Traffic Trace Info
DumpFile: 201004130130.dump
FileSize: 2311.63MB
Id: 201004130130
StartTime: Tue Apr 13 01:30:00 2010
EndTime: Tue Apr 13 01:45:01 2010
TotalTime: 900.40 seconds
TotalCapSize: 1807.10MB CapLen: 96 bytes
# of packets: 33061767 (20649.90MB)
AvgRate: 192.38Mbps stddev:18.81M
IP flow (unique src/dst pair) Information
# of flows: 1339905 (avg. 24.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 1.2% 1.1% 1.0% 0.6% 0.6% 0.6% 0.6% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 706268
Top 10 bandwidth usage (bytes/total in %):
15.4% 11.6% 10.4% 9.4% 6.1% 3.7% 2.9% 2.6% 2.2% 2.1%
# of IPv6 addresses: 980
Top 10 bandwidth usage (bytes/total in %):
28.4% 7.9% 7.7% 6.6% 4.7% 4.5% 3.9% 3.2% 3.1% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004130130.pktlen.png)
detailed numbers
[ 32- 63]: 5558815
[ 64- 127]: 9649294
[ 128- 255]: 2435219
[ 256- 511]: 1588216
[ 512- 1023]: 644551
[ 1024- 2047]: 13185672
Protocol Breakdown
![[protocol breakdown chart]](201004130130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33061767 (100.00%) 21652994080 (100.00%) 654.93
ip 33013856 ( 99.86%) 21645304431 ( 99.96%) 655.64
tcp 21269194 ( 64.33%) 16014937187 ( 73.96%) 752.96
http(s) 9575226 ( 28.96%) 13381482857 ( 61.80%) 1397.51
http(c) 5461173 ( 16.52%) 526532686 ( 2.43%) 96.41
squid 338556 ( 1.02%) 121276815 ( 0.56%) 358.22
smtp 632853 ( 1.91%) 208828919 ( 0.96%) 329.98
ftp 78726 ( 0.24%) 6737655 ( 0.03%) 85.58
pop3 8820 ( 0.03%) 5961527 ( 0.03%) 675.91
imap 1880 ( 0.01%) 818802 ( 0.00%) 435.53
telnet 342 ( 0.00%) 58445 ( 0.00%) 170.89
ssh 1637472 ( 4.95%) 206100738 ( 0.95%) 125.87
dns 58202 ( 0.18%) 3975979 ( 0.02%) 68.31
bgp 153 ( 0.00%) 54271 ( 0.00%) 354.71
napster 187 ( 0.00%) 60454 ( 0.00%) 323.28
realaud 34 ( 0.00%) 3277 ( 0.00%) 96.38
rtsp 220 ( 0.00%) 43966 ( 0.00%) 199.85
icecast 1733 ( 0.01%) 196369 ( 0.00%) 113.31
hotline 4 ( 0.00%) 252 ( 0.00%) 63.00
other 3473608 ( 10.51%) 1552803875 ( 7.17%) 447.03
udp 8112524 ( 24.54%) 4111061021 ( 18.99%) 506.75
dns 793128 ( 2.40%) 135592745 ( 0.63%) 170.96
realaud 1397 ( 0.00%) 85362 ( 0.00%) 61.10
halflif 163 ( 0.00%) 17833 ( 0.00%) 109.40
starcra 326 ( 0.00%) 40408 ( 0.00%) 123.95
everque 7797 ( 0.02%) 2357773 ( 0.01%) 302.39
unreal 53 ( 0.00%) 6156 ( 0.00%) 116.15
quake 45 ( 0.00%) 5333 ( 0.00%) 118.51
cuseeme 4 ( 0.00%) 345 ( 0.00%) 86.25
other 7309350 ( 22.11%) 3972831212 ( 18.35%) 543.53
icmp 889458 ( 2.69%) 130414828 ( 0.60%) 146.62
ipip 354 ( 0.00%) 44272 ( 0.00%) 125.06
ipsec 1450 ( 0.00%) 483400 ( 0.00%) 333.38
ip6 2519842 ( 7.62%) 1343963517 ( 6.21%) 533.35
other 221034 ( 0.67%) 44400206 ( 0.21%) 200.88
frag 1524 ( 0.00%) 1529292 ( 0.01%) 1003.47
ip6 47911 ( 0.14%) 7689649 ( 0.04%) 160.50
tcp6 11637 ( 0.04%) 1268508 ( 0.01%) 109.01
http(s) 52 ( 0.00%) 20596 ( 0.00%) 396.08
http(c) 5423 ( 0.02%) 489587 ( 0.00%) 90.28
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 328 ( 0.00%) 132559 ( 0.00%) 404.14
imap 334 ( 0.00%) 40373 ( 0.00%) 120.88
ssh 3217 ( 0.01%) 266750 ( 0.00%) 82.92
dns 58 ( 0.00%) 20607 ( 0.00%) 355.29
bgp 117 ( 0.00%) 15337 ( 0.00%) 131.09
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 2105 ( 0.01%) 282477 ( 0.00%) 134.19
udp6 29331 ( 0.09%) 5552573 ( 0.03%) 189.31
dns 28879 ( 0.09%) 5466371 ( 0.03%) 189.29
other 452 ( 0.00%) 86202 ( 0.00%) 190.71
icmp6 6876 ( 0.02%) 833562 ( 0.00%) 121.23
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 36 ( 0.00%) 30790 ( 0.00%) 855.28
tcpdump file: 201004130130.dump.gz (878.58 MB)