Traffic Trace Info
DumpFile: 201004131645.dump
FileSize: 2785.02MB
Id: 201004131645
StartTime: Tue Apr 13 16:45:01 2010
EndTime: Tue Apr 13 17:00:00 2010
TotalTime: 899.76 seconds
TotalCapSize: -1926.70MB CapLen: 96 bytes
# of packets: 40347062 (25538.32MB)
AvgRate: 238.14Mbps stddev:19.13M
IP flow (unique src/dst pair) Information
# of flows: 1248658 (avg. 32.31 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.6% 1.3% 1.2% 1.1% 0.9% 0.7% 0.7% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 638200
Top 10 bandwidth usage (bytes/total in %):
16.4% 6.4% 4.5% 4.0% 3.6% 3.5% 3.5% 3.5% 2.9% 2.4%
# of IPv6 addresses: 1108
Top 10 bandwidth usage (bytes/total in %):
17.1% 13.6% 11.7% 11.6% 8.1% 5.9% 5.1% 4.3% 4.0% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004131645.pktlen.png)
detailed numbers
[ 32- 63]: 7315097
[ 64- 127]: 10391836
[ 128- 255]: 3145693
[ 256- 511]: 1946037
[ 512- 1023]: 1311004
[ 1024- 2047]: 16237395
Protocol Breakdown
![[protocol breakdown chart]](201004131645.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40347062 (100.00%) 26778870711 (100.00%) 663.71
ip 40280007 ( 99.83%) 26767185475 ( 99.96%) 664.53
tcp 25203866 ( 62.47%) 18253222337 ( 68.16%) 724.22
http(s) 10290995 ( 25.51%) 13728710547 ( 51.27%) 1334.05
http(c) 7266207 ( 18.01%) 1219125700 ( 4.55%) 167.78
squid 332525 ( 0.82%) 110930954 ( 0.41%) 333.60
smtp 386400 ( 0.96%) 129403526 ( 0.48%) 334.90
ftp 15329 ( 0.04%) 1396401 ( 0.01%) 91.10
pop3 25959 ( 0.06%) 9004487 ( 0.03%) 346.87
imap 3400 ( 0.01%) 888642 ( 0.00%) 261.37
telnet 604 ( 0.00%) 73048 ( 0.00%) 120.94
ssh 863681 ( 2.14%) 108242850 ( 0.40%) 125.33
dns 58535 ( 0.15%) 6537589 ( 0.02%) 111.69
bgp 141 ( 0.00%) 47300 ( 0.00%) 335.46
napster 773 ( 0.00%) 424128 ( 0.00%) 548.68
realaud 25 ( 0.00%) 2004 ( 0.00%) 80.16
rtsp 83915 ( 0.21%) 13277709 ( 0.05%) 158.23
icecast 1031 ( 0.00%) 190752 ( 0.00%) 185.02
hotline 10 ( 0.00%) 921 ( 0.00%) 92.10
other 5874334 ( 14.56%) 2924965659 ( 10.92%) 497.92
udp 11392967 ( 28.24%) 6714229775 ( 25.07%) 589.33
dns 809401 ( 2.01%) 134160760 ( 0.50%) 165.75
realaud 57 ( 0.00%) 8528 ( 0.00%) 149.61
halflif 75 ( 0.00%) 6620 ( 0.00%) 88.27
starcra 220 ( 0.00%) 23534 ( 0.00%) 106.97
everque 2713 ( 0.01%) 438651 ( 0.00%) 161.68
unreal 344 ( 0.00%) 48296 ( 0.00%) 140.40
quake 53 ( 0.00%) 5068 ( 0.00%) 95.62
cuseeme 7 ( 0.00%) 976 ( 0.00%) 139.43
other 10578322 ( 26.22%) 6579270918 ( 24.57%) 621.96
icmp 605742 ( 1.50%) 47405579 ( 0.18%) 78.26
ipip 322 ( 0.00%) 38934 ( 0.00%) 120.91
ipsec 1443 ( 0.00%) 476242 ( 0.00%) 330.04
ip6 2944421 ( 7.30%) 1727836322 ( 6.45%) 586.82
other 131246 ( 0.33%) 23976286 ( 0.09%) 182.68
frag 7325 ( 0.02%) 6083735 ( 0.02%) 830.54
ip6 67055 ( 0.17%) 11685236 ( 0.04%) 174.26
tcp6 25809 ( 0.06%) 3001717 ( 0.01%) 116.31
http(s) 403 ( 0.00%) 537255 ( 0.00%) 1333.14
http(c) 4356 ( 0.01%) 385456 ( 0.00%) 88.49
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 223 ( 0.00%) 89884 ( 0.00%) 403.07
ftp 1698 ( 0.00%) 171365 ( 0.00%) 100.92
imap 288 ( 0.00%) 33092 ( 0.00%) 114.90
ssh 2704 ( 0.01%) 234524 ( 0.00%) 86.73
dns 281 ( 0.00%) 72059 ( 0.00%) 256.44
bgp 110 ( 0.00%) 14711 ( 0.00%) 133.74
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 15743 ( 0.04%) 1463149 ( 0.01%) 92.94
udp6 34898 ( 0.09%) 7807745 ( 0.03%) 223.73
dns 34297 ( 0.09%) 7702702 ( 0.03%) 224.59
other 601 ( 0.00%) 105043 ( 0.00%) 174.78
icmp6 6205 ( 0.02%) 772200 ( 0.00%) 124.45
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 112 ( 0.00%) 99358 ( 0.00%) 887.12
tcpdump file: 201004131645.dump.gz (1026.25 MB)