Traffic Trace Info
DumpFile: 201004130715.dump
FileSize: 1953.56MB
Id: 201004130715
StartTime: Tue Apr 13 07:15:01 2010
EndTime: Tue Apr 13 07:30:01 2010
TotalTime: 899.81 seconds
TotalCapSize: 1533.48MB CapLen: 96 bytes
# of packets: 27529888 (16996.06MB)
AvgRate: 158.44Mbps stddev:12.08M
IP flow (unique src/dst pair) Information
# of flows: 884419 (avg. 31.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.5% 1.3% 1.3% 1.3% 1.2% 1.1% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 509557
Top 10 bandwidth usage (bytes/total in %):
22.0% 11.5% 10.4% 4.3% 3.9% 3.6% 3.6% 3.2% 3.2% 3.1%
# of IPv6 addresses: 862
Top 10 bandwidth usage (bytes/total in %):
34.8% 8.9% 7.5% 6.6% 5.5% 5.3% 4.1% 3.7% 3.7% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004130715.pktlen.png)
detailed numbers
[ 32- 63]: 3580113
[ 64- 127]: 8233457
[ 128- 255]: 2565998
[ 256- 511]: 1731640
[ 512- 1023]: 661706
[ 1024- 2047]: 10756974
Protocol Breakdown
![[protocol breakdown chart]](201004130715.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27529888 (100.00%) 17821661755 (100.00%) 647.36
ip 27487536 ( 99.85%) 17815364309 ( 99.96%) 648.13
tcp 15220127 ( 55.29%) 11340605346 ( 63.63%) 745.11
http(s) 6577289 ( 23.89%) 9239290075 ( 51.84%) 1404.73
http(c) 3846012 ( 13.97%) 377745410 ( 2.12%) 98.22
squid 291629 ( 1.06%) 98454810 ( 0.55%) 337.60
smtp 286333 ( 1.04%) 108550929 ( 0.61%) 379.11
ftp 9152 ( 0.03%) 854173 ( 0.00%) 93.33
pop3 7078 ( 0.03%) 4408389 ( 0.02%) 622.83
imap 1602 ( 0.01%) 562064 ( 0.00%) 350.85
telnet 805 ( 0.00%) 71473 ( 0.00%) 88.79
ssh 1429914 ( 5.19%) 178062949 ( 1.00%) 124.53
dns 57057 ( 0.21%) 3899667 ( 0.02%) 68.35
bgp 144 ( 0.00%) 45850 ( 0.00%) 318.40
napster 18 ( 0.00%) 1548 ( 0.00%) 86.00
rtsp 79 ( 0.00%) 7962 ( 0.00%) 100.78
icecast 461 ( 0.00%) 37555 ( 0.00%) 81.46
hotline 2 ( 0.00%) 148 ( 0.00%) 74.00
other 2712547 ( 9.85%) 1328612044 ( 7.46%) 489.80
udp 7828727 ( 28.44%) 4268616244 ( 23.95%) 545.25
dns 564327 ( 2.05%) 101317087 ( 0.57%) 179.54
realaud 24 ( 0.00%) 3515 ( 0.00%) 146.46
halflif 121 ( 0.00%) 15930 ( 0.00%) 131.65
starcra 351 ( 0.00%) 46524 ( 0.00%) 132.55
everque 361 ( 0.00%) 72894 ( 0.00%) 201.92
unreal 82 ( 0.00%) 14036 ( 0.00%) 171.17
quake 25 ( 0.00%) 2567 ( 0.00%) 102.68
cuseeme 11 ( 0.00%) 1468 ( 0.00%) 133.45
other 7263130 ( 26.38%) 4167003283 ( 23.38%) 573.72
icmp 802534 ( 2.92%) 123756703 ( 0.69%) 154.21
ipip 315 ( 0.00%) 39584 ( 0.00%) 125.66
ipsec 4496 ( 0.02%) 1706516 ( 0.01%) 379.56
ip6 3378659 ( 12.27%) 2054410398 ( 11.53%) 608.05
other 252678 ( 0.92%) 26229518 ( 0.15%) 103.81
frag 1929 ( 0.01%) 1917239 ( 0.01%) 993.90
ip6 42352 ( 0.15%) 6297446 ( 0.04%) 148.69
tcp6 12263 ( 0.04%) 1202584 ( 0.01%) 98.07
http(s) 48 ( 0.00%) 21443 ( 0.00%) 446.73
http(c) 3830 ( 0.01%) 350651 ( 0.00%) 91.55
smtp 132 ( 0.00%) 45946 ( 0.00%) 348.08
ftp 1585 ( 0.01%) 160173 ( 0.00%) 101.06
imap 155 ( 0.00%) 18391 ( 0.00%) 118.65
ssh 3027 ( 0.01%) 251354 ( 0.00%) 83.04
dns 62 ( 0.00%) 14253 ( 0.00%) 229.89
bgp 98 ( 0.00%) 12442 ( 0.00%) 126.96
other 3326 ( 0.01%) 327931 ( 0.00%) 98.60
udp6 23583 ( 0.09%) 4306376 ( 0.02%) 182.61
dns 23204 ( 0.08%) 4228463 ( 0.02%) 182.23
other 379 ( 0.00%) 77913 ( 0.00%) 205.58
icmp6 6463 ( 0.02%) 774830 ( 0.00%) 119.89
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 13 ( 0.00%) 9576 ( 0.00%) 736.62
tcpdump file: 201004130715.dump.gz (705.69 MB)