Traffic Trace Info
DumpFile: 201004131145.dump
FileSize: 2259.01MB
Id: 201004131145
StartTime: Tue Apr 13 11:45:01 2010
EndTime: Tue Apr 13 12:00:01 2010
TotalTime: 900.02 seconds
TotalCapSize: 1764.12MB CapLen: 96 bytes
# of packets: 32429250 (20447.32MB)
AvgRate: 190.58Mbps stddev:20.11M
IP flow (unique src/dst pair) Information
# of flows: 974519 (avg. 33.28 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.6% 1.3% 1.2% 1.2% 1.1% 1.0% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 562633
Top 10 bandwidth usage (bytes/total in %):
17.5% 6.8% 4.5% 4.3% 3.7% 3.6% 3.4% 3.4% 2.7% 2.6%
# of IPv6 addresses: 977
Top 10 bandwidth usage (bytes/total in %):
25.9% 25.9% 17.0% 8.9% 8.9% 6.6% 4.6% 3.9% 3.8% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004131145.pktlen.png)
detailed numbers
[ 32- 63]: 4879730
[ 64- 127]: 9298513
[ 128- 255]: 2752540
[ 256- 511]: 1609155
[ 512- 1023]: 944052
[ 1024- 2047]: 12945260
Protocol Breakdown
![[protocol breakdown chart]](201004131145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32429250 (100.00%) 21440569914 (100.00%) 661.15
ip 32374332 ( 99.83%) 21427667747 ( 99.94%) 661.87
tcp 19516978 ( 60.18%) 14353771703 ( 66.95%) 735.45
http(s) 8181815 ( 25.23%) 11031906560 ( 51.45%) 1348.34
http(c) 5452732 ( 16.81%) 704464670 ( 3.29%) 129.19
squid 237301 ( 0.73%) 113330247 ( 0.53%) 477.58
smtp 299374 ( 0.92%) 103335663 ( 0.48%) 345.17
ftp 18556 ( 0.06%) 2319195 ( 0.01%) 124.98
pop3 18231 ( 0.06%) 8105255 ( 0.04%) 444.59
imap 3841 ( 0.01%) 1991036 ( 0.01%) 518.36
telnet 626 ( 0.00%) 64257 ( 0.00%) 102.65
ssh 1472367 ( 4.54%) 188052618 ( 0.88%) 127.72
dns 59655 ( 0.18%) 4156844 ( 0.02%) 69.68
bgp 164 ( 0.00%) 62255 ( 0.00%) 379.60
napster 27 ( 0.00%) 3156 ( 0.00%) 116.89
realaud 62 ( 0.00%) 6027 ( 0.00%) 97.21
rtsp 52803 ( 0.16%) 51761263 ( 0.24%) 980.27
icecast 14295 ( 0.04%) 8246982 ( 0.04%) 576.91
hotline 11 ( 0.00%) 1539 ( 0.00%) 139.91
other 3705117 ( 11.43%) 2135964076 ( 9.96%) 576.49
udp 9632547 ( 29.70%) 5559978782 ( 25.93%) 577.21
dns 646317 ( 1.99%) 110037430 ( 0.51%) 170.25
realaud 72 ( 0.00%) 10533 ( 0.00%) 146.29
halflif 166 ( 0.00%) 20356 ( 0.00%) 122.63
starcra 230 ( 0.00%) 25052 ( 0.00%) 108.92
everque 669 ( 0.00%) 128015 ( 0.00%) 191.35
unreal 105 ( 0.00%) 16423 ( 0.00%) 156.41
quake 145 ( 0.00%) 37253 ( 0.00%) 256.92
cuseeme 9 ( 0.00%) 1270 ( 0.00%) 141.11
other 8984187 ( 27.70%) 5449549604 ( 25.42%) 606.57
icmp 517593 ( 1.60%) 42511216 ( 0.20%) 82.13
ipip 326 ( 0.00%) 37808 ( 0.00%) 115.98
ipsec 3491 ( 0.01%) 1002806 ( 0.00%) 287.25
ip6 2692081 ( 8.30%) 1468707772 ( 6.85%) 545.57
other 11316 ( 0.03%) 1657660 ( 0.01%) 146.49
frag 12386 ( 0.04%) 9823430 ( 0.05%) 793.11
ip6 54918 ( 0.17%) 12902167 ( 0.06%) 234.94
tcp6 19263 ( 0.06%) 6062836 ( 0.03%) 314.74
http(s) 881 ( 0.00%) 1182474 ( 0.01%) 1342.20
http(c) 3906 ( 0.01%) 351133 ( 0.00%) 89.90
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 302 ( 0.00%) 89435 ( 0.00%) 296.14
ftp 2493 ( 0.01%) 251919 ( 0.00%) 101.05
imap 331 ( 0.00%) 36607 ( 0.00%) 110.60
ssh 3377 ( 0.01%) 328386 ( 0.00%) 97.24
dns 175 ( 0.00%) 44610 ( 0.00%) 254.91
bgp 95 ( 0.00%) 11565 ( 0.00%) 121.74
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 7700 ( 0.02%) 3766485 ( 0.02%) 489.15
udp6 29340 ( 0.09%) 5987989 ( 0.03%) 204.09
dns 29068 ( 0.09%) 5945333 ( 0.03%) 204.53
other 272 ( 0.00%) 42656 ( 0.00%) 156.82
icmp6 6183 ( 0.02%) 747723 ( 0.00%) 120.93
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 101 ( 0.00%) 99403 ( 0.00%) 984.19
tcpdump file: 201004131145.dump.gz (838.78 MB)