Traffic Trace Info
DumpFile: 201004131715.dump
FileSize: 2670.24MB
Id: 201004131715
StartTime: Tue Apr 13 17:15:01 2010
EndTime: Tue Apr 13 17:30:01 2010
TotalTime: 899.55 seconds
TotalCapSize: -2008.43MB CapLen: 96 bytes
# of packets: 38185393 (23292.13MB)
AvgRate: 217.21Mbps stddev:20.01M
IP flow (unique src/dst pair) Information
# of flows: 1234084 (avg. 30.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.5% 0.9% 0.8% 0.8% 0.8% 0.7% 0.7% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 653079
Top 10 bandwidth usage (bytes/total in %):
16.8% 6.7% 5.8% 4.8% 4.7% 4.4% 3.6% 3.0% 2.3% 2.3%
# of IPv6 addresses: 1092
Top 10 bandwidth usage (bytes/total in %):
42.7% 42.7% 11.7% 6.2% 4.2% 4.0% 2.6% 2.6% 2.1% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004131715.pktlen.png)
detailed numbers
[ 32- 63]: 7039116
[ 64- 127]: 10478094
[ 128- 255]: 2974660
[ 256- 511]: 1910436
[ 512- 1023]: 1051253
[ 1024- 2047]: 14731834
Protocol Breakdown
![[protocol breakdown chart]](201004131715.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38185393 (100.00%) 24423568181 (100.00%) 639.60
ip 38123321 ( 99.84%) 24405568370 ( 99.93%) 640.17
tcp 25144599 ( 65.85%) 17585373730 ( 72.00%) 699.37
http(s) 10303558 ( 26.98%) 13896161464 ( 56.90%) 1348.68
http(c) 7336389 ( 19.21%) 1191992565 ( 4.88%) 162.48
squid 362501 ( 0.95%) 126712954 ( 0.52%) 349.55
smtp 490302 ( 1.28%) 176282112 ( 0.72%) 359.54
nntp 5 ( 0.00%) 310 ( 0.00%) 62.00
ftp 10108 ( 0.03%) 1383572 ( 0.01%) 136.88
pop3 18804 ( 0.05%) 7562029 ( 0.03%) 402.15
imap 3726 ( 0.01%) 575543 ( 0.00%) 154.47
telnet 748 ( 0.00%) 81223 ( 0.00%) 108.59
ssh 1757125 ( 4.60%) 233443918 ( 0.96%) 132.86
dns 53733 ( 0.14%) 3670452 ( 0.02%) 68.31
bgp 142 ( 0.00%) 48972 ( 0.00%) 344.87
napster 82 ( 0.00%) 11003 ( 0.00%) 134.18
realaud 5726 ( 0.01%) 348988 ( 0.00%) 60.95
rtsp 194788 ( 0.51%) 58894817 ( 0.24%) 302.35
icecast 1521 ( 0.00%) 228111 ( 0.00%) 149.97
hotline 1 ( 0.00%) 62 ( 0.00%) 62.00
other 4605335 ( 12.06%) 1887975335 ( 7.73%) 409.95
udp 9431208 ( 24.70%) 5089138622 ( 20.84%) 539.61
dns 841249 ( 2.20%) 140548890 ( 0.58%) 167.07
realaud 86 ( 0.00%) 14759 ( 0.00%) 171.62
halflif 50 ( 0.00%) 5773 ( 0.00%) 115.46
starcra 187 ( 0.00%) 19709 ( 0.00%) 105.40
everque 2171 ( 0.01%) 377502 ( 0.00%) 173.88
unreal 166 ( 0.00%) 32693 ( 0.00%) 196.95
quake 58 ( 0.00%) 6834 ( 0.00%) 117.83
cuseeme 11 ( 0.00%) 1323 ( 0.00%) 120.27
other 8586943 ( 22.49%) 4947988335 ( 20.26%) 576.22
icmp 595285 ( 1.56%) 62328260 ( 0.26%) 104.70
ipip 332 ( 0.00%) 40992 ( 0.00%) 123.47
ipsec 1390 ( 0.00%) 456228 ( 0.00%) 328.22
ip6 2895890 ( 7.58%) 1648644432 ( 6.75%) 569.30
other 54617 ( 0.14%) 19586106 ( 0.08%) 358.61
frag 1573 ( 0.00%) 1690366 ( 0.01%) 1074.61
ip6 62072 ( 0.16%) 17999811 ( 0.07%) 289.98
tcp6 24843 ( 0.07%) 10813499 ( 0.04%) 435.27
http(s) 1079 ( 0.00%) 1228624 ( 0.01%) 1138.67
http(c) 4706 ( 0.01%) 463160 ( 0.00%) 98.42
smtp 252 ( 0.00%) 109577 ( 0.00%) 434.83
ftp 1993 ( 0.01%) 202330 ( 0.00%) 101.52
imap 267 ( 0.00%) 30829 ( 0.00%) 115.46
ssh 7871 ( 0.02%) 7899806 ( 0.03%) 1003.66
dns 94 ( 0.00%) 21473 ( 0.00%) 228.44
bgp 108 ( 0.00%) 14194 ( 0.00%) 131.43
icecast 11 ( 0.00%) 1786 ( 0.00%) 162.36
other 8462 ( 0.02%) 841720 ( 0.00%) 99.47
udp6 31025 ( 0.08%) 6358252 ( 0.03%) 204.94
dns 30461 ( 0.08%) 6264814 ( 0.03%) 205.67
halflif 1 ( 0.00%) 111 ( 0.00%) 111.00
other 563 ( 0.00%) 93327 ( 0.00%) 165.77
icmp6 6083 ( 0.02%) 735242 ( 0.00%) 120.87
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 91 ( 0.00%) 88738 ( 0.00%) 975.14
tcpdump file: 201004131715.dump.gz (997.78 MB)