Traffic Trace Info
DumpFile: 201004130030.dump
FileSize: 2343.92MB
Id: 201004130030
StartTime: Tue Apr 13 00:30:01 2010
EndTime: Tue Apr 13 00:45:00 2010
TotalTime: 899.57 seconds
TotalCapSize: 1831.34MB CapLen: 96 bytes
# of packets: 33587973 (21998.16MB)
AvgRate: 205.13Mbps stddev:17.07M
IP flow (unique src/dst pair) Information
# of flows: 1176762 (avg. 28.54 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.1% 1.1% 0.9% 0.9% 0.6% 0.6% 0.6% 0.6% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 634627
Top 10 bandwidth usage (bytes/total in %):
12.4% 11.5% 9.9% 9.4% 6.3% 2.9% 2.8% 2.4% 2.1% 2.0%
# of IPv6 addresses: 984
Top 10 bandwidth usage (bytes/total in %):
27.3% 7.8% 7.4% 7.2% 6.9% 5.4% 4.8% 3.3% 3.1% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004130030.pktlen.png)
detailed numbers
[ 32- 63]: 5910851
[ 64- 127]: 8965054
[ 128- 255]: 2341107
[ 256- 511]: 1529866
[ 512- 1023]: 680875
[ 1024- 2047]: 14160220
Protocol Breakdown
![[protocol breakdown chart]](201004130030.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33587973 (100.00%) 23066742382 (100.00%) 686.76
ip 33540082 ( 99.86%) 23058734108 ( 99.97%) 687.50
tcp 21727332 ( 64.69%) 17650549307 ( 76.52%) 812.37
http(s) 10858954 ( 32.33%) 15250504694 ( 66.11%) 1404.42
http(c) 6019787 ( 17.92%) 579258008 ( 2.51%) 96.23
squid 336644 ( 1.00%) 129892255 ( 0.56%) 385.84
smtp 329611 ( 0.98%) 80583281 ( 0.35%) 244.48
ftp 65895 ( 0.20%) 5989658 ( 0.03%) 90.90
pop3 11673 ( 0.03%) 8126949 ( 0.04%) 696.22
imap 2353 ( 0.01%) 971776 ( 0.00%) 412.99
telnet 4449 ( 0.01%) 3424996 ( 0.01%) 769.84
ssh 1024378 ( 3.05%) 257193872 ( 1.11%) 251.07
dns 55704 ( 0.17%) 3788932 ( 0.02%) 68.02
bgp 133 ( 0.00%) 40726 ( 0.00%) 306.21
napster 40 ( 0.00%) 7978 ( 0.00%) 199.45
realaud 46 ( 0.00%) 3905 ( 0.00%) 84.89
rtsp 63 ( 0.00%) 4498 ( 0.00%) 71.40
icecast 1889 ( 0.01%) 204691 ( 0.00%) 108.36
other 3015712 ( 8.98%) 1330553028 ( 5.77%) 441.21
udp 7961604 ( 23.70%) 3764663096 ( 16.32%) 472.85
dns 737961 ( 2.20%) 127654496 ( 0.55%) 172.98
realaud 27 ( 0.00%) 3931 ( 0.00%) 145.59
halflif 114 ( 0.00%) 14336 ( 0.00%) 125.75
starcra 341 ( 0.00%) 39458 ( 0.00%) 115.71
everque 447 ( 0.00%) 83410 ( 0.00%) 186.60
unreal 80 ( 0.00%) 9965 ( 0.00%) 124.56
quake 88 ( 0.00%) 8032 ( 0.00%) 91.27
cuseeme 2 ( 0.00%) 195 ( 0.00%) 97.50
other 7222225 ( 21.50%) 3636689150 ( 15.77%) 503.54
icmp 867264 ( 2.58%) 129661544 ( 0.56%) 149.51
ipip 369 ( 0.00%) 44296 ( 0.00%) 120.04
ipsec 1526 ( 0.00%) 444100 ( 0.00%) 291.02
ip6 2821291 ( 8.40%) 1456913575 ( 6.32%) 516.40
other 160696 ( 0.48%) 56458190 ( 0.24%) 351.34
frag 2567 ( 0.01%) 2734331 ( 0.01%) 1065.19
ip6 47891 ( 0.14%) 8008274 ( 0.03%) 167.22
tcp6 12696 ( 0.04%) 1725869 ( 0.01%) 135.94
http(s) 43 ( 0.00%) 19645 ( 0.00%) 456.86
http(c) 5737 ( 0.02%) 512301 ( 0.00%) 89.30
smtp 283 ( 0.00%) 112956 ( 0.00%) 399.14
imap 379 ( 0.00%) 45778 ( 0.00%) 120.79
ssh 3216 ( 0.01%) 266684 ( 0.00%) 82.92
dns 112 ( 0.00%) 30353 ( 0.00%) 271.01
bgp 107 ( 0.00%) 13116 ( 0.00%) 122.58
other 2819 ( 0.01%) 725036 ( 0.00%) 257.20
udp6 27909 ( 0.08%) 5312764 ( 0.02%) 190.36
dns 27486 ( 0.08%) 5231742 ( 0.02%) 190.34
halflif 1 ( 0.00%) 111 ( 0.00%) 111.00
other 422 ( 0.00%) 80911 ( 0.00%) 191.73
icmp6 7149 ( 0.02%) 868699 ( 0.00%) 121.51
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 106 ( 0.00%) 96726 ( 0.00%) 912.51
tcpdump file: 201004130030.dump.gz (880.00 MB)