Traffic Trace Info
DumpFile: 201004130100.dump
FileSize: 2335.73MB
Id: 201004130100
StartTime: Tue Apr 13 01:00:01 2010
EndTime: Tue Apr 13 01:15:01 2010
TotalTime: 899.87 seconds
TotalCapSize: 1829.23MB CapLen: 96 bytes
# of packets: 33193276 (21779.39MB)
AvgRate: 203.02Mbps stddev:35.83M
IP flow (unique src/dst pair) Information
# of flows: 1234118 (avg. 26.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.5% 1.5% 1.2% 1.0% 1.0% 0.9% 0.5% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 696412
Top 10 bandwidth usage (bytes/total in %):
13.3% 10.4% 9.1% 8.6% 8.3% 6.3% 4.0% 2.6% 2.6% 2.6%
# of IPv6 addresses: 973
Top 10 bandwidth usage (bytes/total in %):
51.2% 51.2% 12.3% 4.2% 3.6% 3.5% 3.3% 3.3% 2.5% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004130100.pktlen.png)
detailed numbers
[ 32- 63]: 5254024
[ 64- 127]: 9434631
[ 128- 255]: 2343630
[ 256- 511]: 1445603
[ 512- 1023]: 687307
[ 1024- 2047]: 14028081
Protocol Breakdown
![[protocol breakdown chart]](201004130100.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33193276 (100.00%) 22837350735 (100.00%) 688.01
ip 33129416 ( 99.81%) 22821217474 ( 99.93%) 688.85
tcp 22058033 ( 66.45%) 17383722386 ( 76.12%) 788.09
http(s) 10463269 ( 31.52%) 14770426123 ( 64.68%) 1411.65
http(c) 6124314 ( 18.45%) 561923467 ( 2.46%) 91.75
squid 265209 ( 0.80%) 96550030 ( 0.42%) 364.05
smtp 381408 ( 1.15%) 76862216 ( 0.34%) 201.52
ftp 56276 ( 0.17%) 5042940 ( 0.02%) 89.61
pop3 9811 ( 0.03%) 7316931 ( 0.03%) 745.79
imap 2679 ( 0.01%) 1200571 ( 0.01%) 448.14
telnet 346 ( 0.00%) 58120 ( 0.00%) 167.98
ssh 1302646 ( 3.92%) 157434948 ( 0.69%) 120.86
dns 48622 ( 0.15%) 3429408 ( 0.02%) 70.53
bgp 114 ( 0.00%) 36333 ( 0.00%) 318.71
napster 16 ( 0.00%) 1024 ( 0.00%) 64.00
realaud 43 ( 0.00%) 3748 ( 0.00%) 87.16
rtsp 357 ( 0.00%) 78269 ( 0.00%) 219.24
icecast 1771 ( 0.01%) 219214 ( 0.00%) 123.78
other 3401142 ( 10.25%) 1703136201 ( 7.46%) 500.75
udp 7609431 ( 22.92%) 3848169273 ( 16.85%) 505.71
dns 707959 ( 2.13%) 122060051 ( 0.53%) 172.41
realaud 1561 ( 0.00%) 94880 ( 0.00%) 60.78
halflif 148 ( 0.00%) 17140 ( 0.00%) 115.81
starcra 376 ( 0.00%) 40054 ( 0.00%) 106.53
everque 2737 ( 0.01%) 392826 ( 0.00%) 143.52
unreal 68 ( 0.00%) 9095 ( 0.00%) 133.75
quake 43 ( 0.00%) 3601 ( 0.00%) 83.74
cuseeme 8 ( 0.00%) 1311 ( 0.00%) 163.88
other 6896271 ( 20.78%) 3725418546 ( 16.31%) 540.21
icmp 753515 ( 2.27%) 115335086 ( 0.51%) 153.06
ipip 344 ( 0.00%) 43300 ( 0.00%) 125.87
ipsec 1278 ( 0.00%) 342300 ( 0.00%) 267.84
ip6 2559232 ( 7.71%) 1440090053 ( 6.31%) 562.70
other 147583 ( 0.44%) 33515076 ( 0.15%) 227.09
frag 1532 ( 0.00%) 1571647 ( 0.01%) 1025.88
ip6 63860 ( 0.19%) 16133261 ( 0.07%) 252.63
tcp6 30645 ( 0.09%) 10004370 ( 0.04%) 326.46
http(s) 483 ( 0.00%) 587271 ( 0.00%) 1215.88
http(c) 4227 ( 0.01%) 385166 ( 0.00%) 91.12
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 1414 ( 0.00%) 254020 ( 0.00%) 179.65
imap 294 ( 0.00%) 35520 ( 0.00%) 120.82
ssh 2929 ( 0.01%) 242898 ( 0.00%) 82.93
dns 127 ( 0.00%) 34850 ( 0.00%) 274.41
bgp 94 ( 0.00%) 13589 ( 0.00%) 144.56
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 21074 ( 0.06%) 8450834 ( 0.04%) 401.01
udp6 26758 ( 0.08%) 5309472 ( 0.02%) 198.43
dns 26304 ( 0.08%) 5223944 ( 0.02%) 198.60
other 454 ( 0.00%) 85528 ( 0.00%) 188.39
icmp6 6375 ( 0.02%) 773594 ( 0.00%) 121.35
pim6 29 ( 0.00%) 3944 ( 0.00%) 136.00
other6 53 ( 0.00%) 41881 ( 0.00%) 790.21
tcpdump file: 201004130100.dump.gz (866.79 MB)