Traffic Trace Info
DumpFile: 201004131500.dump
FileSize: 2581.77MB
Id: 201004131500
StartTime: Tue Apr 13 15:00:00 2010
EndTime: Tue Apr 13 15:15:00 2010
TotalTime: 899.81 seconds
TotalCapSize: 2019.93MB CapLen: 96 bytes
# of packets: 36820289 (23342.96MB)
AvgRate: 217.63Mbps stddev:17.25M
IP flow (unique src/dst pair) Information
# of flows: 1036221 (avg. 35.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 1.3% 1.1% 1.1% 1.0% 0.9% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 576092
Top 10 bandwidth usage (bytes/total in %):
18.9% 7.0% 5.5% 5.4% 4.4% 3.9% 3.7% 3.2% 3.0% 2.3%
# of IPv6 addresses: 1006
Top 10 bandwidth usage (bytes/total in %):
22.3% 11.2% 11.2% 9.4% 7.7% 5.4% 4.6% 4.1% 3.8% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004131500.pktlen.png)
detailed numbers
[ 32- 63]: 5799426
[ 64- 127]: 9996986
[ 128- 255]: 3018730
[ 256- 511]: 2066620
[ 512- 1023]: 928854
[ 1024- 2047]: 15009673
Protocol Breakdown
![[protocol breakdown chart]](201004131500.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36820289 (100.00%) 24476863626 (100.00%) 664.77
ip 36770271 ( 99.86%) 24467051969 ( 99.96%) 665.40
tcp 23223104 ( 63.07%) 17035698866 ( 69.60%) 733.57
http(s) 9674191 ( 26.27%) 12875745508 ( 52.60%) 1330.94
http(c) 6869823 ( 18.66%) 902391274 ( 3.69%) 131.36
squid 351826 ( 0.96%) 109913205 ( 0.45%) 312.41
smtp 301086 ( 0.82%) 129330302 ( 0.53%) 429.55
nntp 4 ( 0.00%) 268 ( 0.00%) 67.00
ftp 32435 ( 0.09%) 6174991 ( 0.03%) 190.38
pop3 27365 ( 0.07%) 15390080 ( 0.06%) 562.40
imap 3927 ( 0.01%) 2785260 ( 0.01%) 709.26
telnet 1264 ( 0.00%) 121723 ( 0.00%) 96.30
ssh 1417116 ( 3.85%) 187980886 ( 0.77%) 132.65
dns 56143 ( 0.15%) 3862601 ( 0.02%) 68.80
bgp 172 ( 0.00%) 59663 ( 0.00%) 346.88
napster 43 ( 0.00%) 7970 ( 0.00%) 185.35
realaud 77 ( 0.00%) 17501 ( 0.00%) 227.29
rtsp 111667 ( 0.30%) 59809665 ( 0.24%) 535.61
icecast 1133 ( 0.00%) 129767 ( 0.00%) 114.53
other 4374824 ( 11.88%) 2741977722 ( 11.20%) 626.76
udp 9930870 ( 26.97%) 5630960937 ( 23.01%) 567.02
dns 744634 ( 2.02%) 123054079 ( 0.50%) 165.25
rip 1 ( 0.00%) 84 ( 0.00%) 84.00
realaud 86 ( 0.00%) 13423 ( 0.00%) 156.08
halflif 47 ( 0.00%) 5995 ( 0.00%) 127.55
starcra 195 ( 0.00%) 18172 ( 0.00%) 93.19
everque 91370 ( 0.25%) 22485565 ( 0.09%) 246.09
unreal 137 ( 0.00%) 23658 ( 0.00%) 172.69
quake 41 ( 0.00%) 6378 ( 0.00%) 155.56
cuseeme 9 ( 0.00%) 1619 ( 0.00%) 179.89
other 9094044 ( 24.70%) 5485175932 ( 22.41%) 603.16
icmp 499732 ( 1.36%) 41823631 ( 0.17%) 83.69
ipip 372 ( 0.00%) 45522 ( 0.00%) 122.37
ipsec 1552 ( 0.00%) 505760 ( 0.00%) 325.88
ip6 2971515 ( 8.07%) 1729419758 ( 7.07%) 582.00
other 143126 ( 0.39%) 28597495 ( 0.12%) 199.81
frag 1502 ( 0.00%) 1591331 ( 0.01%) 1059.47
ip6 50018 ( 0.14%) 9811657 ( 0.04%) 196.16
tcp6 12246 ( 0.03%) 2510328 ( 0.01%) 204.99
http(s) 382 ( 0.00%) 371496 ( 0.00%) 972.50
http(c) 2778 ( 0.01%) 255288 ( 0.00%) 91.90
smtp 102 ( 0.00%) 24432 ( 0.00%) 239.53
ftp 1860 ( 0.01%) 187982 ( 0.00%) 101.07
imap 478 ( 0.00%) 54489 ( 0.00%) 113.99
ssh 1675 ( 0.00%) 143738 ( 0.00%) 85.81
dns 127 ( 0.00%) 44894 ( 0.00%) 353.50
bgp 98 ( 0.00%) 13522 ( 0.00%) 137.98
other 4746 ( 0.01%) 1414487 ( 0.01%) 298.04
udp6 31533 ( 0.09%) 6496817 ( 0.03%) 206.03
dns 31293 ( 0.08%) 6455990 ( 0.03%) 206.31
other 240 ( 0.00%) 40827 ( 0.00%) 170.11
icmp6 6151 ( 0.02%) 748671 ( 0.00%) 121.72
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 58 ( 0.00%) 51761 ( 0.00%) 892.43
tcpdump file: 201004131500.dump.gz (944.04 MB)