Traffic Trace Info
DumpFile: 201004131615.dump
FileSize: 2770.81MB
Id: 201004131615
StartTime: Tue Apr 13 16:15:00 2010
EndTime: Tue Apr 13 16:30:00 2010
TotalTime: 899.96 seconds
TotalCapSize: -1938.69MB CapLen: 96 bytes
# of packets: 40204173 (25636.16MB)
AvgRate: 238.98Mbps stddev:22.41M
IP flow (unique src/dst pair) Information
# of flows: 1075776 (avg. 37.37 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 1.1% 1.1% 1.1% 1.0% 0.9% 0.8% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 561268
Top 10 bandwidth usage (bytes/total in %):
15.5% 5.6% 5.2% 5.0% 4.5% 4.4% 4.2% 3.5% 3.2% 2.9%
# of IPv6 addresses: 1108
Top 10 bandwidth usage (bytes/total in %):
21.1% 8.4% 8.4% 8.3% 5.9% 5.8% 5.6% 4.7% 4.2% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004131615.pktlen.png)
detailed numbers
[ 32- 63]: 7005690
[ 64- 127]: 10473319
[ 128- 255]: 3335824
[ 256- 511]: 1959285
[ 512- 1023]: 1088979
[ 1024- 2047]: 16341076
Protocol Breakdown
![[protocol breakdown chart]](201004131615.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40204173 (100.00%) 26881464670 (100.00%) 668.62
ip 40148649 ( 99.86%) 26871051725 ( 99.96%) 669.29
tcp 25118445 ( 62.48%) 18638350053 ( 69.34%) 742.02
http(s) 11063586 ( 27.52%) 14795239839 ( 55.04%) 1337.29
http(c) 7723202 ( 19.21%) 1587402548 ( 5.91%) 205.54
squid 302218 ( 0.75%) 94835746 ( 0.35%) 313.80
smtp 493637 ( 1.23%) 163999355 ( 0.61%) 332.23
ftp 33405 ( 0.08%) 10802315 ( 0.04%) 323.37
pop3 17691 ( 0.04%) 6974077 ( 0.03%) 394.22
imap 4345 ( 0.01%) 768199 ( 0.00%) 176.80
telnet 445 ( 0.00%) 53625 ( 0.00%) 120.51
ssh 1392483 ( 3.46%) 184558846 ( 0.69%) 132.54
dns 52062 ( 0.13%) 3571041 ( 0.01%) 68.59
bgp 165 ( 0.00%) 57681 ( 0.00%) 349.58
napster 23 ( 0.00%) 2432 ( 0.00%) 105.74
realaud 24 ( 0.00%) 2755 ( 0.00%) 114.79
rtsp 136672 ( 0.34%) 38076750 ( 0.14%) 278.60
icecast 1512 ( 0.00%) 420981 ( 0.00%) 278.43
hotline 22 ( 0.00%) 9608 ( 0.00%) 436.73
other 3896952 ( 9.69%) 1751574195 ( 6.52%) 449.47
udp 11529664 ( 28.68%) 6630123526 ( 24.66%) 575.05
dns 832985 ( 2.07%) 138205547 ( 0.51%) 165.92
realaud 86 ( 0.00%) 15185 ( 0.00%) 176.57
halflif 52 ( 0.00%) 5098 ( 0.00%) 98.04
starcra 299 ( 0.00%) 30595 ( 0.00%) 102.32
everque 567 ( 0.00%) 113523 ( 0.00%) 200.22
unreal 360 ( 0.00%) 58257 ( 0.00%) 161.82
quake 52 ( 0.00%) 4555 ( 0.00%) 87.60
cuseeme 2 ( 0.00%) 179 ( 0.00%) 89.50
other 10694366 ( 26.60%) 6491412825 ( 24.15%) 606.99
icmp 549237 ( 1.37%) 43685141 ( 0.16%) 79.54
ipip 303 ( 0.00%) 36150 ( 0.00%) 119.31
ipsec 1466 ( 0.00%) 482860 ( 0.00%) 329.37
ip6 2785518 ( 6.93%) 1521689332 ( 5.66%) 546.29
other 164016 ( 0.41%) 36684663 ( 0.14%) 223.67
frag 5923 ( 0.01%) 5183560 ( 0.02%) 875.16
ip6 55524 ( 0.14%) 10412945 ( 0.04%) 187.54
tcp6 15090 ( 0.04%) 2704109 ( 0.01%) 179.20
http(s) 926 ( 0.00%) 1258400 ( 0.00%) 1358.96
http(c) 3296 ( 0.01%) 311250 ( 0.00%) 94.43
squid 17 ( 0.00%) 1434 ( 0.00%) 84.35
smtp 151 ( 0.00%) 50463 ( 0.00%) 334.19
ftp 2549 ( 0.01%) 259956 ( 0.00%) 101.98
imap 309 ( 0.00%) 36134 ( 0.00%) 116.94
ssh 1771 ( 0.00%) 154262 ( 0.00%) 87.10
dns 113 ( 0.00%) 41589 ( 0.00%) 368.04
bgp 116 ( 0.00%) 15315 ( 0.00%) 132.03
other 5842 ( 0.01%) 575306 ( 0.00%) 98.48
udp6 33920 ( 0.08%) 6838215 ( 0.03%) 201.60
dns 33153 ( 0.08%) 6709762 ( 0.02%) 202.39
other 767 ( 0.00%) 128453 ( 0.00%) 167.47
icmp6 6402 ( 0.02%) 795828 ( 0.00%) 124.31
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 82 ( 0.00%) 70713 ( 0.00%) 862.35
tcpdump file: 201004131615.dump.gz (1023.51 MB)