.13%) 552.47
hotline 10 ( 0.00%) 620 ( 0.00%) 62.00
other 4068336 ( 11.82%) 2245149024 ( 9.93%) 551.86
udp 10406022 ( 30.23%) 6065709560 ( 26.84%) 582.90
dns 767939 ( 2.23%) 132168837 ( 0.58%) 172.11
realaud 91 ( 0.00%) 9509 ( 0.00%) 104.49
halflif 76 ( 0.00%) 8851 ( 0.00%) 116.46
starcra 320 ( 0.00%) 32017 ( 0.00%) 100.05
everque 17472 ( 0.05%) 5626450 ( 0.02%) 322.03
unreal 48 ( 0.00%) 6057 ( 0.00%) 126.19
quake 63 ( 0.00%) 5166 ( 0.00%) 82.00
cuseeme 2 ( 0.00%) 210 ( 0.00%) 105.00
other 9618515 ( 27.95%) 5927579127 ( 26.23%) 616.27
icmp 477077 ( 1.39%) 38536649 ( 0.17%) 80.78
ipip 322 ( 0.00%) 40504 ( 0.00%) 125.79
ipsec 1116 ( 0.00%) 336488 ( 0.00%) 301.51
ip6 3150668 ( 9.15%) 1746874126 ( 7.73%) 554.45
other 57235 ( 0.17%) 8221845 ( 0.04%) 143.65
frag 6190 ( 0.02%) 5377170 ( 0.02%) 868.69
ip6 54541 ( 0.16%) 9426888 ( 0.04%) 172.84
tcp6 16494 ( 0.05%) 2354912 ( 0.01%) 142.77
http(s) 268 ( 0.00%) 334300 ( 0.00%) 1247.39
http(c) 3848 ( 0.01%) 350655 ( 0.00%) 91.13
smtp 257 ( 0.00%) 51302 ( 0.00%) 199.62
ftp 1966 ( 0.01%) 199343 ( 0.00%) 101.40
imap 258 ( 0.00%) 29273 ( 0.00%) 113.46
ssh 5455 ( 0.02%) 720842 ( 0.00%) 132.14
dns 51 ( 0.00%) 10669 ( 0.00%) 209.20
bgp 107 ( 0.00%) 14683 ( 0.00%) 137.22
other 4284 ( 0.01%) 643845 ( 0.00%) 150.29
udp6 30410 ( 0.09%) 6112079 ( 0.03%) 200.99
dns 29995 ( 0.09%) 6049289 ( 0.03%) 201.68
other 415 ( 0.00%) 62790 ( 0.00%) 151.30
icmp6 7560 ( 0.02%) 915153 ( 0.00%) 121.05
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 47 ( 0.00%) 40664 ( 0.00%) 865.19
tcpdump file: 201004211400.dump.gz (870.64 MB)