Traffic Trace Info
DumpFile: 201004301400.dump
FileSize: 2692.52MB
Id: 201004301400
StartTime: Fri Apr 30 14:00:01 2010
EndTime: Fri Apr 30 14:15:01 2010
TotalTime: 900.03 seconds
TotalCapSize: -1995.64MB CapLen: 96 bytes
# of packets: 38807359 (23801.81MB)
AvgRate: 221.83Mbps stddev:15.95M
IP flow (unique src/dst pair) Information
# of flows: 1066609 (avg. 36.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.3% 1.2% 1.1% 1.0% 1.0% 1.0% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 613840
Top 10 bandwidth usage (bytes/total in %):
15.4% 6.3% 4.7% 4.4% 4.3% 4.1% 3.8% 3.7% 3.5% 2.3%
# of IPv6 addresses: 1203
Top 10 bandwidth usage (bytes/total in %):
26.5% 10.8% 5.8% 5.7% 4.8% 4.0% 4.0% 3.7% 3.4% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004301400.pktlen.png)
detailed numbers
[ 32- 63]: 8284215
[ 64- 127]: 9492197
[ 128- 255]: 2784596
[ 256- 511]: 2086566
[ 512- 1023]: 1039715
[ 1024- 2047]: 15120070
Protocol Breakdown
![[protocol breakdown chart]](201004301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38807359 (100.00%) 24958002498 (100.00%) 643.13
ip 38765802 ( 99.89%) 24949757928 ( 99.97%) 643.60
tcp 25192815 ( 64.92%) 18170720094 ( 72.81%) 721.27
http(s) 10002691 ( 25.78%) 13628524367 ( 54.61%) 1362.49
http(c) 8413654 ( 21.68%) 938321982 ( 3.76%) 111.52
squid 564493 ( 1.45%) 147185074 ( 0.59%) 260.74
smtp 342370 ( 0.88%) 119860367 ( 0.48%) 350.09
nntp 11 ( 0.00%) 725 ( 0.00%) 65.91
ftp 48143 ( 0.12%) 5116115 ( 0.02%) 106.27
pop3 57392 ( 0.15%) 39601348 ( 0.16%) 690.02
imap 4398 ( 0.01%) 2460006 ( 0.01%) 559.35
telnet 3614 ( 0.01%) 309075 ( 0.00%) 85.52
ssh 1055041 ( 2.72%) 625678407 ( 2.51%) 593.04
dns 18996 ( 0.05%) 1358915 ( 0.01%) 71.54
bgp 140 ( 0.00%) 51471 ( 0.00%) 367.65
napster 177 ( 0.00%) 20313 ( 0.00%) 114.76
realaud 317 ( 0.00%) 37175 ( 0.00%) 117.27
rtsp 173387 ( 0.45%) 27410771 ( 0.11%) 158.09
icecast 18792 ( 0.05%) 3911968 ( 0.02%) 208.17
hotline 34 ( 0.00%) 3368 ( 0.00%) 99.06
other 4489156 ( 11.57%) 2630868107 ( 10.54%) 586.05
udp 9978172 ( 25.71%) 5109665540 ( 20.47%) 512.08
dns 698583 ( 1.80%) 120019641 ( 0.48%) 171.80
rip 2 ( 0.00%) 155 ( 0.00%) 77.50
realaud 4082 ( 0.01%) 4443863 ( 0.02%) 1088.65
halflif 17479 ( 0.05%) 7564124 ( 0.03%) 432.75
starcra 163 ( 0.00%) 16775 ( 0.00%) 102.91
everque 626 ( 0.00%) 120509 ( 0.00%) 192.51
unreal 96 ( 0.00%) 13596 ( 0.00%) 141.62
quake 19 ( 0.00%) 2499 ( 0.00%) 131.53
cuseeme 7 ( 0.00%) 660 ( 0.00%) 94.29
other 9256829 ( 23.85%) 4977333176 ( 19.94%) 537.69
icmp 636262 ( 1.64%) 93527066 ( 0.37%) 146.99
ipip 324 ( 0.00%) 41544 ( 0.00%) 128.22
ipsec 1030 ( 0.00%) 371060 ( 0.00%) 360.25
ip6 2955215 ( 7.62%) 1575106657 ( 6.31%) 532.99
other 1984 ( 0.01%) 325967 ( 0.00%) 164.30
frag 1913 ( 0.00%) 1866306 ( 0.01%) 975.59
ip6 41557 ( 0.11%) 8244570 ( 0.03%) 198.39
tcp6 8005 ( 0.02%) 1750156 ( 0.01%) 218.63
http(s) 157 ( 0.00%) 181720 ( 0.00%) 1157.45
http(c) 1423 ( 0.00%) 138436 ( 0.00%) 97.28
smtp 313 ( 0.00%) 124259 ( 0.00%) 396.99
imap 268 ( 0.00%) 30828 ( 0.00%) 115.03
ssh 582 ( 0.00%) 326676 ( 0.00%) 561.30
dns 113 ( 0.00%) 35513 ( 0.00%) 314.27
bgp 112 ( 0.00%) 14129 ( 0.00%) 126.15
other 5037 ( 0.01%) 898595 ( 0.00%) 178.40
udp6 29634 ( 0.08%) 5963194 ( 0.02%) 201.23
dns 29387 ( 0.08%) 5920435 ( 0.02%) 201.46
realaud 2 ( 0.00%) 336 ( 0.00%) 168.00
other 245 ( 0.00%) 42423 ( 0.00%) 173.16
icmp6 3825 ( 0.01%) 463283 ( 0.00%) 121.12
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 63 ( 0.00%) 63857 ( 0.00%) 1013.60
tcpdump file: 201004301400.dump.gz (1006.84 MB)