Traffic Trace Info
DumpFile: 201004130045.dump
FileSize: 2442.66MB
Id: 201004130045
StartTime: Tue Apr 13 00:45:00 2010
EndTime: Tue Apr 13 01:00:01 2010
TotalTime: 900.70 seconds
TotalCapSize: 1909.35MB CapLen: 96 bytes
# of packets: 34949704 (23062.14MB)
AvgRate: 214.81Mbps stddev:19.91M
IP flow (unique src/dst pair) Information
# of flows: 1201515 (avg. 29.09 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 0.9% 0.8% 0.8% 0.7% 0.7% 0.7% 0.6% 0.6% 0.5%
IP address Information
# of IPv4 addresses: 644997
Top 10 bandwidth usage (bytes/total in %):
12.3% 11.6% 9.3% 8.9% 6.9% 2.9% 2.7% 2.6% 2.5% 2.1%
# of IPv6 addresses: 981
Top 10 bandwidth usage (bytes/total in %):
26.9% 9.6% 7.3% 7.2% 5.6% 5.5% 5.0% 3.7% 3.4% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004130045.pktlen.png)
detailed numbers
[ 32- 63]: 6246505
[ 64- 127]: 9163409
[ 128- 255]: 2436497
[ 256- 511]: 1511455
[ 512- 1023]: 674072
[ 1024- 2047]: 14917766
Protocol Breakdown
![[protocol breakdown chart]](201004130045.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34949704 (100.00%) 24182406314 (100.00%) 691.92
ip 34901443 ( 99.86%) 24174253424 ( 99.97%) 692.64
tcp 22848828 ( 65.38%) 18405335448 ( 76.11%) 805.53
http(s) 11233145 ( 32.14%) 15838062947 ( 65.49%) 1409.94
http(c) 6346005 ( 18.16%) 592940513 ( 2.45%) 93.44
squid 322927 ( 0.92%) 114163709 ( 0.47%) 353.53
smtp 345414 ( 0.99%) 61855059 ( 0.26%) 179.08
ftp 66491 ( 0.19%) 5904028 ( 0.02%) 88.79
pop3 9689 ( 0.03%) 6474296 ( 0.03%) 668.21
imap 3443 ( 0.01%) 2318713 ( 0.01%) 673.46
telnet 1033 ( 0.00%) 86466 ( 0.00%) 83.70
ssh 1007570 ( 2.88%) 111251426 ( 0.46%) 110.42
dns 60351 ( 0.17%) 6582861 ( 0.03%) 109.08
bgp 162 ( 0.00%) 70627 ( 0.00%) 435.97
napster 246 ( 0.00%) 27558 ( 0.00%) 112.02
realaud 30 ( 0.00%) 12587 ( 0.00%) 419.57
rtsp 56 ( 0.00%) 4060 ( 0.00%) 72.50
icecast 2215 ( 0.01%) 268806 ( 0.00%) 121.36
hotline 9 ( 0.00%) 787 ( 0.00%) 87.44
other 3450033 ( 9.87%) 1665310465 ( 6.89%) 482.69
udp 8108347 ( 23.20%) 3934212468 ( 16.27%) 485.21
dns 725014 ( 2.07%) 123335051 ( 0.51%) 170.11
rip 1 ( 0.00%) 145 ( 0.00%) 145.00
realaud 34 ( 0.00%) 5152 ( 0.00%) 151.53
halflif 132 ( 0.00%) 14439 ( 0.00%) 109.39
starcra 318 ( 0.00%) 37762 ( 0.00%) 118.75
everque 514 ( 0.00%) 79469 ( 0.00%) 154.61
unreal 43 ( 0.00%) 5915 ( 0.00%) 137.56
quake 62 ( 0.00%) 6329 ( 0.00%) 102.08
cuseeme 10 ( 0.00%) 1285 ( 0.00%) 128.50
other 7381963 ( 21.12%) 3810579274 ( 15.76%) 516.20
icmp 861691 ( 2.47%) 132068638 ( 0.55%) 153.27
ipip 301 ( 0.00%) 35334 ( 0.00%) 117.39
ipsec 1332 ( 0.00%) 357480 ( 0.00%) 268.38
ip6 2945773 ( 8.43%) 1670992648 ( 6.91%) 567.25
other 135171 ( 0.39%) 31251408 ( 0.13%) 231.20
frag 1703 ( 0.00%) 1743648 ( 0.01%) 1023.87
ip6 48261 ( 0.14%) 8152890 ( 0.03%) 168.93
tcp6 13064 ( 0.04%) 1877334 ( 0.01%) 143.70
http(s) 448 ( 0.00%) 491462 ( 0.00%) 1097.01
http(c) 6288 ( 0.02%) 626275 ( 0.00%) 99.60
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 301 ( 0.00%) 118720 ( 0.00%) 394.42
imap 240 ( 0.00%) 28337 ( 0.00%) 118.07
ssh 3234 ( 0.01%) 268520 ( 0.00%) 83.03
dns 123 ( 0.00%) 44028 ( 0.00%) 357.95
bgp 126 ( 0.00%) 20112 ( 0.00%) 159.62
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 2301 ( 0.01%) 279658 ( 0.00%) 121.54
udp6 28005 ( 0.08%) 5361223 ( 0.02%) 191.44
dns 27585 ( 0.08%) 5282529 ( 0.02%) 191.50
other 420 ( 0.00%) 78694 ( 0.00%) 187.37
icmp6 7089 ( 0.02%) 848484 ( 0.00%) 119.69
pim6 29 ( 0.00%) 3944 ( 0.00%) 136.00
other6 74 ( 0.00%) 61905 ( 0.00%) 836.55
tcpdump file: 201004130045.dump.gz (907.95 MB)