Traffic Trace Info
DumpFile: 201004130145.dump
FileSize: 2655.77MB
Id: 201004130145
StartTime: Tue Apr 13 01:45:01 2010
EndTime: Tue Apr 13 02:00:01 2010
TotalTime: 900.65 seconds
TotalCapSize: -2014.66MB CapLen: 96 bytes
# of packets: 37643395 (24463.01MB)
AvgRate: 227.85Mbps stddev:18.05M
IP flow (unique src/dst pair) Information
# of flows: 1268930 (avg. 29.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.9% 4.0% 3.8% 1.5% 0.9% 0.7% 0.7% 0.6% 0.5% 0.4%
IP address Information
# of IPv4 addresses: 665235
Top 10 bandwidth usage (bytes/total in %):
16.3% 13.2% 10.9% 9.0% 8.4% 7.1% 4.9% 4.2% 3.9% 2.5%
# of IPv6 addresses: 972
Top 10 bandwidth usage (bytes/total in %):
27.1% 9.2% 8.1% 7.3% 4.6% 3.7% 3.5% 3.4% 2.9% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004130145.pktlen.png)
detailed numbers
[ 32- 63]: 5838829
[ 64- 127]: 11265242
[ 128- 255]: 2450571
[ 256- 511]: 1664279
[ 512- 1023]: 676619
[ 1024- 2047]: 15747855
Protocol Breakdown
![[protocol breakdown chart]](201004130145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37643395 (100.00%) 25651324853 (100.00%) 681.43
ip 37593083 ( 99.87%) 25643216745 ( 99.97%) 682.13
tcp 25732777 ( 68.36%) 20035605417 ( 78.11%) 778.60
http(s) 12147653 ( 32.27%) 17301233940 ( 67.45%) 1424.24
http(c) 7378660 ( 19.60%) 656938705 ( 2.56%) 89.03
squid 310473 ( 0.82%) 97234558 ( 0.38%) 313.18
smtp 657772 ( 1.75%) 147726882 ( 0.58%) 224.59
ftp 44694 ( 0.12%) 4003302 ( 0.02%) 89.57
pop3 9706 ( 0.03%) 5523426 ( 0.02%) 569.07
imap 2037 ( 0.01%) 842266 ( 0.00%) 413.48
telnet 338 ( 0.00%) 41530 ( 0.00%) 122.87
ssh 1541479 ( 4.09%) 195743986 ( 0.76%) 126.98
dns 97015 ( 0.26%) 6406213 ( 0.02%) 66.03
bgp 142 ( 0.00%) 45532 ( 0.00%) 320.65
napster 69 ( 0.00%) 5157 ( 0.00%) 74.74
realaud 23 ( 0.00%) 2239 ( 0.00%) 97.35
rtsp 55 ( 0.00%) 3990 ( 0.00%) 72.55
icecast 897 ( 0.00%) 91135 ( 0.00%) 101.60
hotline 4 ( 0.00%) 256 ( 0.00%) 64.00
other 3541758 ( 9.41%) 1619762180 ( 6.31%) 457.33
udp 8369081 ( 22.23%) 4184285631 ( 16.31%) 499.97
dns 814996 ( 2.17%) 143097760 ( 0.56%) 175.58
realaud 42 ( 0.00%) 4533 ( 0.00%) 107.93
halflif 180 ( 0.00%) 18891 ( 0.00%) 104.95
starcra 300 ( 0.00%) 35395 ( 0.00%) 117.98
everque 7296 ( 0.02%) 603844 ( 0.00%) 82.76
unreal 67 ( 0.00%) 7527 ( 0.00%) 112.34
quake 53 ( 0.00%) 5477 ( 0.00%) 103.34
cuseeme 8 ( 0.00%) 1381 ( 0.00%) 172.62
other 7545758 ( 20.05%) 4040321111 ( 15.75%) 535.44
icmp 845883 ( 2.25%) 126590378 ( 0.49%) 149.65
ipip 330 ( 0.00%) 38979 ( 0.00%) 118.12
ipsec 2349 ( 0.01%) 937190 ( 0.00%) 398.97
ip6 2462319 ( 6.54%) 1277113530 ( 4.98%) 518.66
other 180344 ( 0.48%) 18645620 ( 0.07%) 103.39
frag 2323 ( 0.01%) 2419294 ( 0.01%) 1041.45
ip6 50312 ( 0.13%) 8108108 ( 0.03%) 161.16
tcp6 13951 ( 0.04%) 1585049 ( 0.01%) 113.62
http(s) 85 ( 0.00%) 80079 ( 0.00%) 942.11
http(c) 7711 ( 0.02%) 744597 ( 0.00%) 96.56
smtp 365 ( 0.00%) 150309 ( 0.00%) 411.81
imap 202 ( 0.00%) 23919 ( 0.00%) 118.41
ssh 3249 ( 0.01%) 269746 ( 0.00%) 83.02
dns 226 ( 0.00%) 71243 ( 0.00%) 315.23
bgp 105 ( 0.00%) 13321 ( 0.00%) 126.87
other 2008 ( 0.01%) 231835 ( 0.00%) 115.46
udp6 29183 ( 0.08%) 5562942 ( 0.02%) 190.62
dns 28767 ( 0.08%) 5484161 ( 0.02%) 190.64
other 416 ( 0.00%) 78781 ( 0.00%) 189.38
icmp6 7046 ( 0.02%) 859062 ( 0.00%) 121.92
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 102 ( 0.00%) 96975 ( 0.00%) 950.74
tcpdump file: 201004130145.dump.gz (992.97 MB)