Traffic Trace Info
DumpFile: 201004132000.dump
FileSize: 2185.76MB
Id: 201004132000
StartTime: Tue Apr 13 20:00:01 2010
EndTime: Tue Apr 13 20:15:01 2010
TotalTime: 899.76 seconds
TotalCapSize: 1706.41MB CapLen: 96 bytes
# of packets: 31414361 (19770.31MB)
AvgRate: 184.32Mbps stddev:12.63M
IP flow (unique src/dst pair) Information
# of flows: 1049133 (avg. 29.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.6% 0.9% 0.8% 0.7% 0.6% 0.5% 0.5% 0.4% 0.4% 0.4%
IP address Information
# of IPv4 addresses: 571990
Top 10 bandwidth usage (bytes/total in %):
14.4% 7.5% 7.5% 6.4% 6.1% 5.4% 3.4% 3.2% 2.5% 2.4%
# of IPv6 addresses: 1103
Top 10 bandwidth usage (bytes/total in %):
20.7% 20.7% 17.3% 11.6% 6.9% 4.7% 3.8% 3.7% 2.8% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004132000.pktlen.png)
detailed numbers
[ 32- 63]: 5886368
[ 64- 127]: 8064060
[ 128- 255]: 2210817
[ 256- 511]: 1817801
[ 512- 1023]: 875040
[ 1024- 2047]: 12560275
Protocol Breakdown
![[protocol breakdown chart]](201004132000.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31414361 (100.00%) 20730671437 (100.00%) 659.91
ip 31353695 ( 99.81%) 20717980176 ( 99.94%) 660.78
tcp 19444912 ( 61.90%) 15161098563 ( 73.13%) 779.69
http(s) 9006252 ( 28.67%) 12324954640 ( 59.45%) 1368.49
http(c) 5569505 ( 17.73%) 850319596 ( 4.10%) 152.67
squid 316802 ( 1.01%) 109250491 ( 0.53%) 344.85
smtp 394029 ( 1.25%) 93414724 ( 0.45%) 237.08
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 25314 ( 0.08%) 2446045 ( 0.01%) 96.63
pop3 18853 ( 0.06%) 10613079 ( 0.05%) 562.94
imap 2971 ( 0.01%) 871105 ( 0.00%) 293.20
telnet 413 ( 0.00%) 63790 ( 0.00%) 154.46
ssh 223167 ( 0.71%) 42823201 ( 0.21%) 191.89
dns 56892 ( 0.18%) 3920179 ( 0.02%) 68.91
bgp 620 ( 0.00%) 433951 ( 0.00%) 699.92
napster 58 ( 0.00%) 6837 ( 0.00%) 117.88
realaud 22 ( 0.00%) 2193 ( 0.00%) 99.68
rtsp 105329 ( 0.34%) 7848589 ( 0.04%) 74.51
icecast 5810 ( 0.02%) 367254 ( 0.00%) 63.21
hotline 9 ( 0.00%) 1194 ( 0.00%) 132.67
other 3718863 ( 11.84%) 1713761513 ( 8.27%) 460.83
udp 8228289 ( 26.19%) 3887154930 ( 18.75%) 472.41
dns 1063093 ( 3.38%) 238196759 ( 1.15%) 224.06
realaud 967 ( 0.00%) 65704 ( 0.00%) 67.95
halflif 40 ( 0.00%) 4281 ( 0.00%) 107.03
starcra 240 ( 0.00%) 23502 ( 0.00%) 97.92
everque 536 ( 0.00%) 101502 ( 0.00%) 189.37
unreal 102 ( 0.00%) 17251 ( 0.00%) 169.13
quake 59 ( 0.00%) 10217 ( 0.00%) 173.17
cuseeme 5 ( 0.00%) 475 ( 0.00%) 95.00
other 7162043 ( 22.80%) 3648238226 ( 17.60%) 509.39
icmp 810549 ( 2.58%) 99481585 ( 0.48%) 122.73
ipip 358 ( 0.00%) 44024 ( 0.00%) 122.97
ipsec 1402 ( 0.00%) 463468 ( 0.00%) 330.58
ip6 2839207 ( 9.04%) 1564513126 ( 7.55%) 551.04
other 28978 ( 0.09%) 5224480 ( 0.03%) 180.29
frag 5157 ( 0.02%) 4996796 ( 0.02%) 968.93
ip6 60666 ( 0.19%) 12691261 ( 0.06%) 209.20
tcp6 22070 ( 0.07%) 4689120 ( 0.02%) 212.47
http(s) 92 ( 0.00%) 56698 ( 0.00%) 616.28
http(c) 7307 ( 0.02%) 658973 ( 0.00%) 90.18
smtp 523 ( 0.00%) 199672 ( 0.00%) 381.78
ftp 2695 ( 0.01%) 281277 ( 0.00%) 104.37
imap 358 ( 0.00%) 42141 ( 0.00%) 117.71
ssh 3309 ( 0.01%) 286886 ( 0.00%) 86.70
dns 194 ( 0.00%) 53327 ( 0.00%) 274.88
bgp 128 ( 0.00%) 20808 ( 0.00%) 162.56
other 7464 ( 0.02%) 3089338 ( 0.01%) 413.90
udp6 31506 ( 0.10%) 6897737 ( 0.03%) 218.93
dns 31003 ( 0.10%) 6804698 ( 0.03%) 219.49
other 503 ( 0.00%) 93039 ( 0.00%) 184.97
icmp6 6738 ( 0.02%) 785475 ( 0.00%) 116.57
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 321 ( 0.00%) 314713 ( 0.00%) 980.41
tcpdump file: 201004132000.dump.gz (816.97 MB)