Traffic Trace Info
DumpFile: 201004122345.dump
FileSize: 2494.08MB
Id: 201004122345
StartTime: Mon Apr 12 23:45:01 2010
EndTime: Tue Apr 13 00:00:01 2010
TotalTime: 900.10 seconds
TotalCapSize: 1948.32MB CapLen: 96 bytes
# of packets: 35766347 (24273.75MB)
AvgRate: 226.20Mbps stddev:18.48M
IP flow (unique src/dst pair) Information
# of flows: 1120037 (avg. 31.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.0% 0.8% 0.8% 0.7% 0.7% 0.6% 0.5% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 611795
Top 10 bandwidth usage (bytes/total in %):
12.0% 10.7% 10.0% 9.2% 6.5% 3.9% 2.9% 2.4% 2.4% 2.3%
# of IPv6 addresses: 972
Top 10 bandwidth usage (bytes/total in %):
28.5% 11.3% 7.8% 7.7% 6.4% 4.7% 3.9% 3.0% 3.0% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004122345.pktlen.png)
detailed numbers
[ 32- 63]: 6272165
[ 64- 127]: 9104753
[ 128- 255]: 2286146
[ 256- 511]: 1612707
[ 512- 1023]: 759131
[ 1024- 2047]: 15731445
Protocol Breakdown
![[protocol breakdown chart]](201004122345.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35766347 (100.00%) 25452870686 (100.00%) 711.64
ip 35717858 ( 99.86%) 25445188601 ( 99.97%) 712.39
tcp 23414178 ( 65.46%) 19587244147 ( 76.95%) 836.55
http(s) 12157125 ( 33.99%) 17021085683 ( 66.87%) 1400.09
http(c) 6658858 ( 18.62%) 621132047 ( 2.44%) 93.28
squid 299546 ( 0.84%) 104783207 ( 0.41%) 349.81
smtp 326005 ( 0.91%) 78121378 ( 0.31%) 239.63
ftp 25458 ( 0.07%) 2989514 ( 0.01%) 117.43
pop3 8903 ( 0.02%) 4776636 ( 0.02%) 536.52
imap 1911 ( 0.01%) 512603 ( 0.00%) 268.24
telnet 3689 ( 0.01%) 243087 ( 0.00%) 65.90
ssh 751485 ( 2.10%) 267518144 ( 1.05%) 355.99
dns 59953 ( 0.17%) 4116991 ( 0.02%) 68.67
bgp 149 ( 0.00%) 53555 ( 0.00%) 359.43
napster 44 ( 0.00%) 6929 ( 0.00%) 157.48
realaud 13 ( 0.00%) 2293 ( 0.00%) 176.38
rtsp 4291 ( 0.01%) 3444192 ( 0.01%) 802.65
icecast 3232 ( 0.01%) 1741189 ( 0.01%) 538.73
other 3113514 ( 8.71%) 1476716579 ( 5.80%) 474.29
udp 8268577 ( 23.12%) 4033026414 ( 15.85%) 487.75
dns 733229 ( 2.05%) 125170372 ( 0.49%) 170.71
rip 1 ( 0.00%) 140 ( 0.00%) 140.00
realaud 139 ( 0.00%) 12514 ( 0.00%) 90.03
halflif 96 ( 0.00%) 15625 ( 0.00%) 162.76
starcra 335 ( 0.00%) 41000 ( 0.00%) 122.39
everque 4280 ( 0.01%) 374115 ( 0.00%) 87.41
unreal 44 ( 0.00%) 5902 ( 0.00%) 134.14
quake 46 ( 0.00%) 6150 ( 0.00%) 133.70
cuseeme 2 ( 0.00%) 249 ( 0.00%) 124.50
other 7530087 ( 21.05%) 3907214651 ( 15.35%) 518.88
icmp 837808 ( 2.34%) 126740194 ( 0.50%) 151.28
ipip 301 ( 0.00%) 38034 ( 0.00%) 126.36
ipsec 1456 ( 0.00%) 392504 ( 0.00%) 269.58
ip6 3024773 ( 8.46%) 1676308863 ( 6.59%) 554.19
other 170765 ( 0.48%) 21438445 ( 0.08%) 125.54
frag 2007 ( 0.01%) 2060358 ( 0.01%) 1026.59
ip6 48489 ( 0.14%) 7682085 ( 0.03%) 158.43
tcp6 11315 ( 0.03%) 1197706 ( 0.00%) 105.85
http(s) 49 ( 0.00%) 17289 ( 0.00%) 352.84
http(c) 4618 ( 0.01%) 421897 ( 0.00%) 91.36
squid 10 ( 0.00%) 740 ( 0.00%) 74.00
smtp 309 ( 0.00%) 136778 ( 0.00%) 442.65
imap 327 ( 0.00%) 36602 ( 0.00%) 111.93
ssh 3242 ( 0.01%) 269172 ( 0.00%) 83.03
dns 204 ( 0.00%) 40631 ( 0.00%) 199.17
bgp 100 ( 0.00%) 12133 ( 0.00%) 121.33
icecast 5 ( 0.00%) 370 ( 0.00%) 74.00
other 2451 ( 0.01%) 262094 ( 0.00%) 106.93
udp6 29728 ( 0.08%) 5532100 ( 0.02%) 186.09
dns 29245 ( 0.08%) 5445503 ( 0.02%) 186.20
other 483 ( 0.00%) 86597 ( 0.00%) 179.29
icmp6 7343 ( 0.02%) 882224 ( 0.00%) 120.14
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 73 ( 0.00%) 65975 ( 0.00%) 903.77
tcpdump file: 201004122345.dump.gz (927.54 MB)