Traffic Trace Info
DumpFile: 201004131200.dump
FileSize: 2275.70MB
Id: 201004131200
StartTime: Tue Apr 13 12:00:01 2010
EndTime: Tue Apr 13 12:15:01 2010
TotalTime: 900.03 seconds
TotalCapSize: 1775.69MB CapLen: 96 bytes
# of packets: 32762472 (20681.56MB)
AvgRate: 192.78Mbps stddev:18.74M
IP flow (unique src/dst pair) Information
# of flows: 893552 (avg. 36.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.3% 1.2% 1.1% 1.1% 0.9% 0.9% 0.8% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 493498
Top 10 bandwidth usage (bytes/total in %):
18.0% 6.6% 4.6% 4.2% 4.0% 3.5% 3.5% 2.6% 2.6% 1.9%
# of IPv6 addresses: 1049
Top 10 bandwidth usage (bytes/total in %):
19.9% 19.9% 16.2% 9.4% 7.5% 4.9% 4.7% 4.4% 4.4% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004131200.pktlen.png)
detailed numbers
[ 32- 63]: 5313894
[ 64- 127]: 8906026
[ 128- 255]: 2596797
[ 256- 511]: 1838990
[ 512- 1023]: 1085980
[ 1024- 2047]: 13020785
Protocol Breakdown
![[protocol breakdown chart]](201004131200.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32762472 (100.00%) 21686188673 (100.00%) 661.92
ip 32704718 ( 99.82%) 21672637028 ( 99.94%) 662.68
tcp 19939763 ( 60.86%) 14615551037 ( 67.40%) 732.99
http(s) 8056041 ( 24.59%) 10781809018 ( 49.72%) 1338.35
http(c) 5776951 ( 17.63%) 753023001 ( 3.47%) 130.35
squid 222405 ( 0.68%) 76296234 ( 0.35%) 343.05
smtp 341043 ( 1.04%) 110252538 ( 0.51%) 323.28
ftp 22691 ( 0.07%) 2011429 ( 0.01%) 88.64
pop3 24508 ( 0.07%) 13339312 ( 0.06%) 544.28
imap 9205 ( 0.03%) 4387144 ( 0.02%) 476.60
telnet 578 ( 0.00%) 77905 ( 0.00%) 134.78
ssh 1280968 ( 3.91%) 172157661 ( 0.79%) 134.40
dns 56874 ( 0.17%) 3901933 ( 0.02%) 68.61
bgp 129 ( 0.00%) 43073 ( 0.00%) 333.90
napster 4 ( 0.00%) 252 ( 0.00%) 63.00
realaud 30 ( 0.00%) 2671 ( 0.00%) 89.03
rtsp 84619 ( 0.26%) 23382811 ( 0.11%) 276.33
icecast 15940 ( 0.05%) 9589558 ( 0.04%) 601.60
hotline 12 ( 0.00%) 776 ( 0.00%) 64.67
other 4047762 ( 12.35%) 2665275541 ( 12.29%) 658.46
udp 9615744 ( 29.35%) 5560949291 ( 25.64%) 578.32
dns 655394 ( 2.00%) 111690461 ( 0.52%) 170.42
realaud 31 ( 0.00%) 3234 ( 0.00%) 104.32
halflif 88 ( 0.00%) 7788 ( 0.00%) 88.50
starcra 252 ( 0.00%) 24494 ( 0.00%) 97.20
everque 624 ( 0.00%) 117599 ( 0.00%) 188.46
unreal 130 ( 0.00%) 24518 ( 0.00%) 188.60
quake 20 ( 0.00%) 2085 ( 0.00%) 104.25
cuseeme 6 ( 0.00%) 592 ( 0.00%) 98.67
other 8958573 ( 27.34%) 5448798563 ( 25.13%) 608.22
icmp 434869 ( 1.33%) 36196379 ( 0.17%) 83.24
ipip 332 ( 0.00%) 38716 ( 0.00%) 116.61
ipsec 1418 ( 0.00%) 466588 ( 0.00%) 329.05
ip6 2701402 ( 8.25%) 1457781737 ( 6.72%) 539.64
other 11190 ( 0.03%) 1653280 ( 0.01%) 147.75
frag 2698 ( 0.01%) 2539025 ( 0.01%) 941.08
ip6 57754 ( 0.18%) 13551645 ( 0.06%) 234.64
tcp6 19989 ( 0.06%) 6127426 ( 0.03%) 306.54
http(s) 1651 ( 0.01%) 1923304 ( 0.01%) 1164.93
http(c) 3951 ( 0.01%) 361280 ( 0.00%) 91.44
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 338 ( 0.00%) 121852 ( 0.00%) 360.51
ftp 2535 ( 0.01%) 256008 ( 0.00%) 100.99
imap 334 ( 0.00%) 38236 ( 0.00%) 114.48
ssh 3282 ( 0.01%) 285300 ( 0.00%) 86.93
dns 149 ( 0.00%) 38937 ( 0.00%) 261.32
bgp 111 ( 0.00%) 14028 ( 0.00%) 126.38
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 7635 ( 0.02%) 3088259 ( 0.01%) 404.49
udp6 31314 ( 0.10%) 6549294 ( 0.03%) 209.15
dns 31092 ( 0.09%) 6512965 ( 0.03%) 209.47
realaud 1 ( 0.00%) 105 ( 0.00%) 105.00
everque 1 ( 0.00%) 119 ( 0.00%) 119.00
other 220 ( 0.00%) 36105 ( 0.00%) 164.11
icmp6 6336 ( 0.02%) 793378 ( 0.00%) 125.22
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 85 ( 0.00%) 77467 ( 0.00%) 911.38
tcpdump file: 201004131200.dump.gz (839.60 MB)