Traffic Trace Info
DumpFile: 201004130945.dump
FileSize: 2301.01MB
Id: 201004130945
StartTime: Tue Apr 13 09:45:01 2010
EndTime: Tue Apr 13 10:00:01 2010
TotalTime: 900.17 seconds
TotalCapSize: 1803.15MB CapLen: 96 bytes
# of packets: 32627591 (18747.22MB)
AvgRate: 174.72Mbps stddev:13.50M
IP flow (unique src/dst pair) Information
# of flows: 977818 (avg. 33.37 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.8% 1.3% 1.2% 1.0% 1.0% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 552182
Top 10 bandwidth usage (bytes/total in %):
20.1% 10.9% 4.5% 4.3% 3.6% 3.5% 2.8% 2.3% 2.2% 2.1%
# of IPv6 addresses: 897
Top 10 bandwidth usage (bytes/total in %):
29.1% 8.8% 7.8% 6.5% 6.3% 6.2% 5.5% 3.8% 3.3% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004130945.pktlen.png)
detailed numbers
[ 32- 63]: 4902553
[ 64- 127]: 9721346
[ 128- 255]: 3458207
[ 256- 511]: 1986009
[ 512- 1023]: 981263
[ 1024- 2047]: 11578213
Protocol Breakdown
![[protocol breakdown chart]](201004130945.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32627591 (100.00%) 19657882805 (100.00%) 602.49
ip 32580093 ( 99.85%) 19650344789 ( 99.96%) 603.14
tcp 18581099 ( 56.95%) 12497550211 ( 63.58%) 672.59
http(s) 6924810 ( 21.22%) 9348903700 ( 47.56%) 1350.06
http(c) 4866007 ( 14.91%) 606525533 ( 3.09%) 124.65
squid 197125 ( 0.60%) 62876897 ( 0.32%) 318.97
smtp 249387 ( 0.76%) 65195512 ( 0.33%) 261.42
ftp 16099 ( 0.05%) 1692548 ( 0.01%) 105.13
pop3 17431 ( 0.05%) 6657659 ( 0.03%) 381.94
imap 9790 ( 0.03%) 7397351 ( 0.04%) 755.60
telnet 542 ( 0.00%) 54579 ( 0.00%) 100.70
ssh 2207285 ( 6.77%) 274251620 ( 1.40%) 124.25
dns 60452 ( 0.19%) 4119624 ( 0.02%) 68.15
bgp 132 ( 0.00%) 35893 ( 0.00%) 271.92
napster 42 ( 0.00%) 8354 ( 0.00%) 198.90
realaud 11 ( 0.00%) 1105 ( 0.00%) 100.45
rtsp 98484 ( 0.30%) 33620308 ( 0.17%) 341.38
icecast 748 ( 0.00%) 88851 ( 0.00%) 118.78
other 3932753 ( 12.05%) 2086120617 ( 10.61%) 530.45
udp 8986789 ( 27.54%) 4816280738 ( 24.50%) 535.93
dns 622082 ( 1.91%) 106384500 ( 0.54%) 171.01
realaud 39 ( 0.00%) 5448 ( 0.00%) 139.69
halflif 190 ( 0.00%) 41914 ( 0.00%) 220.60
starcra 260 ( 0.00%) 26291 ( 0.00%) 101.12
everque 655 ( 0.00%) 130905 ( 0.00%) 199.85
unreal 117 ( 0.00%) 16525 ( 0.00%) 141.24
quake 45 ( 0.00%) 3613 ( 0.00%) 80.29
cuseeme 3 ( 0.00%) 254 ( 0.00%) 84.67
other 8363038 ( 25.63%) 4709498163 ( 23.96%) 563.13
icmp 1164342 ( 3.57%) 103889276 ( 0.53%) 89.23
ipip 322 ( 0.00%) 38268 ( 0.00%) 118.84
ipsec 112305 ( 0.34%) 54517642 ( 0.28%) 485.44
ip6 3559606 ( 10.91%) 2159606536 ( 10.99%) 606.70
other 175630 ( 0.54%) 18462118 ( 0.09%) 105.12
frag 2349 ( 0.01%) 2346179 ( 0.01%) 998.80
ip6 47498 ( 0.15%) 7538016 ( 0.04%) 158.70
tcp6 14519 ( 0.04%) 1585139 ( 0.01%) 109.18
http(s) 187 ( 0.00%) 173072 ( 0.00%) 925.52
http(c) 4074 ( 0.01%) 371496 ( 0.00%) 91.19
smtp 121 ( 0.00%) 43021 ( 0.00%) 355.55
ftp 2503 ( 0.01%) 257301 ( 0.00%) 102.80
imap 120 ( 0.00%) 17663 ( 0.00%) 147.19
ssh 3195 ( 0.01%) 265382 ( 0.00%) 83.06
dns 169 ( 0.00%) 40084 ( 0.00%) 237.18
bgp 112 ( 0.00%) 17128 ( 0.00%) 152.93
other 4038 ( 0.01%) 399992 ( 0.00%) 99.06
udp6 26896 ( 0.08%) 5175675 ( 0.03%) 192.43
dns 26676 ( 0.08%) 5143895 ( 0.03%) 192.83
other 220 ( 0.00%) 31780 ( 0.00%) 144.45
icmp6 5980 ( 0.02%) 712052 ( 0.00%) 119.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 73 ( 0.00%) 61070 ( 0.00%) 836.58
tcpdump file: 201004130945.dump.gz (846.88 MB)