Traffic Trace Info
DumpFile: 201004130015.dump
FileSize: 2447.38MB
Id: 201004130015
StartTime: Tue Apr 13 00:15:01 2010
EndTime: Tue Apr 13 00:30:01 2010
TotalTime: 899.66 seconds
TotalCapSize: 1911.19MB CapLen: 96 bytes
# of packets: 35137496 (23255.49MB)
AvgRate: 216.83Mbps stddev:15.85M
IP flow (unique src/dst pair) Information
# of flows: 1260941 (avg. 27.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.2% 1.1% 0.9% 0.8% 0.8% 0.7% 0.6% 0.5% 0.5% 0.4%
IP address Information
# of IPv4 addresses: 719152
Top 10 bandwidth usage (bytes/total in %):
13.3% 10.7% 9.5% 9.2% 5.8% 3.6% 2.8% 2.1% 2.1% 1.8%
# of IPv6 addresses: 1026
Top 10 bandwidth usage (bytes/total in %):
29.0% 8.6% 7.9% 7.7% 3.9% 3.5% 3.3% 3.1% 3.1% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004130015.pktlen.png)
detailed numbers
[ 32- 63]: 6094234
[ 64- 127]: 9199849
[ 128- 255]: 2393767
[ 256- 511]: 1733770
[ 512- 1023]: 725134
[ 1024- 2047]: 14990742
Protocol Breakdown
![[protocol breakdown chart]](201004130015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35137496 (100.00%) 24385147732 (100.00%) 693.99
ip 35090411 ( 99.87%) 24377618468 ( 99.97%) 694.71
tcp 22689711 ( 64.57%) 18463903003 ( 75.72%) 813.76
http(s) 10958969 ( 31.19%) 15356244129 ( 62.97%) 1401.25
http(c) 6044570 ( 17.20%) 587417701 ( 2.41%) 97.18
squid 348281 ( 0.99%) 110922156 ( 0.45%) 318.48
smtp 354206 ( 1.01%) 84920374 ( 0.35%) 239.75
ftp 41448 ( 0.12%) 3918758 ( 0.02%) 94.55
pop3 11618 ( 0.03%) 6633879 ( 0.03%) 571.00
imap 5536 ( 0.02%) 3987574 ( 0.02%) 720.30
telnet 6806 ( 0.02%) 4676419 ( 0.02%) 687.10
ssh 1147977 ( 3.27%) 346701327 ( 1.42%) 302.01
dns 53745 ( 0.15%) 3679618 ( 0.02%) 68.46
bgp 220 ( 0.00%) 107150 ( 0.00%) 487.05
napster 82 ( 0.00%) 5438 ( 0.00%) 66.32
realaud 24 ( 0.00%) 3806 ( 0.00%) 158.58
rtsp 29295 ( 0.08%) 24547039 ( 0.10%) 837.93
icecast 9208 ( 0.03%) 631224 ( 0.00%) 68.55
hotline 33 ( 0.00%) 2362 ( 0.00%) 71.58
other 3677686 ( 10.47%) 1929503629 ( 7.91%) 524.65
udp 8673467 ( 24.68%) 4320303876 ( 17.72%) 498.11
dns 788705 ( 2.24%) 140102733 ( 0.57%) 177.64
realaud 36 ( 0.00%) 4128 ( 0.00%) 114.67
halflif 140 ( 0.00%) 20777 ( 0.00%) 148.41
starcra 314 ( 0.00%) 45048 ( 0.00%) 143.46
everque 562 ( 0.00%) 100730 ( 0.00%) 179.23
unreal 47 ( 0.00%) 6192 ( 0.00%) 131.74
quake 49 ( 0.00%) 4836 ( 0.00%) 98.69
cuseeme 6 ( 0.00%) 598 ( 0.00%) 99.67
other 7883274 ( 22.44%) 4179857946 ( 17.14%) 530.22
icmp 885028 ( 2.52%) 129376261 ( 0.53%) 146.18
ipip 321 ( 0.00%) 39710 ( 0.00%) 123.71
ipsec 1342 ( 0.00%) 366996 ( 0.00%) 273.47
ip6 2701438 ( 7.69%) 1424908335 ( 5.84%) 527.46
other 139104 ( 0.40%) 38720287 ( 0.16%) 278.35
frag 4599 ( 0.01%) 4957410 ( 0.02%) 1077.93
ip6 47085 ( 0.13%) 7529264 ( 0.03%) 159.91
tcp6 12276 ( 0.03%) 1354112 ( 0.01%) 110.31
http(s) 53 ( 0.00%) 31850 ( 0.00%) 600.94
http(c) 6345 ( 0.02%) 651099 ( 0.00%) 102.62
smtp 315 ( 0.00%) 123120 ( 0.00%) 390.86
ftp 40 ( 0.00%) 3559 ( 0.00%) 88.97
imap 245 ( 0.00%) 28829 ( 0.00%) 117.67
ssh 3234 ( 0.01%) 268524 ( 0.00%) 83.03
dns 128 ( 0.00%) 33068 ( 0.00%) 258.34
bgp 115 ( 0.00%) 20975 ( 0.00%) 182.39
other 1801 ( 0.01%) 193088 ( 0.00%) 107.21
udp6 27754 ( 0.08%) 5291755 ( 0.02%) 190.67
dns 27347 ( 0.08%) 5216913 ( 0.02%) 190.77
other 407 ( 0.00%) 74842 ( 0.00%) 183.89
icmp6 6977 ( 0.02%) 837782 ( 0.00%) 120.08
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 48 ( 0.00%) 41535 ( 0.00%) 865.31
tcpdump file: 201004130015.dump.gz (914.38 MB)