Traffic Trace Info
DumpFile: 201004221400.dump
FileSize: 2544.76MB
Id: 201004221400
StartTime: Thu Apr 22 14:00:00 2010
EndTime: Thu Apr 22 14:15:01 2010
TotalTime: 900.18 seconds
TotalCapSize: 1984.88MB CapLen: 96 bytes
# of packets: 36691405 (22728.19MB)
AvgRate: 211.80Mbps stddev:15.06M
IP flow (unique src/dst pair) Information
# of flows: 1032045 (avg. 35.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 2.0% 1.6% 1.6% 1.2% 1.1% 1.0% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 553456
Top 10 bandwidth usage (bytes/total in %):
14.1% 7.5% 6.6% 3.2% 3.0% 2.5% 2.5% 2.5% 2.4% 2.2%
# of IPv6 addresses: 1045
Top 10 bandwidth usage (bytes/total in %):
27.0% 9.7% 6.3% 4.8% 4.8% 4.3% 4.1% 4.1% 4.0% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004221400.pktlen.png)
detailed numbers
[ 32- 63]: 6629654
[ 64- 127]: 9714121
[ 128- 255]: 2735679
[ 256- 511]: 2024993
[ 512- 1023]: 938352
[ 1024- 2047]: 14648606
Protocol Breakdown
![[protocol breakdown chart]](201004221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36691405 (100.00%) 23832235386 (100.00%) 649.53
ip 36651271 ( 99.89%) 23824162320 ( 99.97%) 650.02
tcp 22595033 ( 61.58%) 16857814171 ( 70.74%) 746.08
http(s) 8968280 ( 24.44%) 11682263388 ( 49.02%) 1302.62
http(c) 7597517 ( 20.71%) 1656605582 ( 6.95%) 218.05
squid 299624 ( 0.82%) 150471617 ( 0.63%) 502.20
smtp 489777 ( 1.33%) 130917742 ( 0.55%) 267.30
ftp 21629 ( 0.06%) 2395982 ( 0.01%) 110.78
pop3 30261 ( 0.08%) 23028600 ( 0.10%) 761.00
imap 6862 ( 0.02%) 4853652 ( 0.02%) 707.32
telnet 12155 ( 0.03%) 954640 ( 0.00%) 78.54
ssh 199605 ( 0.54%) 19207579 ( 0.08%) 96.23
dns 57301 ( 0.16%) 4001515 ( 0.02%) 69.83
bgp 201 ( 0.00%) 96092 ( 0.00%) 478.07
napster 198 ( 0.00%) 13056 ( 0.00%) 65.94
realaud 4558 ( 0.01%) 332150 ( 0.00%) 72.87
rtsp 94281 ( 0.26%) 53721473 ( 0.23%) 569.80
icecast 5079 ( 0.01%) 335862 ( 0.00%) 66.13
hotline 13 ( 0.00%) 1964 ( 0.00%) 151.08
other 4807677 ( 13.10%) 3128612377 ( 13.13%) 650.75
udp 10177385 ( 27.74%) 5045530704 ( 21.17%) 495.76
dns 785122 ( 2.14%) 134876701 ( 0.57%) 171.79
realaud 6 ( 0.00%) 856 ( 0.00%) 142.67
halflif 55 ( 0.00%) 6341 ( 0.00%) 115.29
starcra 162 ( 0.00%) 20833 ( 0.00%) 128.60
everque 597 ( 0.00%) 105915 ( 0.00%) 177.41
unreal 40 ( 0.00%) 5775 ( 0.00%) 144.38
quake 39 ( 0.00%) 4454 ( 0.00%) 114.21
cuseeme 12 ( 0.00%) 1407 ( 0.00%) 117.25
other 9390705 ( 25.59%) 4910341498 ( 20.60%) 522.89
icmp 483329 ( 1.32%) 39905462 ( 0.17%) 82.56
ipip 325 ( 0.00%) 40850 ( 0.00%) 125.69
ipsec 113945 ( 0.31%) 68625382 ( 0.29%) 602.27
ip6 3275127 ( 8.93%) 1811459388 ( 7.60%) 553.10
other 6127 ( 0.02%) 786363 ( 0.00%) 128.34
frag 2554 ( 0.01%) 2292497 ( 0.01%) 897.61
ip6 40134 ( 0.11%) 8073066 ( 0.03%) 201.15
tcp6 5945 ( 0.02%) 1387241 ( 0.01%) 233.35
http(s) 54 ( 0.00%) 42673 ( 0.00%) 790.24
http(c) 1302 ( 0.00%) 128899 ( 0.00%) 99.00
smtp 191 ( 0.00%) 21287 ( 0.00%) 111.45
imap 252 ( 0.00%) 29141 ( 0.00%) 115.64
ssh 1892 ( 0.01%) 345224 ( 0.00%) 182.47
dns 107 ( 0.00%) 28282 ( 0.00%) 264.32
bgp 127 ( 0.00%) 23426 ( 0.00%) 184.46
other 2020 ( 0.01%) 768309 ( 0.00%) 380.35
udp6 28338 ( 0.08%) 5903565 ( 0.02%) 208.33
dns 28216 ( 0.08%) 5879633 ( 0.02%) 208.38
quake 1 ( 0.00%) 111 ( 0.00%) 111.00
other 121 ( 0.00%) 23821 ( 0.00%) 196.87
icmp6 5738 ( 0.02%) 693234 ( 0.00%) 120.81
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 83 ( 0.00%) 84946 ( 0.00%) 1023.45
tcpdump file: 201004221400.dump.gz (920.94 MB)