Traffic Trace Info
DumpFile: 201004131830.dump
FileSize: 2591.08MB
Id: 201004131830
StartTime: Tue Apr 13 18:30:00 2010
EndTime: Tue Apr 13 18:45:01 2010
TotalTime: 900.67 seconds
TotalCapSize: 2029.25MB CapLen: 96 bytes
# of packets: 36819725 (26355.17MB)
AvgRate: 245.49Mbps stddev:35.76M
IP flow (unique src/dst pair) Information
# of flows: 1092467 (avg. 33.70 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.6% 2.0% 1.1% 0.7% 0.7% 0.6% 0.6% 0.6% 0.5% 0.4%
IP address Information
# of IPv4 addresses: 586665
Top 10 bandwidth usage (bytes/total in %):
13.6% 13.6% 12.4% 6.1% 5.2% 3.9% 3.7% 3.6% 2.7% 2.6%
# of IPv6 addresses: 1057
Top 10 bandwidth usage (bytes/total in %):
18.7% 8.1% 6.4% 6.2% 5.3% 5.2% 5.2% 5.1% 3.6% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004131830.pktlen.png)
detailed numbers
[ 32- 63]: 6095063
[ 64- 127]: 8535690
[ 128- 255]: 2405283
[ 256- 511]: 1745602
[ 512- 1023]: 939464
[ 1024- 2047]: 17098623
Protocol Breakdown
![[protocol breakdown chart]](201004131830.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36819725 (100.00%) 27635398206 (100.00%) 750.56
ip 36765706 ( 99.85%) 27626153084 ( 99.97%) 751.41
tcp 24406537 ( 66.29%) 21181960099 ( 76.65%) 867.88
http(s) 9844144 ( 26.74%) 13362969727 ( 48.35%) 1357.45
http(c) 6218247 ( 16.89%) 968920608 ( 3.51%) 155.82
squid 299860 ( 0.81%) 95651264 ( 0.35%) 318.99
smtp 455640 ( 1.24%) 130549016 ( 0.47%) 286.52
ftp 14884 ( 0.04%) 1383309 ( 0.01%) 92.94
pop3 17952 ( 0.05%) 9816089 ( 0.04%) 546.80
imap 5279 ( 0.01%) 4032384 ( 0.01%) 763.85
telnet 787 ( 0.00%) 86714 ( 0.00%) 110.18
ssh 365214 ( 0.99%) 50496350 ( 0.18%) 138.27
dns 52782 ( 0.14%) 3690439 ( 0.01%) 69.92
bgp 638 ( 0.00%) 437085 ( 0.00%) 685.09
napster 866 ( 0.00%) 537514 ( 0.00%) 620.69
realaud 136 ( 0.00%) 10080 ( 0.00%) 74.12
rtsp 254327 ( 0.69%) 23464731 ( 0.08%) 92.26
icecast 846 ( 0.00%) 196382 ( 0.00%) 232.13
other 6874931 ( 18.67%) 6529718167 ( 23.63%) 949.79
udp 8393032 ( 22.79%) 4624167783 ( 16.73%) 550.95
dns 870918 ( 2.37%) 148976174 ( 0.54%) 171.06
realaud 128 ( 0.00%) 17323 ( 0.00%) 135.34
halflif 41 ( 0.00%) 4583 ( 0.00%) 111.78
starcra 244 ( 0.00%) 23600 ( 0.00%) 96.72
everque 1554 ( 0.00%) 250657 ( 0.00%) 161.30
unreal 143 ( 0.00%) 25609 ( 0.00%) 179.08
quake 49 ( 0.00%) 4481 ( 0.00%) 91.45
cuseeme 8 ( 0.00%) 1078 ( 0.00%) 134.75
other 7519597 ( 20.42%) 4474689539 ( 16.19%) 595.07
icmp 866264 ( 2.35%) 103746560 ( 0.38%) 119.76
ipip 355 ( 0.00%) 42716 ( 0.00%) 120.33
ipsec 1470 ( 0.00%) 484260 ( 0.00%) 329.43
ip6 3045392 ( 8.27%) 1707621369 ( 6.18%) 560.72
other 52656 ( 0.14%) 8130297 ( 0.03%) 154.40
frag 1857 ( 0.01%) 1832578 ( 0.01%) 986.85
ip6 54017 ( 0.15%) 9245002 ( 0.03%) 171.15
tcp6 17145 ( 0.05%) 2078951 ( 0.01%) 121.26
http(s) 199 ( 0.00%) 190138 ( 0.00%) 955.47
http(c) 4799 ( 0.01%) 433764 ( 0.00%) 90.39
smtp 422 ( 0.00%) 212794 ( 0.00%) 504.25
ftp 2737 ( 0.01%) 282663 ( 0.00%) 103.27
imap 663 ( 0.00%) 69470 ( 0.00%) 104.78
ssh 3213 ( 0.01%) 271866 ( 0.00%) 84.61
dns 187 ( 0.00%) 64715 ( 0.00%) 346.07
bgp 105 ( 0.00%) 13201 ( 0.00%) 125.72
other 4820 ( 0.01%) 540340 ( 0.00%) 112.10
udp6 30502 ( 0.08%) 6350679 ( 0.02%) 208.21
dns 29828 ( 0.08%) 6232396 ( 0.02%) 208.94
other 674 ( 0.00%) 118283 ( 0.00%) 175.49
icmp6 6292 ( 0.02%) 768159 ( 0.00%) 122.09
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 48 ( 0.00%) 43133 ( 0.00%) 898.60
tcpdump file: 201004131830.dump.gz (936.69 MB)