Traffic Trace Info
DumpFile: 201004261400.dump
FileSize: 2554.36MB
Id: 201004261400
StartTime: Mon Apr 26 14:00:00 2010
EndTime: Mon Apr 26 14:15:01 2010
TotalTime: 900.55 seconds
TotalCapSize: 1997.29MB CapLen: 96 bytes
# of packets: 36507646 (22650.81MB)
AvgRate: 211.00Mbps stddev:35.35M
IP flow (unique src/dst pair) Information
# of flows: 914614 (avg. 39.92 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.3% 1.8% 1.5% 1.0% 0.9% 0.9% 0.9% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 506851
Top 10 bandwidth usage (bytes/total in %):
15.8% 7.2% 6.5% 6.3% 3.6% 3.2% 3.0% 2.8% 2.6% 2.4%
# of IPv6 addresses: 1156
Top 10 bandwidth usage (bytes/total in %):
51.6% 51.6% 11.9% 5.8% 3.6% 2.6% 2.5% 2.1% 2.0% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004261400.pktlen.png)
detailed numbers
[ 32- 63]: 6452619
[ 64- 127]: 9854360
[ 128- 255]: 2338523
[ 256- 511]: 1991203
[ 512- 1023]: 1741178
[ 1024- 2047]: 14129763
Protocol Breakdown
![[protocol breakdown chart]](201004261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36507646 (100.00%) 23751091995 (100.00%) 650.58
ip 36455450 ( 99.86%) 23732694313 ( 99.92%) 651.01
tcp 22754517 ( 62.33%) 16978935501 ( 71.49%) 746.18
http(s) 8530609 ( 23.37%) 11377229402 ( 47.90%) 1333.69
http(c) 6249910 ( 17.12%) 1172077900 ( 4.93%) 187.54
squid 313829 ( 0.86%) 127310216 ( 0.54%) 405.67
smtp 323112 ( 0.89%) 128546616 ( 0.54%) 397.84
nntp 12 ( 0.00%) 752 ( 0.00%) 62.67
ftp 30246 ( 0.08%) 3212452 ( 0.01%) 106.21
pop3 32359 ( 0.09%) 22308049 ( 0.09%) 689.39
imap 2501 ( 0.01%) 535084 ( 0.00%) 213.95
telnet 5735 ( 0.02%) 463639 ( 0.00%) 80.84
ssh 44890 ( 0.12%) 6353890 ( 0.03%) 141.54
dns 20953 ( 0.06%) 1449155 ( 0.01%) 69.16
bgp 162 ( 0.00%) 68347 ( 0.00%) 421.90
napster 20 ( 0.00%) 5043 ( 0.00%) 252.15
realaud 269 ( 0.00%) 26077 ( 0.00%) 96.94
rtsp 327321 ( 0.90%) 229978594 ( 0.97%) 702.61
icecast 37656 ( 0.10%) 16910138 ( 0.07%) 449.07
hotline 93 ( 0.00%) 11945 ( 0.00%) 128.44
other 6834834 ( 18.72%) 3892447842 ( 16.39%) 569.50
udp 9953051 ( 27.26%) 4995223950 ( 21.03%) 501.88
dns 721772 ( 1.98%) 124951310 ( 0.53%) 173.12
realaud 40 ( 0.00%) 10400 ( 0.00%) 260.00
halflif 101 ( 0.00%) 14003 ( 0.00%) 138.64
starcra 211 ( 0.00%) 27213 ( 0.00%) 128.97
everque 2313 ( 0.01%) 1496220 ( 0.01%) 646.87
unreal 59 ( 0.00%) 9419 ( 0.00%) 159.64
quake 126 ( 0.00%) 10953 ( 0.00%) 86.93
cuseeme 5 ( 0.00%) 434 ( 0.00%) 86.80
other 9220580 ( 25.26%) 4867937821 ( 20.50%) 527.94
icmp 489783 ( 1.34%) 39625934 ( 0.17%) 80.91
ipip 338 ( 0.00%) 40702 ( 0.00%) 120.42
ipsec 956 ( 0.00%) 324431 ( 0.00%) 339.36
ip6 3237276 ( 8.87%) 1714635907 ( 7.22%) 529.65
other 19529 ( 0.05%) 3907888 ( 0.02%) 200.11
frag 87880 ( 0.24%) 67701282 ( 0.29%) 770.38
ip6 52196 ( 0.14%) 18397682 ( 0.08%) 352.47
tcp6 15902 ( 0.04%) 11266375 ( 0.05%) 708.49
http(s) 316 ( 0.00%) 320975 ( 0.00%) 1015.74
http(c) 1410 ( 0.00%) 138319 ( 0.00%) 98.10
smtp 415 ( 0.00%) 189742 ( 0.00%) 457.21
imap 325 ( 0.00%) 36864 ( 0.00%) 113.43
ssh 2091 ( 0.01%) 413898 ( 0.00%) 197.94
dns 121 ( 0.00%) 37452 ( 0.00%) 309.52
bgp 122 ( 0.00%) 16796 ( 0.00%) 137.67
other 11102 ( 0.03%) 10112329 ( 0.04%) 910.86
udp6 30138 ( 0.08%) 6285706 ( 0.03%) 208.56
dns 29879 ( 0.08%) 6240151 ( 0.03%) 208.85
other 259 ( 0.00%) 45555 ( 0.00%) 175.89
icmp6 6013 ( 0.02%) 726281 ( 0.00%) 120.79
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 113 ( 0.00%) 115240 ( 0.00%) 1019.82
tcpdump file: 201004261400.dump.gz (947.56 MB)