Traffic Trace Info
DumpFile: 201004131945.dump
FileSize: 2226.93MB
Id: 201004131945
StartTime: Tue Apr 13 19:45:01 2010
EndTime: Tue Apr 13 20:00:01 2010
TotalTime: 900.36 seconds
TotalCapSize: 1740.19MB CapLen: 96 bytes
# of packets: 31898406 (19868.23MB)
AvgRate: 185.13Mbps stddev:13.51M
IP flow (unique src/dst pair) Information
# of flows: 1278631 (avg. 24.95 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.4% 0.8% 0.8% 0.7% 0.7% 0.6% 0.6% 0.6% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 698982
Top 10 bandwidth usage (bytes/total in %):
13.4% 7.6% 7.6% 6.3% 5.7% 4.9% 4.8% 2.7% 2.3% 1.9%
# of IPv6 addresses: 1067
Top 10 bandwidth usage (bytes/total in %):
22.2% 14.0% 6.0% 6.0% 4.9% 4.8% 4.0% 4.0% 3.9% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004131945.pktlen.png)
detailed numbers
[ 32- 63]: 6241182
[ 64- 127]: 8145194
[ 128- 255]: 2131014
[ 256- 511]: 1858339
[ 512- 1023]: 986521
[ 1024- 2047]: 12536156
Protocol Breakdown
![[protocol breakdown chart]](201004131945.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31898406 (100.00%) 20833346119 (100.00%) 653.12
ip 31844271 ( 99.83%) 20823474893 ( 99.95%) 653.92
tcp 20190492 ( 63.30%) 15427811617 ( 74.05%) 764.11
http(s) 9112159 ( 28.57%) 12446467014 ( 59.74%) 1365.92
http(c) 5854070 ( 18.35%) 833379093 ( 4.00%) 142.36
squid 320552 ( 1.00%) 95463346 ( 0.46%) 297.81
smtp 367944 ( 1.15%) 95971524 ( 0.46%) 260.83
ftp 18788 ( 0.06%) 1750215 ( 0.01%) 93.16
pop3 22063 ( 0.07%) 17717227 ( 0.09%) 803.03
imap 4073 ( 0.01%) 2978992 ( 0.01%) 731.40
telnet 11746 ( 0.04%) 921384 ( 0.00%) 78.44
ssh 235896 ( 0.74%) 34659406 ( 0.17%) 146.93
dns 57099 ( 0.18%) 3896671 ( 0.02%) 68.24
bgp 175 ( 0.00%) 69834 ( 0.00%) 399.05
napster 30 ( 0.00%) 17063 ( 0.00%) 568.77
realaud 35 ( 0.00%) 2273 ( 0.00%) 64.94
rtsp 170660 ( 0.54%) 17953173 ( 0.09%) 105.20
icecast 5836 ( 0.02%) 357106 ( 0.00%) 61.19
hotline 3 ( 0.00%) 186 ( 0.00%) 62.00
other 4009357 ( 12.57%) 1876206750 ( 9.01%) 467.96
udp 7863363 ( 24.65%) 3704514677 ( 17.78%) 471.11
dns 1037974 ( 3.25%) 230362409 ( 1.11%) 221.93
realaud 985 ( 0.00%) 67691 ( 0.00%) 68.72
halflif 64 ( 0.00%) 6688 ( 0.00%) 104.50
starcra 269 ( 0.00%) 26457 ( 0.00%) 98.35
everque 591 ( 0.00%) 106416 ( 0.00%) 180.06
unreal 74 ( 0.00%) 12346 ( 0.00%) 166.84
quake 63 ( 0.00%) 6246 ( 0.00%) 99.14
cuseeme 3 ( 0.00%) 272 ( 0.00%) 90.67
other 6822017 ( 21.39%) 3473378260 ( 16.67%) 509.14
icmp 896941 ( 2.81%) 95709026 ( 0.46%) 106.71
ipip 323 ( 0.00%) 38630 ( 0.00%) 119.60
ipsec 1493 ( 0.00%) 513166 ( 0.00%) 343.71
ip6 2862144 ( 8.97%) 1588848324 ( 7.63%) 555.13
other 29515 ( 0.09%) 6039453 ( 0.03%) 204.62
frag 5714 ( 0.02%) 5540180 ( 0.03%) 969.58
ip6 54135 ( 0.17%) 9871226 ( 0.05%) 182.34
tcp6 16909 ( 0.05%) 2233868 ( 0.01%) 132.11
http(s) 122 ( 0.00%) 127888 ( 0.00%) 1048.26
http(c) 4656 ( 0.01%) 421129 ( 0.00%) 90.45
smtp 203 ( 0.00%) 61488 ( 0.00%) 302.90
ftp 2761 ( 0.01%) 284566 ( 0.00%) 103.07
imap 253 ( 0.00%) 29135 ( 0.00%) 115.16
ssh 4385 ( 0.01%) 797826 ( 0.00%) 181.94
dns 136 ( 0.00%) 48935 ( 0.00%) 359.82
bgp 112 ( 0.00%) 16248 ( 0.00%) 145.07
other 4281 ( 0.01%) 446653 ( 0.00%) 104.33
udp6 30330 ( 0.10%) 6419514 ( 0.03%) 211.66
dns 29702 ( 0.09%) 6306192 ( 0.03%) 212.32
quake 1 ( 0.00%) 102 ( 0.00%) 102.00
other 627 ( 0.00%) 113220 ( 0.00%) 180.57
icmp6 6468 ( 0.02%) 777212 ( 0.00%) 120.16
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 398 ( 0.00%) 436552 ( 0.00%) 1096.86
tcpdump file: 201004131945.dump.gz (828.15 MB)