Traffic Trace Info
DumpFile: 201004131115.dump
FileSize: 2495.60MB
Id: 201004131115
StartTime: Tue Apr 13 11:15:01 2010
EndTime: Tue Apr 13 11:30:01 2010
TotalTime: 899.64 seconds
TotalCapSize: 1945.32MB CapLen: 96 bytes
# of packets: 36061219 (22567.76MB)
AvgRate: 210.44Mbps stddev:15.82M
IP flow (unique src/dst pair) Information
# of flows: 1019344 (avg. 35.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 1.2% 1.2% 1.1% 1.0% 1.0% 0.9% 0.9% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 596551
Top 10 bandwidth usage (bytes/total in %):
18.6% 7.5% 5.4% 5.1% 4.4% 3.3% 3.1% 3.1% 3.0% 2.4%
# of IPv6 addresses: 1008
Top 10 bandwidth usage (bytes/total in %):
30.9% 30.9% 13.6% 6.5% 6.4% 6.4% 4.3% 3.5% 3.3% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004131115.pktlen.png)
detailed numbers
[ 32- 63]: 5457675
[ 64- 127]: 9789036
[ 128- 255]: 3501791
[ 256- 511]: 2011051
[ 512- 1023]: 1011137
[ 1024- 2047]: 14290529
Protocol Breakdown
![[protocol breakdown chart]](201004131115.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36061219 (100.00%) 23664015134 (100.00%) 656.22
ip 35998987 ( 99.83%) 23647902864 ( 99.93%) 656.90
tcp 20559562 ( 57.01%) 15145886326 ( 64.00%) 736.68
http(s) 8488805 ( 23.54%) 11492939052 ( 48.57%) 1353.89
http(c) 5971613 ( 16.56%) 1112663303 ( 4.70%) 186.33
squid 179190 ( 0.50%) 58252595 ( 0.25%) 325.09
smtp 370489 ( 1.03%) 191823707 ( 0.81%) 517.76
ftp 18363 ( 0.05%) 4358743 ( 0.02%) 237.37
pop3 20027 ( 0.06%) 9654289 ( 0.04%) 482.06
imap 4089 ( 0.01%) 933422 ( 0.00%) 228.28
telnet 1472 ( 0.00%) 112549 ( 0.00%) 76.46
ssh 1579417 ( 4.38%) 192589015 ( 0.81%) 121.94
dns 64062 ( 0.18%) 5160283 ( 0.02%) 80.55
bgp 138 ( 0.00%) 37310 ( 0.00%) 270.36
napster 24 ( 0.00%) 2874 ( 0.00%) 119.75
realaud 12 ( 0.00%) 1148 ( 0.00%) 95.67
rtsp 158532 ( 0.44%) 37698010 ( 0.16%) 237.79
icecast 2883 ( 0.01%) 1607924 ( 0.01%) 557.73
hotline 16 ( 0.00%) 1008 ( 0.00%) 63.00
other 3700424 ( 10.26%) 2038050734 ( 8.61%) 550.76
udp 11197983 ( 31.05%) 6599901582 ( 27.89%) 589.38
dns 621941 ( 1.72%) 105395162 ( 0.45%) 169.46
realaud 24 ( 0.00%) 3440 ( 0.00%) 143.33
halflif 135 ( 0.00%) 22592 ( 0.00%) 167.35
starcra 232 ( 0.00%) 23698 ( 0.00%) 102.15
everque 763 ( 0.00%) 149592 ( 0.00%) 196.06
unreal 150 ( 0.00%) 28186 ( 0.00%) 187.91
quake 470 ( 0.00%) 94239 ( 0.00%) 200.51
cuseeme 4 ( 0.00%) 643 ( 0.00%) 160.75
other 10573866 ( 29.32%) 6494016614 ( 27.44%) 614.16
icmp 980783 ( 2.72%) 84942363 ( 0.36%) 86.61
ipip 313 ( 0.00%) 36896 ( 0.00%) 117.88
ipsec 3028 ( 0.01%) 854972 ( 0.00%) 282.36
ip6 3108560 ( 8.62%) 1800533756 ( 7.61%) 579.22
other 148758 ( 0.41%) 15746969 ( 0.07%) 105.86
frag 1776 ( 0.00%) 1734078 ( 0.01%) 976.40
ip6 62232 ( 0.17%) 16112270 ( 0.07%) 258.91
tcp6 27508 ( 0.08%) 9742741 ( 0.04%) 354.18
http(s) 1198 ( 0.00%) 1475534 ( 0.01%) 1231.66
http(c) 9932 ( 0.03%) 884717 ( 0.00%) 89.08
smtp 471 ( 0.00%) 385390 ( 0.00%) 818.24
ftp 2530 ( 0.01%) 261858 ( 0.00%) 103.50
imap 237 ( 0.00%) 26516 ( 0.00%) 111.88
ssh 4613 ( 0.01%) 1260030 ( 0.01%) 273.15
dns 67 ( 0.00%) 21687 ( 0.00%) 323.69
bgp 116 ( 0.00%) 16703 ( 0.00%) 143.99
other 8344 ( 0.02%) 5410306 ( 0.02%) 648.41
udp6 28259 ( 0.08%) 5543503 ( 0.02%) 196.17
dns 28108 ( 0.08%) 5518258 ( 0.02%) 196.32
other 151 ( 0.00%) 25245 ( 0.00%) 167.19
icmp6 6373 ( 0.02%) 768225 ( 0.00%) 120.54
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 62 ( 0.00%) 53721 ( 0.00%) 866.47
tcpdump file: 201004131115.dump.gz (911.67 MB)