Traffic Trace Info
DumpFile: 201004131415.dump
FileSize: 2422.51MB
Id: 201004131415
StartTime: Tue Apr 13 14:15:01 2010
EndTime: Tue Apr 13 14:30:01 2010
TotalTime: 900.22 seconds
TotalCapSize: 1888.43MB CapLen: 96 bytes
# of packets: 35000479 (21449.06MB)
AvgRate: 199.89Mbps stddev:19.27M
IP flow (unique src/dst pair) Information
# of flows: 982406 (avg. 35.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 1.6% 1.0% 1.0% 0.9% 0.9% 0.8% 0.8% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 545037
Top 10 bandwidth usage (bytes/total in %):
19.4% 6.9% 4.4% 3.5% 3.5% 3.2% 2.8% 2.5% 2.5% 2.5%
# of IPv6 addresses: 981
Top 10 bandwidth usage (bytes/total in %):
26.7% 10.9% 6.1% 5.8% 5.7% 4.8% 4.1% 4.0% 3.8% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004131415.pktlen.png)
detailed numbers
[ 32- 63]: 6059370
[ 64- 127]: 9387240
[ 128- 255]: 2964972
[ 256- 511]: 1858985
[ 512- 1023]: 945291
[ 1024- 2047]: 13784621
Protocol Breakdown
![[protocol breakdown chart]](201004131415.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35000479 (100.00%) 22490974245 (100.00%) 642.59
ip 34953362 ( 99.87%) 22482784854 ( 99.96%) 643.22
tcp 21098369 ( 60.28%) 14441169391 ( 64.21%) 684.47
http(s) 8165306 ( 23.33%) 10792484886 ( 47.99%) 1321.75
http(c) 5979190 ( 17.08%) 775390199 ( 3.45%) 129.68
squid 282871 ( 0.81%) 84675013 ( 0.38%) 299.34
smtp 338389 ( 0.97%) 171307520 ( 0.76%) 506.24
ftp 38981 ( 0.11%) 7284225 ( 0.03%) 186.87
pop3 20111 ( 0.06%) 6027795 ( 0.03%) 299.73
imap 4677 ( 0.01%) 2376815 ( 0.01%) 508.19
telnet 644 ( 0.00%) 65333 ( 0.00%) 101.45
ssh 1527945 ( 4.37%) 178152647 ( 0.79%) 116.60
dns 56099 ( 0.16%) 3842946 ( 0.02%) 68.50
bgp 141 ( 0.00%) 49214 ( 0.00%) 349.04
napster 9 ( 0.00%) 566 ( 0.00%) 62.89
realaud 53 ( 0.00%) 5085 ( 0.00%) 95.94
rtsp 153773 ( 0.44%) 58816544 ( 0.26%) 382.49
icecast 2207 ( 0.01%) 463894 ( 0.00%) 210.19
hotline 10 ( 0.00%) 1727 ( 0.00%) 172.70
other 4527961 ( 12.94%) 2360224862 ( 10.49%) 521.26
udp 10474832 ( 29.93%) 6417510251 ( 28.53%) 612.66
dns 707666 ( 2.02%) 117349527 ( 0.52%) 165.83
realaud 28 ( 0.00%) 4987 ( 0.00%) 178.11
halflif 81 ( 0.00%) 10832 ( 0.00%) 133.73
starcra 317 ( 0.00%) 33077 ( 0.00%) 104.34
everque 100659 ( 0.29%) 26226927 ( 0.12%) 260.55
unreal 130 ( 0.00%) 22372 ( 0.00%) 172.09
quake 629 ( 0.00%) 45839 ( 0.00%) 72.88
cuseeme 4 ( 0.00%) 416 ( 0.00%) 104.00
other 9664786 ( 27.61%) 6273500254 ( 27.89%) 649.11
icmp 498208 ( 1.42%) 41435104 ( 0.18%) 83.17
ipip 307 ( 0.00%) 36692 ( 0.00%) 119.52
ipsec 3171 ( 0.01%) 1708906 ( 0.01%) 538.92
ip6 2839118 ( 8.11%) 1574251458 ( 7.00%) 554.49
other 39357 ( 0.11%) 6673052 ( 0.03%) 169.55
frag 2129 ( 0.01%) 2159951 ( 0.01%) 1014.54
ip6 47117 ( 0.13%) 8189391 ( 0.04%) 173.81
tcp6 10819 ( 0.03%) 1337689 ( 0.01%) 123.64
http(s) 197 ( 0.00%) 184169 ( 0.00%) 934.87
http(c) 2921 ( 0.01%) 282134 ( 0.00%) 96.59
smtp 124 ( 0.00%) 26686 ( 0.00%) 215.21
ftp 1560 ( 0.00%) 157730 ( 0.00%) 101.11
imap 274 ( 0.00%) 31848 ( 0.00%) 116.23
ssh 1966 ( 0.01%) 244676 ( 0.00%) 124.45
dns 84 ( 0.00%) 31132 ( 0.00%) 370.62
bgp 104 ( 0.00%) 13861 ( 0.00%) 133.28
other 3589 ( 0.01%) 365453 ( 0.00%) 101.83
udp6 30080 ( 0.09%) 6055862 ( 0.03%) 201.33
dns 29794 ( 0.09%) 6012262 ( 0.03%) 201.79
other 286 ( 0.00%) 43600 ( 0.00%) 152.45
icmp6 6137 ( 0.02%) 748633 ( 0.00%) 121.99
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 51 ( 0.00%) 43127 ( 0.00%) 845.63
tcpdump file: 201004131415.dump.gz (898.09 MB)