Traffic Trace Info
DumpFile: 201004271400.dump
FileSize: 2743.25MB
Id: 201004271400
StartTime: Tue Apr 27 14:00:01 2010
EndTime: Tue Apr 27 14:15:01 2010
TotalTime: 900.27 seconds
TotalCapSize: -1956.62MB CapLen: 96 bytes
# of packets: 39574685 (23830.45MB)
AvgRate: 222.09Mbps stddev:16.61M
IP flow (unique src/dst pair) Information
# of flows: 1076239 (avg. 36.77 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.5% 1.2% 1.1% 1.0% 1.0% 0.9% 0.8% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 547163
Top 10 bandwidth usage (bytes/total in %):
16.4% 7.2% 3.2% 2.9% 2.5% 2.5% 2.4% 2.3% 2.2% 2.2%
# of IPv6 addresses: 1197
Top 10 bandwidth usage (bytes/total in %):
22.2% 14.2% 10.1% 6.0% 4.8% 4.7% 4.7% 4.2% 3.9% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004271400.pktlen.png)
detailed numbers
[ 32- 63]: 6991886
[ 64- 127]: 10861909
[ 128- 255]: 2654828
[ 256- 511]: 2330634
[ 512- 1023]: 2047960
[ 1024- 2047]: 14687468
Protocol Breakdown
![[protocol breakdown chart]](201004271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39574685 (100.00%) 24988042541 (100.00%) 631.41
ip 39517489 ( 99.86%) 24978187885 ( 99.96%) 632.08
tcp 22806850 ( 57.63%) 16147975844 ( 64.62%) 708.03
http(s) 8519982 ( 21.53%) 11141901062 ( 44.59%) 1307.74
http(c) 7136669 ( 18.03%) 922316702 ( 3.69%) 129.24
squid 309445 ( 0.78%) 107872377 ( 0.43%) 348.60
smtp 429738 ( 1.09%) 161023688 ( 0.64%) 374.70
nntp 10 ( 0.00%) 780 ( 0.00%) 78.00
ftp 21521 ( 0.05%) 2298066 ( 0.01%) 106.78
pop3 25382 ( 0.06%) 15617146 ( 0.06%) 615.28
imap 3319 ( 0.01%) 1224097 ( 0.00%) 368.82
telnet 3907 ( 0.01%) 317667 ( 0.00%) 81.31
ssh 145825 ( 0.37%) 49663854 ( 0.20%) 340.57
dns 16601 ( 0.04%) 1187396 ( 0.00%) 71.53
bgp 204 ( 0.00%) 91132 ( 0.00%) 446.73
napster 181 ( 0.00%) 19127 ( 0.00%) 105.67
realaud 205 ( 0.00%) 26058 ( 0.00%) 127.11
rtsp 86957 ( 0.22%) 56307063 ( 0.23%) 647.53
icecast 8750 ( 0.02%) 1452158 ( 0.01%) 165.96
hotline 57 ( 0.00%) 9330 ( 0.00%) 163.68
other 6098091 ( 15.41%) 3686647781 ( 14.75%) 604.56
udp 12548442 ( 31.71%) 6933181564 ( 27.75%) 552.51
dns 775954 ( 1.96%) 133012830 ( 0.53%) 171.42
rip 583 ( 0.00%) 395149 ( 0.00%) 677.79
realaud 315 ( 0.00%) 23166 ( 0.00%) 73.54
halflif 108 ( 0.00%) 14909 ( 0.00%) 138.05
starcra 229 ( 0.00%) 28334 ( 0.00%) 123.73
everque 580 ( 0.00%) 106683 ( 0.00%) 183.94
unreal 60 ( 0.00%) 8085 ( 0.00%) 134.75
quake 86 ( 0.00%) 13945 ( 0.00%) 162.15
cuseeme 8 ( 0.00%) 1012 ( 0.00%) 126.50
other 11757335 ( 29.71%) 6798030771 ( 27.21%) 578.19
icmp 923213 ( 2.33%) 92046368 ( 0.37%) 99.70
ipip 324 ( 0.00%) 39554 ( 0.00%) 122.08
ipsec 1346 ( 0.00%) 346316 ( 0.00%) 257.29
ip6 3235052 ( 8.17%) 1804273575 ( 7.22%) 557.73
other 2262 ( 0.01%) 324664 ( 0.00%) 143.53
frag 42566 ( 0.11%) 32778504 ( 0.13%) 770.06
ip6 57196 ( 0.14%) 9854656 ( 0.04%) 172.30
tcp6 20934 ( 0.05%) 2561979 ( 0.01%) 122.38
http(s) 205 ( 0.00%) 200204 ( 0.00%) 976.60
http(c) 1238 ( 0.00%) 118088 ( 0.00%) 95.39
smtp 250 ( 0.00%) 64322 ( 0.00%) 257.29
ftp 7711 ( 0.02%) 792612 ( 0.00%) 102.79
imap 293 ( 0.00%) 33206 ( 0.00%) 113.33
ssh 58 ( 0.00%) 15516 ( 0.00%) 267.52
dns 188 ( 0.00%) 61827 ( 0.00%) 328.87
bgp 106 ( 0.00%) 13607 ( 0.00%) 128.37
other 10885 ( 0.03%) 1262597 ( 0.01%) 115.99
udp6 31069 ( 0.08%) 6500228 ( 0.03%) 209.22
dns 30791 ( 0.08%) 6446417 ( 0.03%) 209.36
other 278 ( 0.00%) 53811 ( 0.00%) 193.56
icmp6 5004 ( 0.01%) 636506 ( 0.00%) 127.20
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 159 ( 0.00%) 151863 ( 0.00%) 955.11
tcpdump file: 201004271400.dump.gz (1005.85 MB)