Traffic Trace Info
DumpFile: 201004131915.dump
FileSize: 2582.62MB
Id: 201004131915
StartTime: Tue Apr 13 19:15:01 2010
EndTime: Tue Apr 13 19:30:00 2010
TotalTime: 899.50 seconds
TotalCapSize: 2018.63MB CapLen: 96 bytes
# of packets: 36960750 (24794.30MB)
AvgRate: 231.27Mbps stddev:32.95M
IP flow (unique src/dst pair) Information
# of flows: 1081384 (avg. 34.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.1% 1.2% 1.2% 1.0% 1.0% 0.8% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 580542
Top 10 bandwidth usage (bytes/total in %):
10.1% 6.6% 6.4% 6.2% 5.3% 4.8% 4.4% 4.0% 2.8% 2.8%
# of IPv6 addresses: 1117
Top 10 bandwidth usage (bytes/total in %):
17.0% 15.5% 9.9% 9.9% 7.2% 4.8% 4.0% 3.9% 2.8% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004131915.pktlen.png)
detailed numbers
[ 32- 63]: 7001256
[ 64- 127]: 8924696
[ 128- 255]: 2241943
[ 256- 511]: 1842187
[ 512- 1023]: 1034584
[ 1024- 2047]: 15916084
Protocol Breakdown
![[protocol breakdown chart]](201004131915.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36960750 (100.00%) 25998707264 (100.00%) 703.41
ip 36900338 ( 99.84%) 25986440708 ( 99.95%) 704.23
tcp 24965464 ( 67.55%) 20342659803 ( 78.24%) 814.83
http(s) 11707550 ( 31.68%) 16269484639 ( 62.58%) 1389.66
http(c) 7150886 ( 19.35%) 974958086 ( 3.75%) 136.34
squid 293289 ( 0.79%) 92607434 ( 0.36%) 315.75
smtp 491391 ( 1.33%) 140193193 ( 0.54%) 285.30
ftp 18833 ( 0.05%) 2129665 ( 0.01%) 113.08
pop3 23149 ( 0.06%) 11047694 ( 0.04%) 477.24
imap 1800 ( 0.00%) 217990 ( 0.00%) 121.11
telnet 6547 ( 0.02%) 3855778 ( 0.01%) 588.94
ssh 261228 ( 0.71%) 38149862 ( 0.15%) 146.04
dns 55008 ( 0.15%) 3790139 ( 0.01%) 68.90
bgp 126 ( 0.00%) 41678 ( 0.00%) 330.78
napster 81 ( 0.00%) 6170 ( 0.00%) 76.17
realaud 6 ( 0.00%) 380 ( 0.00%) 63.33
rtsp 204266 ( 0.55%) 111694164 ( 0.43%) 546.81
icecast 5932 ( 0.02%) 376192 ( 0.00%) 63.42
other 4745363 ( 12.84%) 2694106199 ( 10.36%) 567.73
udp 7993066 ( 21.63%) 3771795526 ( 14.51%) 471.88
dns 929727 ( 2.52%) 184990713 ( 0.71%) 198.97
realaud 906 ( 0.00%) 68534 ( 0.00%) 75.64
halflif 109 ( 0.00%) 12976 ( 0.00%) 119.05
starcra 245 ( 0.00%) 25528 ( 0.00%) 104.20
everque 542 ( 0.00%) 108685 ( 0.00%) 200.53
unreal 154 ( 0.00%) 30439 ( 0.00%) 197.66
quake 36 ( 0.00%) 4182 ( 0.00%) 116.17
cuseeme 2 ( 0.00%) 204 ( 0.00%) 102.00
other 7059606 ( 19.10%) 3585855898 ( 13.79%) 507.94
icmp 806303 ( 2.18%) 89034619 ( 0.34%) 110.42
ipip 318 ( 0.00%) 37636 ( 0.00%) 118.35
ipsec 1376 ( 0.00%) 451456 ( 0.00%) 328.09
ip6 3007087 ( 8.14%) 1685257078 ( 6.48%) 560.43
other 126724 ( 0.34%) 97204590 ( 0.37%) 767.06
frag 7388 ( 0.02%) 7135281 ( 0.03%) 965.79
ip6 60412 ( 0.16%) 12266556 ( 0.05%) 203.05
tcp6 17120 ( 0.05%) 2383736 ( 0.01%) 139.24
http(s) 538 ( 0.00%) 571491 ( 0.00%) 1062.25
http(c) 5014 ( 0.01%) 496453 ( 0.00%) 99.01
smtp 383 ( 0.00%) 134352 ( 0.00%) 350.79
ftp 2738 ( 0.01%) 282310 ( 0.00%) 103.11
imap 275 ( 0.00%) 31912 ( 0.00%) 116.04
ssh 3423 ( 0.01%) 323018 ( 0.00%) 94.37
dns 277 ( 0.00%) 83662 ( 0.00%) 302.03
bgp 107 ( 0.00%) 13904 ( 0.00%) 129.94
other 4365 ( 0.01%) 446634 ( 0.00%) 102.32
udp6 36517 ( 0.10%) 8621106 ( 0.03%) 236.08
dns 32089 ( 0.09%) 7308903 ( 0.03%) 227.77
quake 1 ( 0.00%) 120 ( 0.00%) 120.00
other 4427 ( 0.01%) 1312083 ( 0.01%) 296.38
icmp6 6195 ( 0.02%) 752303 ( 0.00%) 121.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 550 ( 0.00%) 505331 ( 0.00%) 918.78
tcpdump file: 201004131915.dump.gz (944.26 MB)