Traffic Trace Info
DumpFile: 201004130215.dump
FileSize: 2470.84MB
Id: 201004130215
StartTime: Tue Apr 13 02:15:01 2010
EndTime: Tue Apr 13 02:30:01 2010
TotalTime: 900.40 seconds
TotalCapSize: 1934.85MB CapLen: 96 bytes
# of packets: 35123755 (22610.15MB)
AvgRate: 210.64Mbps stddev:21.25M
IP flow (unique src/dst pair) Information
# of flows: 1217231 (avg. 28.86 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 2.5% 2.4% 2.4% 2.0% 1.4% 0.9% 0.9% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 668307
Top 10 bandwidth usage (bytes/total in %):
15.8% 9.6% 8.7% 8.0% 7.7% 5.4% 4.7% 3.6% 3.4% 2.6%
# of IPv6 addresses: 965
Top 10 bandwidth usage (bytes/total in %):
28.1% 7.6% 7.5% 7.2% 4.8% 3.6% 3.5% 3.0% 3.0% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004130215.pktlen.png)
detailed numbers
[ 32- 63]: 5605454
[ 64- 127]: 10064070
[ 128- 255]: 2743779
[ 256- 511]: 1506444
[ 512- 1023]: 739386
[ 1024- 2047]: 14464622
Protocol Breakdown
![[protocol breakdown chart]](201004130215.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35123755 (100.00%) 23708463773 (100.00%) 675.00
ip 35075964 ( 99.86%) 23700665359 ( 99.97%) 675.70
tcp 23431906 ( 66.71%) 18072250980 ( 76.23%) 771.27
http(s) 10673319 ( 30.39%) 15033098626 ( 63.41%) 1408.47
http(c) 6212848 ( 17.69%) 552922849 ( 2.33%) 89.00
squid 285234 ( 0.81%) 89635609 ( 0.38%) 314.25
smtp 472684 ( 1.35%) 100715636 ( 0.42%) 213.07
ftp 24250 ( 0.07%) 2258990 ( 0.01%) 93.15
pop3 10409 ( 0.03%) 8064508 ( 0.03%) 774.76
imap 1322 ( 0.00%) 369572 ( 0.00%) 279.56
telnet 1685 ( 0.00%) 128065 ( 0.00%) 76.00
ssh 1778006 ( 5.06%) 223667409 ( 0.94%) 125.80
dns 56402 ( 0.16%) 3865112 ( 0.02%) 68.53
bgp 167 ( 0.00%) 65609 ( 0.00%) 392.87
napster 68 ( 0.00%) 5110 ( 0.00%) 75.15
realaud 36 ( 0.00%) 3109 ( 0.00%) 86.36
rtsp 61 ( 0.00%) 4374 ( 0.00%) 71.70
icecast 381 ( 0.00%) 29347 ( 0.00%) 77.03
hotline 5 ( 0.00%) 763 ( 0.00%) 152.60
other 3915025 ( 11.15%) 2057416052 ( 8.68%) 525.52
udp 7909717 ( 22.52%) 4134304705 ( 17.44%) 522.69
dns 767180 ( 2.18%) 132968059 ( 0.56%) 173.32
rip 1 ( 0.00%) 109 ( 0.00%) 109.00
realaud 25 ( 0.00%) 3228 ( 0.00%) 129.12
halflif 140 ( 0.00%) 18142 ( 0.00%) 129.59
starcra 370 ( 0.00%) 46606 ( 0.00%) 125.96
everque 4371 ( 0.01%) 643963 ( 0.00%) 147.33
unreal 58 ( 0.00%) 7910 ( 0.00%) 136.38
quake 31 ( 0.00%) 4752 ( 0.00%) 153.29
other 7137256 ( 20.32%) 4000430218 ( 16.87%) 560.50
icmp 983793 ( 2.80%) 139601436 ( 0.59%) 141.90
ipip 325 ( 0.00%) 39266 ( 0.00%) 120.82
ipsec 2777 ( 0.01%) 1248106 ( 0.01%) 449.44
ip6 2514053 ( 7.16%) 1303946731 ( 5.50%) 518.66
other 233393 ( 0.66%) 49274135 ( 0.21%) 211.12
frag 1680 ( 0.00%) 1756277 ( 0.01%) 1045.40
ip6 47791 ( 0.14%) 7798414 ( 0.03%) 163.18
tcp6 12197 ( 0.03%) 1326473 ( 0.01%) 108.75
http(s) 48 ( 0.00%) 27084 ( 0.00%) 564.25
http(c) 6052 ( 0.02%) 591628 ( 0.00%) 97.76
smtp 420 ( 0.00%) 146657 ( 0.00%) 349.18
imap 68 ( 0.00%) 9087 ( 0.00%) 133.63
ssh 3233 ( 0.01%) 268482 ( 0.00%) 83.04
dns 119 ( 0.00%) 30687 ( 0.00%) 257.87
bgp 111 ( 0.00%) 14196 ( 0.00%) 127.89
other 2146 ( 0.01%) 238652 ( 0.00%) 111.21
udp6 28541 ( 0.08%) 5563603 ( 0.02%) 194.93
dns 28075 ( 0.08%) 5478244 ( 0.02%) 195.13
halflif 2 ( 0.00%) 229 ( 0.00%) 114.50
unreal 1 ( 0.00%) 113 ( 0.00%) 113.00
other 463 ( 0.00%) 85017 ( 0.00%) 183.62
icmp6 6955 ( 0.02%) 845126 ( 0.00%) 121.51
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 68 ( 0.00%) 59132 ( 0.00%) 869.59
tcpdump file: 201004130215.dump.gz (920.55 MB)