Traffic Trace Info
DumpFile: 201004131730.dump
FileSize: 2633.64MB
Id: 201004131730
StartTime: Tue Apr 13 17:30:01 2010
EndTime: Tue Apr 13 17:45:01 2010
TotalTime: 900.20 seconds
TotalCapSize: -2040.62MB CapLen: 96 bytes
# of packets: 37896618 (23774.24MB)
AvgRate: 221.56Mbps stddev:26.36M
IP flow (unique src/dst pair) Information
# of flows: 1169253 (avg. 32.41 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.8% 1.3% 1.2% 0.9% 0.9% 0.8% 0.8% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 586218
Top 10 bandwidth usage (bytes/total in %):
15.0% 9.8% 6.9% 6.5% 4.9% 4.2% 3.8% 3.7% 3.2% 2.7%
# of IPv6 addresses: 1099
Top 10 bandwidth usage (bytes/total in %):
59.5% 59.4% 7.5% 5.0% 3.6% 2.4% 2.4% 2.2% 1.9% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004131730.pktlen.png)
detailed numbers
[ 32- 63]: 7840066
[ 64- 127]: 9261148
[ 128- 255]: 2696975
[ 256- 511]: 1870685
[ 512- 1023]: 1229731
[ 1024- 2047]: 14998013
Protocol Breakdown
![[protocol breakdown chart]](201004131730.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37896618 (100.00%) 24929092771 (100.00%) 657.82
ip 37830400 ( 99.83%) 24902314956 ( 99.89%) 658.26
tcp 25062840 ( 66.13%) 18345690220 ( 73.59%) 731.99
http(s) 10561591 ( 27.87%) 14220641240 ( 57.04%) 1346.45
http(c) 7865346 ( 20.75%) 1426098563 ( 5.72%) 181.31
squid 296062 ( 0.78%) 78117084 ( 0.31%) 263.85
smtp 496317 ( 1.31%) 169926295 ( 0.68%) 342.37
ftp 20899 ( 0.06%) 2022524 ( 0.01%) 96.78
pop3 19572 ( 0.05%) 7583419 ( 0.03%) 387.46
imap 3097 ( 0.01%) 516892 ( 0.00%) 166.90
telnet 646 ( 0.00%) 77512 ( 0.00%) 119.99
ssh 520401 ( 1.37%) 67602174 ( 0.27%) 129.90
dns 52418 ( 0.14%) 3654716 ( 0.01%) 69.72
bgp 147 ( 0.00%) 52370 ( 0.00%) 356.26
napster 791 ( 0.00%) 401439 ( 0.00%) 507.51
realaud 8 ( 0.00%) 512 ( 0.00%) 64.00
rtsp 308335 ( 0.81%) 75662012 ( 0.30%) 245.39
icecast 1195 ( 0.00%) 159980 ( 0.00%) 133.87
hotline 26 ( 0.00%) 1884 ( 0.00%) 72.46
other 4915987 ( 12.97%) 2293171484 ( 9.20%) 466.47
udp 9158135 ( 24.17%) 4848491013 ( 19.45%) 529.42
dns 853612 ( 2.25%) 142899516 ( 0.57%) 167.41
realaud 343 ( 0.00%) 29156 ( 0.00%) 85.00
halflif 27 ( 0.00%) 3239 ( 0.00%) 119.96
starcra 193 ( 0.00%) 18939 ( 0.00%) 98.13
everque 2095 ( 0.01%) 329223 ( 0.00%) 157.15
unreal 153 ( 0.00%) 33188 ( 0.00%) 216.92
quake 47 ( 0.00%) 3979 ( 0.00%) 84.66
cuseeme 6 ( 0.00%) 557 ( 0.00%) 92.83
other 8301270 ( 21.91%) 4704966589 ( 18.87%) 566.78
icmp 685156 ( 1.81%) 78831248 ( 0.32%) 115.06
ipip 360 ( 0.00%) 41862 ( 0.00%) 116.28
ipsec 1433 ( 0.00%) 472358 ( 0.00%) 329.63
ip6 2912755 ( 7.69%) 1626437747 ( 6.52%) 558.38
other 9721 ( 0.03%) 2350508 ( 0.01%) 241.80
frag 1641 ( 0.00%) 1666077 ( 0.01%) 1015.28
ip6 66218 ( 0.17%) 26777815 ( 0.11%) 404.39
tcp6 27775 ( 0.07%) 18433773 ( 0.07%) 663.68
http(s) 11079 ( 0.03%) 16622071 ( 0.07%) 1500.32
http(c) 4766 ( 0.01%) 460246 ( 0.00%) 96.57
smtp 240 ( 0.00%) 87522 ( 0.00%) 364.68
ftp 2648 ( 0.01%) 269201 ( 0.00%) 101.66
imap 329 ( 0.00%) 38394 ( 0.00%) 116.70
ssh 3602 ( 0.01%) 347880 ( 0.00%) 96.58
dns 496 ( 0.00%) 119423 ( 0.00%) 240.77
bgp 111 ( 0.00%) 14259 ( 0.00%) 128.46
other 4504 ( 0.01%) 474777 ( 0.00%) 105.41
udp6 32225 ( 0.09%) 7535304 ( 0.03%) 233.83
dns 31806 ( 0.08%) 7464788 ( 0.03%) 234.70
other 419 ( 0.00%) 70516 ( 0.00%) 168.30
icmp6 6107 ( 0.02%) 733110 ( 0.00%) 120.04
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 81 ( 0.00%) 71548 ( 0.00%) 883.31
tcpdump file: 201004131730.dump.gz (961.59 MB)