Traffic Trace Info
DumpFile: 201004130545.dump
FileSize: 1855.95MB
Id: 201004130545
StartTime: Tue Apr 13 05:45:00 2010
EndTime: Tue Apr 13 06:00:01 2010
TotalTime: 900.38 seconds
TotalCapSize: 1451.39MB CapLen: 96 bytes
# of packets: 26511374 (16416.60MB)
AvgRate: 152.95Mbps stddev:12.00M
IP flow (unique src/dst pair) Information
# of flows: 1085461 (avg. 24.42 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 1.2% 1.1% 0.8% 0.7% 0.7% 0.7% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 641030
Top 10 bandwidth usage (bytes/total in %):
23.1% 8.6% 7.7% 5.9% 5.9% 5.4% 4.0% 3.3% 3.2% 2.4%
# of IPv6 addresses: 876
Top 10 bandwidth usage (bytes/total in %):
28.8% 7.8% 7.1% 6.4% 6.3% 6.2% 4.7% 3.4% 3.3% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004130545.pktlen.png)
detailed numbers
[ 32- 63]: 3854571
[ 64- 127]: 7566172
[ 128- 255]: 2252878
[ 256- 511]: 1793926
[ 512- 1023]: 667466
[ 1024- 2047]: 10376361
Protocol Breakdown
![[protocol breakdown chart]](201004130545.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26511374 (100.00%) 17214051962 (100.00%) 649.31
ip 26461334 ( 99.81%) 17206439405 ( 99.96%) 650.25
tcp 14962310 ( 56.44%) 11095368757 ( 64.46%) 741.55
http(s) 6664603 ( 25.14%) 9224389904 ( 53.59%) 1384.09
http(c) 3424060 ( 12.92%) 338136653 ( 1.96%) 98.75
squid 299912 ( 1.13%) 105879696 ( 0.62%) 353.04
smtp 403188 ( 1.52%) 116650498 ( 0.68%) 289.32
ftp 9691 ( 0.04%) 944622 ( 0.01%) 97.47
pop3 5619 ( 0.02%) 3468357 ( 0.02%) 617.26
imap 1604 ( 0.01%) 699189 ( 0.00%) 435.90
telnet 2282 ( 0.01%) 165464 ( 0.00%) 72.51
ssh 1402451 ( 5.29%) 170386069 ( 0.99%) 121.49
dns 58595 ( 0.22%) 6625362 ( 0.04%) 113.07
bgp 142 ( 0.00%) 49153 ( 0.00%) 346.15
napster 19 ( 0.00%) 1629 ( 0.00%) 85.74
realaud 10 ( 0.00%) 1024 ( 0.00%) 102.40
rtsp 57 ( 0.00%) 4110 ( 0.00%) 72.11
icecast 312 ( 0.00%) 19453 ( 0.00%) 62.35
other 2689764 ( 10.15%) 1127947514 ( 6.55%) 419.35
udp 7767068 ( 29.30%) 4292714978 ( 24.94%) 552.68
dns 623694 ( 2.35%) 110010913 ( 0.64%) 176.39
realaud 57 ( 0.00%) 5788 ( 0.00%) 101.54
halflif 138 ( 0.00%) 16890 ( 0.00%) 122.39
starcra 328 ( 0.00%) 39893 ( 0.00%) 121.62
everque 328 ( 0.00%) 64695 ( 0.00%) 197.24
unreal 85 ( 0.00%) 10243 ( 0.00%) 120.51
quake 13 ( 0.00%) 1304 ( 0.00%) 100.31
cuseeme 5 ( 0.00%) 499 ( 0.00%) 99.80
other 7142095 ( 26.94%) 4182403050 ( 24.30%) 585.60
icmp 853087 ( 3.22%) 126980145 ( 0.74%) 148.85
ipip 319 ( 0.00%) 37486 ( 0.00%) 117.51
ipsec 5411 ( 0.02%) 2676962 ( 0.02%) 494.73
ip6 2719402 ( 10.26%) 1489513743 ( 8.65%) 547.74
other 153737 ( 0.58%) 199147334 ( 1.16%) 1295.38
frag 2041 ( 0.01%) 2117101 ( 0.01%) 1037.29
ip6 50040 ( 0.19%) 7612557 ( 0.04%) 152.13
tcp6 17229 ( 0.06%) 1821417 ( 0.01%) 105.72
http(s) 28 ( 0.00%) 15908 ( 0.00%) 568.14
http(c) 6403 ( 0.02%) 558058 ( 0.00%) 87.16
smtp 284 ( 0.00%) 101432 ( 0.00%) 357.15
ftp 2476 ( 0.01%) 249963 ( 0.00%) 100.95
imap 159 ( 0.00%) 18835 ( 0.00%) 118.46
ssh 3251 ( 0.01%) 269926 ( 0.00%) 83.03
dns 87 ( 0.00%) 30317 ( 0.00%) 348.47
bgp 116 ( 0.00%) 15432 ( 0.00%) 133.03
other 4425 ( 0.02%) 561546 ( 0.00%) 126.90
udp6 26097 ( 0.10%) 4955754 ( 0.03%) 189.90
dns 25405 ( 0.10%) 4782250 ( 0.03%) 188.24
other 692 ( 0.00%) 173504 ( 0.00%) 250.73
icmp6 6656 ( 0.03%) 804770 ( 0.00%) 120.91
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 28 ( 0.00%) 26536 ( 0.00%) 947.71
tcpdump file: 201004130545.dump.gz (692.80 MB)