Traffic Trace Info
DumpFile: 201004130615.dump
FileSize: 1840.62MB
Id: 201004130615
StartTime: Tue Apr 13 06:15:00 2010
EndTime: Tue Apr 13 06:30:01 2010
TotalTime: 900.36 seconds
TotalCapSize: 1439.58MB CapLen: 96 bytes
# of packets: 26281255 (16184.03MB)
AvgRate: 150.78Mbps stddev:14.45M
IP flow (unique src/dst pair) Information
# of flows: 990434 (avg. 26.54 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 0.9% 0.8% 0.8% 0.8% 0.7% 0.7% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 562594
Top 10 bandwidth usage (bytes/total in %):
23.6% 10.0% 6.6% 5.6% 5.4% 5.0% 3.3% 2.5% 2.2% 2.1%
# of IPv6 addresses: 870
Top 10 bandwidth usage (bytes/total in %):
31.4% 8.1% 7.3% 7.2% 6.7% 5.6% 4.3% 3.3% 3.3% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004130615.pktlen.png)
detailed numbers
[ 32- 63]: 3878445
[ 64- 127]: 7314433
[ 128- 255]: 2342884
[ 256- 511]: 1875373
[ 512- 1023]: 685307
[ 1024- 2047]: 10184813
Protocol Breakdown
![[protocol breakdown chart]](201004130615.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26281255 (100.00%) 16970181317 (100.00%) 645.71
ip 26235143 ( 99.82%) 16963204905 ( 99.96%) 646.58
tcp 14617691 ( 55.62%) 10806394880 ( 63.68%) 739.27
http(s) 6431389 ( 24.47%) 8907975440 ( 52.49%) 1385.08
http(c) 3447148 ( 13.12%) 340011082 ( 2.00%) 98.64
squid 281257 ( 1.07%) 105138798 ( 0.62%) 373.82
smtp 314279 ( 1.20%) 58471112 ( 0.34%) 186.05
ftp 10387 ( 0.04%) 1103946 ( 0.01%) 106.28
pop3 4772 ( 0.02%) 2183772 ( 0.01%) 457.62
imap 1425 ( 0.01%) 384658 ( 0.00%) 269.94
telnet 7750 ( 0.03%) 5126214 ( 0.03%) 661.45
ssh 1530446 ( 5.82%) 190642069 ( 1.12%) 124.57
dns 53609 ( 0.20%) 3688593 ( 0.02%) 68.81
bgp 148 ( 0.00%) 53582 ( 0.00%) 362.04
napster 105 ( 0.00%) 7881 ( 0.00%) 75.06
realaud 10 ( 0.00%) 1024 ( 0.00%) 102.40
rtsp 105 ( 0.00%) 12537 ( 0.00%) 119.40
icecast 272 ( 0.00%) 17232 ( 0.00%) 63.35
hotline 3 ( 0.00%) 186 ( 0.00%) 62.00
other 2534581 ( 9.64%) 1191576454 ( 7.02%) 470.13
udp 7839346 ( 29.83%) 4326491510 ( 25.49%) 551.89
dns 604700 ( 2.30%) 107127388 ( 0.63%) 177.16
realaud 33 ( 0.00%) 6242 ( 0.00%) 189.15
halflif 113 ( 0.00%) 15477 ( 0.00%) 136.96
starcra 328 ( 0.00%) 44536 ( 0.00%) 135.78
everque 400 ( 0.00%) 75142 ( 0.00%) 187.85
unreal 96 ( 0.00%) 14247 ( 0.00%) 148.41
quake 36 ( 0.00%) 3834 ( 0.00%) 106.50
cuseeme 4 ( 0.00%) 655 ( 0.00%) 163.75
other 7233343 ( 27.52%) 4219056911 ( 24.86%) 583.28
icmp 745856 ( 2.84%) 118322998 ( 0.70%) 158.64
ipip 309 ( 0.00%) 37370 ( 0.00%) 120.94
ipsec 5284 ( 0.02%) 2402844 ( 0.01%) 454.74
ip6 3014695 ( 11.47%) 1707910455 ( 10.06%) 566.53
other 11962 ( 0.05%) 1644848 ( 0.01%) 137.51
frag 1883 ( 0.01%) 1917007 ( 0.01%) 1018.06
ip6 46112 ( 0.18%) 6976412 ( 0.04%) 151.29
tcp6 15783 ( 0.06%) 1685381 ( 0.01%) 106.78
http(s) 45 ( 0.00%) 20167 ( 0.00%) 448.16
http(c) 4798 ( 0.02%) 433975 ( 0.00%) 90.45
smtp 385 ( 0.00%) 197934 ( 0.00%) 514.11
ftp 2734 ( 0.01%) 271505 ( 0.00%) 99.31
imap 152 ( 0.00%) 18090 ( 0.00%) 119.01
ssh 3036 ( 0.01%) 252132 ( 0.00%) 83.05
dns 70 ( 0.00%) 19467 ( 0.00%) 278.10
bgp 112 ( 0.00%) 15218 ( 0.00%) 135.88
other 4451 ( 0.02%) 456893 ( 0.00%) 102.65
udp6 24538 ( 0.09%) 4579662 ( 0.03%) 186.64
dns 24136 ( 0.09%) 4503421 ( 0.03%) 186.59
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
other 401 ( 0.00%) 76135 ( 0.00%) 189.86
icmp6 5740 ( 0.02%) 691116 ( 0.00%) 120.40
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 21 ( 0.00%) 16173 ( 0.00%) 770.14
tcpdump file: 201004130615.dump.gz (680.41 MB)