Traffic Trace Info
DumpFile: 201004281400.dump
FileSize: 2630.97MB
Id: 201004281400
StartTime: Wed Apr 28 14:00:01 2010
EndTime: Wed Apr 28 14:15:00 2010
TotalTime: 899.67 seconds
TotalCapSize: -2043.03MB CapLen: 96 bytes
# of packets: 37878789 (22874.16MB)
AvgRate: 213.31Mbps stddev:34.14M
IP flow (unique src/dst pair) Information
# of flows: 1049399 (avg. 36.10 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.0% 1.7% 1.6% 1.2% 1.2% 1.0% 0.9% 0.8% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 591518
Top 10 bandwidth usage (bytes/total in %):
15.2% 7.7% 7.0% 7.0% 3.5% 3.4% 3.4% 2.7% 2.7% 2.3%
# of IPv6 addresses: 1196
Top 10 bandwidth usage (bytes/total in %):
19.0% 11.7% 10.9% 10.0% 7.5% 4.7% 4.6% 4.0% 3.9% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004281400.pktlen.png)
detailed numbers
[ 32- 63]: 8133638
[ 64- 127]: 9845660
[ 128- 255]: 2323364
[ 256- 511]: 1967487
[ 512- 1023]: 1078807
[ 1024- 2047]: 14529833
Protocol Breakdown
![[protocol breakdown chart]](201004281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37878789 (100.00%) 23985294155 (100.00%) 633.21
ip 37819443 ( 99.84%) 23973819104 ( 99.95%) 633.90
tcp 23154284 ( 61.13%) 16676619374 ( 69.53%) 720.24
http(s) 7890532 ( 20.83%) 10358632601 ( 43.19%) 1312.79
http(c) 8098336 ( 21.38%) 1337846407 ( 5.58%) 165.20
squid 449454 ( 1.19%) 141131049 ( 0.59%) 314.01
smtp 368006 ( 0.97%) 133899247 ( 0.56%) 363.85
ftp 29622 ( 0.08%) 3055762 ( 0.01%) 103.16
pop3 22170 ( 0.06%) 14426222 ( 0.06%) 650.71
imap 4487 ( 0.01%) 2123496 ( 0.01%) 473.26
telnet 5020 ( 0.01%) 421764 ( 0.00%) 84.02
ssh 200705 ( 0.53%) 54350896 ( 0.23%) 270.80
dns 18989 ( 0.05%) 1441640 ( 0.01%) 75.92
bgp 161 ( 0.00%) 61832 ( 0.00%) 384.05
napster 149 ( 0.00%) 12732 ( 0.00%) 85.45
realaud 79 ( 0.00%) 6529 ( 0.00%) 82.65
rtsp 65145 ( 0.17%) 11337884 ( 0.05%) 174.04
icecast 94737 ( 0.25%) 94155524 ( 0.39%) 993.86
hotline 5 ( 0.00%) 342 ( 0.00%) 68.40
other 5906683 ( 15.59%) 4523715207 ( 18.86%) 765.86
udp 10855829 ( 28.66%) 5377164954 ( 22.42%) 495.33
dns 724008 ( 1.91%) 125270577 ( 0.52%) 173.02
realaud 29 ( 0.00%) 2922 ( 0.00%) 100.76
halflif 59 ( 0.00%) 4937 ( 0.00%) 83.68
starcra 206 ( 0.00%) 21487 ( 0.00%) 104.31
everque 579 ( 0.00%) 124351 ( 0.00%) 214.77
unreal 44 ( 0.00%) 6085 ( 0.00%) 138.30
quake 80 ( 0.00%) 7737 ( 0.00%) 96.71
cuseeme 12 ( 0.00%) 1412 ( 0.00%) 117.67
other 10130335 ( 26.74%) 5251474681 ( 21.89%) 518.39
icmp 506036 ( 1.34%) 64209111 ( 0.27%) 126.89
ipip 333 ( 0.00%) 40390 ( 0.00%) 121.29
ipsec 852 ( 0.00%) 296808 ( 0.00%) 348.37
ip6 3286223 ( 8.68%) 1851858198 ( 7.72%) 563.52
other 15886 ( 0.04%) 3630269 ( 0.02%) 228.52
frag 3129 ( 0.01%) 2987629 ( 0.01%) 954.82
ip6 59346 ( 0.16%) 11475051 ( 0.05%) 193.36
tcp6 25918 ( 0.07%) 4576453 ( 0.02%) 176.57
http(s) 1138 ( 0.00%) 1578010 ( 0.01%) 1386.65
http(c) 1356 ( 0.00%) 128613 ( 0.00%) 94.85
smtp 955 ( 0.00%) 160058 ( 0.00%) 167.60
ftp 7942 ( 0.02%) 777046 ( 0.00%) 97.84
imap 240 ( 0.00%) 28833 ( 0.00%) 120.14
ssh 1804 ( 0.00%) 328008 ( 0.00%) 181.82
dns 130 ( 0.00%) 32849 ( 0.00%) 252.68
bgp 101 ( 0.00%) 12739 ( 0.00%) 126.13
other 12252 ( 0.03%) 1530297 ( 0.01%) 124.90
udp6 29036 ( 0.08%) 6219893 ( 0.03%) 214.21
dns 28759 ( 0.08%) 6160731 ( 0.03%) 214.22
other 277 ( 0.00%) 59162 ( 0.00%) 213.58
icmp6 4211 ( 0.01%) 520427 ( 0.00%) 123.59
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 151 ( 0.00%) 154198 ( 0.00%) 1021.18
tcpdump file: 201004281400.dump.gz (956.57 MB)