Traffic Trace Info
DumpFile: 201004130445.dump
FileSize: 1878.31MB
Id: 201004130445
StartTime: Tue Apr 13 04:45:00 2010
EndTime: Tue Apr 13 05:00:01 2010
TotalTime: 900.59 seconds
TotalCapSize: 1468.95MB CapLen: 96 bytes
# of packets: 26825169 (17008.82MB)
AvgRate: 158.43Mbps stddev:12.92M
IP flow (unique src/dst pair) Information
# of flows: 1287856 (avg. 20.83 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.5% 1.1% 0.9% 0.8% 0.7% 0.7% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 760934
Top 10 bandwidth usage (bytes/total in %):
21.8% 8.1% 7.3% 6.5% 6.1% 5.4% 3.5% 3.2% 2.9% 2.9%
# of IPv6 addresses: 931
Top 10 bandwidth usage (bytes/total in %):
28.4% 7.7% 7.7% 6.4% 6.3% 4.9% 4.5% 3.8% 3.8% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004130445.pktlen.png)
detailed numbers
[ 32- 63]: 4187704
[ 64- 127]: 7369360
[ 128- 255]: 2081420
[ 256- 511]: 1650918
[ 512- 1023]: 705290
[ 1024- 2047]: 10830477
Protocol Breakdown
![[protocol breakdown chart]](201004130445.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26825169 (100.00%) 17835039348 (100.00%) 664.86
ip 26773438 ( 99.81%) 17827318536 ( 99.96%) 665.86
tcp 15720477 ( 58.60%) 11937463406 ( 66.93%) 759.36
http(s) 7162437 ( 26.70%) 9943881901 ( 55.75%) 1388.34
http(c) 3587996 ( 13.38%) 361508449 ( 2.03%) 100.75
squid 291165 ( 1.09%) 116214956 ( 0.65%) 399.14
smtp 378128 ( 1.41%) 66858330 ( 0.37%) 176.81
ftp 12394 ( 0.05%) 1356753 ( 0.01%) 109.47
pop3 5979 ( 0.02%) 3965715 ( 0.02%) 663.27
imap 1031 ( 0.00%) 376975 ( 0.00%) 365.64
telnet 1477 ( 0.01%) 114022 ( 0.00%) 77.20
ssh 1163008 ( 4.34%) 156184247 ( 0.88%) 134.29
dns 58755 ( 0.22%) 4006868 ( 0.02%) 68.20
bgp 135 ( 0.00%) 43977 ( 0.00%) 325.76
realaud 14 ( 0.00%) 1633 ( 0.00%) 116.64
rtsp 19175 ( 0.07%) 15151025 ( 0.08%) 790.14
icecast 820 ( 0.00%) 223703 ( 0.00%) 272.81
other 3037958 ( 11.33%) 1267574552 ( 7.11%) 417.25
udp 7549812 ( 28.14%) 4283459142 ( 24.02%) 567.36
dns 773008 ( 2.88%) 141772092 ( 0.79%) 183.40
realaud 67 ( 0.00%) 7267 ( 0.00%) 108.46
halflif 139 ( 0.00%) 15723 ( 0.00%) 113.12
starcra 341 ( 0.00%) 42445 ( 0.00%) 124.47
everque 369 ( 0.00%) 67501 ( 0.00%) 182.93
unreal 66 ( 0.00%) 8040 ( 0.00%) 121.82
quake 30 ( 0.00%) 2854 ( 0.00%) 95.13
cuseeme 5 ( 0.00%) 732 ( 0.00%) 146.40
other 6775447 ( 25.26%) 4141366705 ( 23.22%) 611.23
icmp 782410 ( 2.92%) 121598622 ( 0.68%) 155.42
ipip 325 ( 0.00%) 39790 ( 0.00%) 122.43
ipsec 4526 ( 0.02%) 1866040 ( 0.01%) 412.29
ip6 2684385 ( 10.01%) 1452946150 ( 8.15%) 541.26
other 31503 ( 0.12%) 29945386 ( 0.17%) 950.56
frag 2084 ( 0.01%) 2162659 ( 0.01%) 1037.74
ip6 51731 ( 0.19%) 7720812 ( 0.04%) 149.25
tcp6 18618 ( 0.07%) 1889026 ( 0.01%) 101.46
http(s) 18 ( 0.00%) 7366 ( 0.00%) 409.22
http(c) 8052 ( 0.03%) 720522 ( 0.00%) 89.48
smtp 531 ( 0.00%) 175200 ( 0.00%) 329.94
ftp 2707 ( 0.01%) 292204 ( 0.00%) 107.94
imap 85 ( 0.00%) 11259 ( 0.00%) 132.46
ssh 3251 ( 0.01%) 269910 ( 0.00%) 83.02
dns 34 ( 0.00%) 9708 ( 0.00%) 285.53
bgp 102 ( 0.00%) 12784 ( 0.00%) 125.33
other 3838 ( 0.01%) 390073 ( 0.00%) 101.63
udp6 25886 ( 0.10%) 4897603 ( 0.03%) 189.20
dns 25355 ( 0.09%) 4808161 ( 0.03%) 189.63
other 531 ( 0.00%) 89442 ( 0.00%) 168.44
icmp6 7125 ( 0.03%) 863139 ( 0.00%) 121.14
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 72 ( 0.00%) 66964 ( 0.00%) 930.06
tcpdump file: 201004130445.dump.gz (702.95 MB)