Traffic Trace Info
DumpFile: 201004131045.dump
FileSize: 2350.44MB
Id: 201004131045
StartTime: Tue Apr 13 10:45:01 2010
EndTime: Tue Apr 13 11:00:01 2010
TotalTime: 900.42 seconds
TotalCapSize: 1834.65MB CapLen: 96 bytes
# of packets: 33801363 (21360.46MB)
AvgRate: 198.98Mbps stddev:12.95M
IP flow (unique src/dst pair) Information
# of flows: 1023260 (avg. 33.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 1.4% 1.2% 1.0% 0.9% 0.8% 0.7% 0.6% 0.6% 0.5%
IP address Information
# of IPv4 addresses: 576885
Top 10 bandwidth usage (bytes/total in %):
18.6% 9.1% 6.7% 3.9% 3.7% 3.7% 3.5% 3.3% 2.6% 2.5%
# of IPv6 addresses: 967
Top 10 bandwidth usage (bytes/total in %):
35.3% 35.3% 15.6% 6.3% 5.6% 5.6% 4.0% 3.5% 3.4% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004131045.pktlen.png)
detailed numbers
[ 32- 63]: 5739527
[ 64- 127]: 8731183
[ 128- 255]: 3032697
[ 256- 511]: 1706953
[ 512- 1023]: 977099
[ 1024- 2047]: 13613904
Protocol Breakdown
![[protocol breakdown chart]](201004131045.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33801363 (100.00%) 22398061251 (100.00%) 662.64
ip 33743941 ( 99.83%) 22383965167 ( 99.94%) 663.35
tcp 20232943 ( 59.86%) 14761258273 ( 65.90%) 729.57
http(s) 8440029 ( 24.97%) 11438955141 ( 51.07%) 1355.32
http(c) 5866469 ( 17.36%) 1006954448 ( 4.50%) 171.65
squid 171622 ( 0.51%) 45232117 ( 0.20%) 263.56
smtp 261702 ( 0.77%) 90258053 ( 0.40%) 344.89
nntp 3 ( 0.00%) 198 ( 0.00%) 66.00
ftp 20923 ( 0.06%) 3079697 ( 0.01%) 147.19
pop3 16761 ( 0.05%) 6772177 ( 0.03%) 404.04
imap 3543 ( 0.01%) 1982791 ( 0.01%) 559.64
telnet 1364 ( 0.00%) 116677 ( 0.00%) 85.54
ssh 1737364 ( 5.14%) 212114352 ( 0.95%) 122.09
dns 58912 ( 0.17%) 4040355 ( 0.02%) 68.58
bgp 143 ( 0.00%) 50395 ( 0.00%) 352.41
napster 30 ( 0.00%) 2472 ( 0.00%) 82.40
realaud 230 ( 0.00%) 22374 ( 0.00%) 97.28
rtsp 110981 ( 0.33%) 45870150 ( 0.20%) 413.32
icecast 1013 ( 0.00%) 117913 ( 0.00%) 116.40
hotline 8 ( 0.00%) 797 ( 0.00%) 99.62
other 3541842 ( 10.48%) 1905687926 ( 8.51%) 538.05
udp 9548891 ( 28.25%) 5514540143 ( 24.62%) 577.51
dns 636982 ( 1.88%) 108153670 ( 0.48%) 169.79
realaud 1578 ( 0.00%) 99017 ( 0.00%) 62.75
halflif 125 ( 0.00%) 20349 ( 0.00%) 162.79
starcra 285 ( 0.00%) 27385 ( 0.00%) 96.09
everque 610 ( 0.00%) 128190 ( 0.00%) 210.15
unreal 88 ( 0.00%) 13497 ( 0.00%) 153.38
quake 30 ( 0.00%) 2922 ( 0.00%) 97.40
cuseeme 5 ( 0.00%) 445 ( 0.00%) 89.00
other 8908885 ( 26.36%) 5405928990 ( 24.14%) 606.80
icmp 441709 ( 1.31%) 35330637 ( 0.16%) 79.99
ipip 308 ( 0.00%) 36424 ( 0.00%) 118.26
ipsec 2416 ( 0.01%) 699356 ( 0.00%) 289.47
ip6 3367480 ( 9.96%) 2056092349 ( 9.18%) 610.57
other 150194 ( 0.44%) 16007985 ( 0.07%) 106.58
frag 2008 ( 0.01%) 1913929 ( 0.01%) 953.15
ip6 57422 ( 0.17%) 14096084 ( 0.06%) 245.48
tcp6 22218 ( 0.07%) 7368851 ( 0.03%) 331.66
http(s) 762 ( 0.00%) 852158 ( 0.00%) 1118.32
http(c) 3850 ( 0.01%) 347221 ( 0.00%) 90.19
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 198 ( 0.00%) 74590 ( 0.00%) 376.72
ftp 2517 ( 0.01%) 260321 ( 0.00%) 103.43
imap 215 ( 0.00%) 26629 ( 0.00%) 123.86
ssh 3231 ( 0.01%) 356758 ( 0.00%) 110.42
dns 179 ( 0.00%) 71369 ( 0.00%) 398.71
bgp 121 ( 0.00%) 19878 ( 0.00%) 164.28
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 11142 ( 0.03%) 5359705 ( 0.02%) 481.04
udp6 28953 ( 0.09%) 5929279 ( 0.03%) 204.79
dns 28709 ( 0.08%) 5886142 ( 0.03%) 205.03
other 244 ( 0.00%) 43137 ( 0.00%) 176.79
icmp6 6158 ( 0.02%) 743632 ( 0.00%) 120.76
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 62 ( 0.00%) 50106 ( 0.00%) 808.16
tcpdump file: 201004131045.dump.gz (861.42 MB)