Traffic Trace Info
DumpFile: 201004131245.dump
FileSize: 2227.13MB
Id: 201004131245
StartTime: Tue Apr 13 12:45:01 2010
EndTime: Tue Apr 13 13:00:01 2010
TotalTime: 899.98 seconds
TotalCapSize: 1737.39MB CapLen: 96 bytes
# of packets: 32095332 (20405.87MB)
AvgRate: 190.18Mbps stddev:21.89M
IP flow (unique src/dst pair) Information
# of flows: 943859 (avg. 34.00 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.3% 1.2% 1.1% 1.1% 1.0% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 537364
Top 10 bandwidth usage (bytes/total in %):
21.3% 7.2% 3.6% 3.0% 2.8% 2.7% 2.7% 2.6% 2.6% 2.3%
# of IPv6 addresses: 954
Top 10 bandwidth usage (bytes/total in %):
27.3% 12.2% 6.2% 5.8% 5.6% 5.5% 4.7% 4.3% 4.2% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004131245.pktlen.png)
detailed numbers
[ 32- 63]: 5183840
[ 64- 127]: 8225380
[ 128- 255]: 2965235
[ 256- 511]: 1754429
[ 512- 1023]: 974397
[ 1024- 2047]: 12992051
Protocol Breakdown
![[protocol breakdown chart]](201004131245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32095332 (100.00%) 21397106380 (100.00%) 666.67
ip 32048555 ( 99.85%) 21389091486 ( 99.96%) 667.40
tcp 19139119 ( 59.63%) 14211053836 ( 66.42%) 742.51
http(s) 8041851 ( 25.06%) 10676210281 ( 49.90%) 1327.58
http(c) 5499991 ( 17.14%) 745413942 ( 3.48%) 135.53
squid 233036 ( 0.73%) 93237614 ( 0.44%) 400.10
smtp 352116 ( 1.10%) 182636205 ( 0.85%) 518.68
ftp 26253 ( 0.08%) 7012661 ( 0.03%) 267.12
pop3 27444 ( 0.09%) 7972828 ( 0.04%) 290.51
imap 2048 ( 0.01%) 546677 ( 0.00%) 266.93
telnet 1601 ( 0.00%) 177331 ( 0.00%) 110.76
ssh 1010820 ( 3.15%) 129984220 ( 0.61%) 128.59
dns 58959 ( 0.18%) 4066901 ( 0.02%) 68.98
bgp 136 ( 0.00%) 40377 ( 0.00%) 296.89
napster 88 ( 0.00%) 11811 ( 0.00%) 134.22
realaud 307 ( 0.00%) 33602 ( 0.00%) 109.45
rtsp 59467 ( 0.19%) 3990920 ( 0.02%) 67.11
icecast 1099 ( 0.00%) 149553 ( 0.00%) 136.08
hotline 9 ( 0.00%) 560 ( 0.00%) 62.22
other 3823893 ( 11.91%) 2359568293 ( 11.03%) 617.06
udp 9788557 ( 30.50%) 5595233382 ( 26.15%) 571.61
dns 650171 ( 2.03%) 112284891 ( 0.52%) 172.70
realaud 43 ( 0.00%) 5070 ( 0.00%) 117.91
halflif 157 ( 0.00%) 12339 ( 0.00%) 78.59
starcra 258 ( 0.00%) 26130 ( 0.00%) 101.28
everque 642 ( 0.00%) 122211 ( 0.00%) 190.36
unreal 78 ( 0.00%) 12197 ( 0.00%) 156.37
quake 41 ( 0.00%) 4008 ( 0.00%) 97.76
cuseeme 2 ( 0.00%) 197 ( 0.00%) 98.50
other 9136787 ( 28.47%) 5482585131 ( 25.62%) 600.06
icmp 402296 ( 1.25%) 33025405 ( 0.15%) 82.09
ipip 340 ( 0.00%) 43044 ( 0.00%) 126.60
ipsec 1406 ( 0.00%) 464004 ( 0.00%) 330.02
ip6 2712670 ( 8.45%) 1548282969 ( 7.24%) 570.76
other 4167 ( 0.01%) 988846 ( 0.00%) 237.30
frag 1869 ( 0.01%) 1814604 ( 0.01%) 970.90
ip6 46777 ( 0.15%) 8014894 ( 0.04%) 171.34
tcp6 12039 ( 0.04%) 1442042 ( 0.01%) 119.78
http(s) 303 ( 0.00%) 227253 ( 0.00%) 750.01
http(c) 2476 ( 0.01%) 251806 ( 0.00%) 101.70
smtp 84 ( 0.00%) 34003 ( 0.00%) 404.80
ftp 2242 ( 0.01%) 226932 ( 0.00%) 101.22
imap 214 ( 0.00%) 24949 ( 0.00%) 116.58
ssh 2293 ( 0.01%) 200022 ( 0.00%) 87.23
dns 225 ( 0.00%) 58949 ( 0.00%) 262.00
bgp 104 ( 0.00%) 13201 ( 0.00%) 126.93
other 4098 ( 0.01%) 404927 ( 0.00%) 98.81
udp6 28478 ( 0.09%) 5792675 ( 0.03%) 203.41
dns 28243 ( 0.09%) 5751087 ( 0.03%) 203.63
other 235 ( 0.00%) 41588 ( 0.00%) 176.97
icmp6 6192 ( 0.02%) 745102 ( 0.00%) 120.33
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 38 ( 0.00%) 30995 ( 0.00%) 815.66
tcpdump file: 201004131245.dump.gz (811.97 MB)