Traffic Trace Info
DumpFile: 201004130245.dump
FileSize: 2284.67MB
Id: 201004130245
StartTime: Tue Apr 13 02:45:01 2010
EndTime: Tue Apr 13 03:00:01 2010
TotalTime: 899.52 seconds
TotalCapSize: 1786.94MB CapLen: 96 bytes
# of packets: 32610256 (21392.70MB)
AvgRate: 199.50Mbps stddev:18.72M
IP flow (unique src/dst pair) Information
# of flows: 1194342 (avg. 27.30 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 1.8% 1.8% 1.0% 0.8% 0.7% 0.7% 0.6% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 658898
Top 10 bandwidth usage (bytes/total in %):
15.5% 9.5% 8.7% 7.3% 7.2% 6.6% 5.5% 4.3% 2.9% 2.7%
# of IPv6 addresses: 950
Top 10 bandwidth usage (bytes/total in %):
50.3% 50.3% 14.0% 6.2% 3.8% 3.8% 2.6% 2.2% 1.8% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004130245.pktlen.png)
detailed numbers
[ 32- 63]: 5659285
[ 64- 127]: 8745666
[ 128- 255]: 2227049
[ 256- 511]: 1522554
[ 512- 1023]: 685988
[ 1024- 2047]: 13769714
Protocol Breakdown
![[protocol breakdown chart]](201004130245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32610256 (100.00%) 22431873754 (100.00%) 687.88
ip 32553744 ( 99.83%) 22416257516 ( 99.93%) 688.59
tcp 21773995 ( 66.77%) 17141367095 ( 76.42%) 787.24
http(s) 9107049 ( 27.93%) 12707935581 ( 56.65%) 1395.40
http(c) 5131597 ( 15.74%) 480931452 ( 2.14%) 93.72
squid 277526 ( 0.85%) 89493644 ( 0.40%) 322.47
smtp 545994 ( 1.67%) 159431420 ( 0.71%) 292.00
nntp 2 ( 0.00%) 132 ( 0.00%) 66.00
ftp 19780 ( 0.06%) 2117046 ( 0.01%) 107.03
pop3 7175 ( 0.02%) 3266681 ( 0.01%) 455.29
imap 1431 ( 0.00%) 736197 ( 0.00%) 514.46
telnet 2331 ( 0.01%) 170308 ( 0.00%) 73.06
ssh 1612673 ( 4.95%) 201301203 ( 0.90%) 124.82
dns 57366 ( 0.18%) 3908795 ( 0.02%) 68.14
bgp 152 ( 0.00%) 51591 ( 0.00%) 339.41
napster 24 ( 0.00%) 1496 ( 0.00%) 62.33
realaud 35 ( 0.00%) 3785 ( 0.00%) 108.14
rtsp 90 ( 0.00%) 6252 ( 0.00%) 69.47
icecast 308 ( 0.00%) 23596 ( 0.00%) 76.61
hotline 5 ( 0.00%) 623 ( 0.00%) 124.60
other 5010455 ( 15.36%) 3491987173 ( 15.57%) 696.94
udp 7390504 ( 22.66%) 3845527760 ( 17.14%) 520.33
dns 733602 ( 2.25%) 128380652 ( 0.57%) 175.00
rip 12 ( 0.00%) 934 ( 0.00%) 77.83
realaud 23 ( 0.00%) 3712 ( 0.00%) 161.39
halflif 92 ( 0.00%) 11733 ( 0.00%) 127.53
starcra 410 ( 0.00%) 47320 ( 0.00%) 115.41
everque 580 ( 0.00%) 95433 ( 0.00%) 164.54
unreal 41 ( 0.00%) 5237 ( 0.00%) 127.73
quake 48 ( 0.00%) 4762 ( 0.00%) 99.21
cuseeme 3 ( 0.00%) 287 ( 0.00%) 95.67
other 6655443 ( 20.41%) 3716817442 ( 16.57%) 558.46
icmp 853263 ( 2.62%) 127654065 ( 0.57%) 149.61
ipip 322 ( 0.00%) 39754 ( 0.00%) 123.46
ipsec 9575 ( 0.03%) 4682110 ( 0.02%) 488.99
ip6 2322301 ( 7.12%) 1255651927 ( 5.60%) 540.69
other 203784 ( 0.62%) 41334805 ( 0.18%) 202.84
frag 1756 ( 0.01%) 1910123 ( 0.01%) 1087.77
ip6 56512 ( 0.17%) 15616238 ( 0.07%) 276.33
tcp6 21037 ( 0.06%) 9339607 ( 0.04%) 443.96
http(s) 223 ( 0.00%) 280919 ( 0.00%) 1259.73
http(c) 6421 ( 0.02%) 582246 ( 0.00%) 90.68
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 8879 ( 0.03%) 7935362 ( 0.04%) 893.72
imap 124 ( 0.00%) 16160 ( 0.00%) 130.32
ssh 3232 ( 0.01%) 268328 ( 0.00%) 83.02
dns 164 ( 0.00%) 45375 ( 0.00%) 276.68
bgp 103 ( 0.00%) 12947 ( 0.00%) 125.70
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 1888 ( 0.01%) 198048 ( 0.00%) 104.90
udp6 28133 ( 0.09%) 5289633 ( 0.02%) 188.02
dns 27814 ( 0.09%) 5228533 ( 0.02%) 187.98
other 319 ( 0.00%) 61100 ( 0.00%) 191.54
icmp6 7225 ( 0.02%) 910079 ( 0.00%) 125.96
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 87 ( 0.00%) 72839 ( 0.00%) 837.23
tcpdump file: 201004130245.dump.gz (854.27 MB)