Traffic Trace Info
DumpFile: 201004131845.dump
FileSize: 2474.28MB
Id: 201004131845
StartTime: Tue Apr 13 18:45:01 2010
EndTime: Tue Apr 13 19:00:01 2010
TotalTime: 899.65 seconds
TotalCapSize: 1933.09MB CapLen: 96 bytes
# of packets: 35460192 (23952.85MB)
AvgRate: 223.35Mbps stddev:26.73M
IP flow (unique src/dst pair) Information
# of flows: 1212409 (avg. 29.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 1.4% 1.1% 1.0% 0.9% 0.8% 0.7% 0.5% 0.5% 0.4%
IP address Information
# of IPv4 addresses: 684617
Top 10 bandwidth usage (bytes/total in %):
13.4% 7.0% 6.0% 4.9% 4.8% 4.8% 4.8% 4.1% 3.8% 2.6%
# of IPv6 addresses: 1071
Top 10 bandwidth usage (bytes/total in %):
18.4% 14.8% 14.4% 5.8% 5.5% 4.6% 4.4% 4.4% 4.2% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004131845.pktlen.png)
detailed numbers
[ 32- 63]: 6357661
[ 64- 127]: 8411141
[ 128- 255]: 2527138
[ 256- 511]: 1771043
[ 512- 1023]: 937182
[ 1024- 2047]: 15456027
Protocol Breakdown
![[protocol breakdown chart]](201004131845.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35460192 (100.00%) 25116385902 (100.00%) 708.30
ip 35401331 ( 99.83%) 25105584637 ( 99.96%) 709.17
tcp 22851351 ( 64.44%) 18575312302 ( 73.96%) 812.88
http(s) 10264338 ( 28.95%) 13910497060 ( 55.38%) 1355.23
http(c) 6235942 ( 17.59%) 963338766 ( 3.84%) 154.48
squid 334201 ( 0.94%) 125897872 ( 0.50%) 376.71
smtp 457030 ( 1.29%) 142053229 ( 0.57%) 310.82
ftp 16790 ( 0.05%) 2170781 ( 0.01%) 129.29
pop3 17231 ( 0.05%) 9961389 ( 0.04%) 578.11
imap 2665 ( 0.01%) 476468 ( 0.00%) 178.79
telnet 458 ( 0.00%) 49153 ( 0.00%) 107.32
ssh 367286 ( 1.04%) 123909826 ( 0.49%) 337.37
dns 53826 ( 0.15%) 3675972 ( 0.01%) 68.29
bgp 149 ( 0.00%) 49948 ( 0.00%) 335.22
napster 21 ( 0.00%) 4438 ( 0.00%) 211.33
realaud 353 ( 0.00%) 24599 ( 0.00%) 69.69
rtsp 179057 ( 0.50%) 18733053 ( 0.07%) 104.62
icecast 790 ( 0.00%) 61878 ( 0.00%) 78.33
other 4921205 ( 13.88%) 3274407330 ( 13.04%) 665.37
udp 8512198 ( 24.00%) 4660108045 ( 18.55%) 547.46
dns 825222 ( 2.33%) 136941952 ( 0.55%) 165.95
realaud 70 ( 0.00%) 11829 ( 0.00%) 168.99
halflif 121 ( 0.00%) 12886 ( 0.00%) 106.50
starcra 229 ( 0.00%) 22780 ( 0.00%) 99.48
everque 14173 ( 0.04%) 4546557 ( 0.02%) 320.79
unreal 112 ( 0.00%) 21459 ( 0.00%) 191.60
quake 45 ( 0.00%) 3693 ( 0.00%) 82.07
cuseeme 10 ( 0.00%) 1299 ( 0.00%) 129.90
other 7671814 ( 21.64%) 4518359501 ( 17.99%) 588.96
icmp 844846 ( 2.38%) 91330196 ( 0.36%) 108.10
ipip 312 ( 0.00%) 37000 ( 0.00%) 118.59
ipsec 1445 ( 0.00%) 473358 ( 0.00%) 327.58
ip6 3111242 ( 8.77%) 1764046812 ( 7.02%) 566.99
other 79937 ( 0.23%) 14276924 ( 0.06%) 178.60
frag 1733 ( 0.00%) 1690639 ( 0.01%) 975.56
ip6 58861 ( 0.17%) 10801265 ( 0.04%) 183.50
tcp6 22359 ( 0.06%) 3821809 ( 0.02%) 170.93
http(s) 203 ( 0.00%) 216884 ( 0.00%) 1068.39
http(c) 8912 ( 0.03%) 779980 ( 0.00%) 87.52
smtp 1936 ( 0.01%) 1666351 ( 0.01%) 860.72
ftp 2704 ( 0.01%) 279720 ( 0.00%) 103.45
imap 281 ( 0.00%) 32256 ( 0.00%) 114.79
ssh 3328 ( 0.01%) 301212 ( 0.00%) 90.51
dns 86 ( 0.00%) 19820 ( 0.00%) 230.47
bgp 103 ( 0.00%) 12770 ( 0.00%) 123.98
other 4806 ( 0.01%) 512816 ( 0.00%) 106.70
udp6 30237 ( 0.09%) 6138198 ( 0.02%) 203.00
dns 29623 ( 0.08%) 6033073 ( 0.02%) 203.66
other 614 ( 0.00%) 105125 ( 0.00%) 171.21
icmp6 6167 ( 0.02%) 777954 ( 0.00%) 126.15
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 68 ( 0.00%) 59224 ( 0.00%) 870.94
tcpdump file: 201004131845.dump.gz (900.44 MB)