Traffic Trace Info
DumpFile: 201004131300.dump
FileSize: 2227.36MB
Id: 201004131300
StartTime: Tue Apr 13 13:00:01 2010
EndTime: Tue Apr 13 13:15:01 2010
TotalTime: 899.97 seconds
TotalCapSize: 1737.95MB CapLen: 96 bytes
# of packets: 32072895 (19317.88MB)
AvgRate: 180.05Mbps stddev:17.91M
IP flow (unique src/dst pair) Information
# of flows: 1028072 (avg. 31.20 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.6% 1.4% 1.4% 1.2% 1.1% 1.1% 1.0% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 580211
Top 10 bandwidth usage (bytes/total in %):
21.1% 8.7% 3.6% 3.2% 3.1% 3.0% 2.8% 2.7% 1.7% 1.7%
# of IPv6 addresses: 989
Top 10 bandwidth usage (bytes/total in %):
22.1% 10.7% 8.4% 7.8% 7.8% 6.9% 5.5% 5.1% 3.8% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004131300.pktlen.png)
detailed numbers
[ 32- 63]: 5879402
[ 64- 127]: 8214940
[ 128- 255]: 3092583
[ 256- 511]: 1719933
[ 512- 1023]: 1008255
[ 1024- 2047]: 12157782
Protocol Breakdown
![[protocol breakdown chart]](201004131300.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32072895 (100.00%) 20256261566 (100.00%) 631.57
ip 32023691 ( 99.85%) 20246337192 ( 99.95%) 632.23
tcp 19124917 ( 59.63%) 13296559924 ( 65.64%) 695.25
http(s) 7635692 ( 23.81%) 9968603346 ( 49.21%) 1305.53
http(c) 5972229 ( 18.62%) 776678553 ( 3.83%) 130.05
squid 291623 ( 0.91%) 97995065 ( 0.48%) 336.03
smtp 248001 ( 0.77%) 83038576 ( 0.41%) 334.83
nntp 3 ( 0.00%) 180 ( 0.00%) 60.00
ftp 26668 ( 0.08%) 4997040 ( 0.02%) 187.38
pop3 24124 ( 0.08%) 9048865 ( 0.04%) 375.10
imap 2927 ( 0.01%) 1104976 ( 0.01%) 377.51
telnet 745 ( 0.00%) 113390 ( 0.00%) 152.20
ssh 912574 ( 2.85%) 117997375 ( 0.58%) 129.30
dns 55350 ( 0.17%) 3781042 ( 0.02%) 68.31
bgp 144 ( 0.00%) 54312 ( 0.00%) 377.17
napster 12 ( 0.00%) 1063 ( 0.00%) 88.58
realaud 30 ( 0.00%) 2689 ( 0.00%) 89.63
rtsp 169583 ( 0.53%) 10712831 ( 0.05%) 63.17
icecast 1180 ( 0.00%) 120217 ( 0.00%) 101.88
hotline 20 ( 0.00%) 1472 ( 0.00%) 73.60
other 3784008 ( 11.80%) 2222308692 ( 10.97%) 587.29
udp 9454313 ( 29.48%) 5130145013 ( 25.33%) 542.62
dns 669984 ( 2.09%) 113266255 ( 0.56%) 169.06
realaud 46 ( 0.00%) 5915 ( 0.00%) 128.59
halflif 64 ( 0.00%) 6101 ( 0.00%) 95.33
starcra 238 ( 0.00%) 24051 ( 0.00%) 101.05
everque 741 ( 0.00%) 128962 ( 0.00%) 174.04
unreal 3589 ( 0.01%) 2449033 ( 0.01%) 682.37
quake 50 ( 0.00%) 5410 ( 0.00%) 108.20
cuseeme 4 ( 0.00%) 647 ( 0.00%) 161.75
other 8779280 ( 27.37%) 5014069045 ( 24.75%) 571.13
icmp 424638 ( 1.32%) 34802515 ( 0.17%) 81.96
ipip 338 ( 0.00%) 39678 ( 0.00%) 117.39
ipsec 1493 ( 0.00%) 501250 ( 0.00%) 335.73
ip6 3012746 ( 9.39%) 1780520731 ( 8.79%) 591.00
other 5246 ( 0.02%) 3768081 ( 0.02%) 718.28
frag 2459 ( 0.01%) 2708736 ( 0.01%) 1101.56
ip6 49204 ( 0.15%) 9924374 ( 0.05%) 201.70
tcp6 12022 ( 0.04%) 2534754 ( 0.01%) 210.84
http(s) 501 ( 0.00%) 540349 ( 0.00%) 1078.54
http(c) 2357 ( 0.01%) 221724 ( 0.00%) 94.07
smtp 697 ( 0.00%) 817081 ( 0.00%) 1172.28
ftp 1825 ( 0.01%) 184622 ( 0.00%) 101.16
imap 318 ( 0.00%) 37006 ( 0.00%) 116.37
ssh 2118 ( 0.01%) 251188 ( 0.00%) 118.60
dns 225 ( 0.00%) 74484 ( 0.00%) 331.04
bgp 123 ( 0.00%) 17647 ( 0.00%) 143.47
other 3858 ( 0.01%) 390653 ( 0.00%) 101.26
udp6 30712 ( 0.10%) 6544309 ( 0.03%) 213.09
dns 30319 ( 0.09%) 6480518 ( 0.03%) 213.74
other 393 ( 0.00%) 63791 ( 0.00%) 162.32
icmp6 6347 ( 0.02%) 766609 ( 0.00%) 120.78
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 92 ( 0.00%) 74486 ( 0.00%) 809.63
tcpdump file: 201004131300.dump.gz (818.33 MB)