Traffic Trace Info
DumpFile: 201004132015.dump
FileSize: 2244.39MB
Id: 201004132015
StartTime: Tue Apr 13 20:15:01 2010
EndTime: Tue Apr 13 20:30:01 2010
TotalTime: 900.29 seconds
TotalCapSize: 1756.09MB CapLen: 96 bytes
# of packets: 32000891 (21337.76MB)
AvgRate: 198.82Mbps stddev:49.70M
IP flow (unique src/dst pair) Information
# of flows: 1083611 (avg. 29.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.0% 1.0% 1.0% 1.0% 1.0% 1.0% 1.0% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 604839
Top 10 bandwidth usage (bytes/total in %):
14.0% 11.3% 7.3% 7.0% 5.9% 5.7% 5.7% 3.9% 2.6% 2.1%
# of IPv6 addresses: 1023
Top 10 bandwidth usage (bytes/total in %):
38.3% 38.3% 14.3% 5.6% 5.4% 3.8% 3.2% 3.2% 3.1% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004132015.pktlen.png)
detailed numbers
[ 32- 63]: 5556419
[ 64- 127]: 8018075
[ 128- 255]: 2288223
[ 256- 511]: 1649474
[ 512- 1023]: 721858
[ 1024- 2047]: 13766842
Protocol Breakdown
![[protocol breakdown chart]](201004132015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32000891 (100.00%) 22374259565 (100.00%) 699.18
ip 31936664 ( 99.80%) 22359557648 ( 99.93%) 700.12
tcp 20169598 ( 63.03%) 16560874955 ( 74.02%) 821.08
http(s) 9966990 ( 31.15%) 13889921325 ( 62.08%) 1393.59
http(c) 5778437 ( 18.06%) 853384363 ( 3.81%) 147.68
squid 239317 ( 0.75%) 64806618 ( 0.29%) 270.80
smtp 391958 ( 1.22%) 96238566 ( 0.43%) 245.53
ftp 22500 ( 0.07%) 2081374 ( 0.01%) 92.51
pop3 12473 ( 0.04%) 9570906 ( 0.04%) 767.33
imap 2865 ( 0.01%) 567249 ( 0.00%) 197.99
telnet 307 ( 0.00%) 58450 ( 0.00%) 190.39
ssh 181207 ( 0.57%) 28587835 ( 0.13%) 157.76
dns 53070 ( 0.17%) 3610581 ( 0.02%) 68.03
bgp 149 ( 0.00%) 63160 ( 0.00%) 423.89
napster 63 ( 0.00%) 4212 ( 0.00%) 66.86
realaud 27 ( 0.00%) 2911 ( 0.00%) 107.81
rtsp 73080 ( 0.23%) 4786554 ( 0.02%) 65.50
icecast 5354 ( 0.02%) 330474 ( 0.00%) 61.72
hotline 11 ( 0.00%) 2795 ( 0.00%) 254.09
other 3441786 ( 10.76%) 1606857342 ( 7.18%) 466.87
udp 7981766 ( 24.94%) 4026062101 ( 17.99%) 504.41
dns 993819 ( 3.11%) 221394433 ( 0.99%) 222.77
realaud 939 ( 0.00%) 64642 ( 0.00%) 68.84
halflif 47 ( 0.00%) 4982 ( 0.00%) 106.00
starcra 436 ( 0.00%) 51160 ( 0.00%) 117.34
everque 527 ( 0.00%) 93130 ( 0.00%) 176.72
unreal 103 ( 0.00%) 18385 ( 0.00%) 178.50
quake 57 ( 0.00%) 5291 ( 0.00%) 92.82
cuseeme 4 ( 0.00%) 347 ( 0.00%) 86.75
other 6985596 ( 21.83%) 3804270720 ( 17.00%) 544.59
icmp 817613 ( 2.55%) 130772779 ( 0.58%) 159.94
ipip 309 ( 0.00%) 36726 ( 0.00%) 118.85
ipsec 1385 ( 0.00%) 452406 ( 0.00%) 326.65
ip6 2924673 ( 9.14%) 1633802914 ( 7.30%) 558.63
other 41320 ( 0.13%) 7555767 ( 0.03%) 182.86
frag 1444 ( 0.00%) 1527096 ( 0.01%) 1057.55
ip6 64227 ( 0.20%) 14701917 ( 0.07%) 228.91
tcp6 28562 ( 0.09%) 7790253 ( 0.03%) 272.75
http(s) 50 ( 0.00%) 29107 ( 0.00%) 582.14
http(c) 10214 ( 0.03%) 932132 ( 0.00%) 91.26
smtp 191 ( 0.00%) 38686 ( 0.00%) 202.54
ftp 2549 ( 0.01%) 267848 ( 0.00%) 105.08
imap 248 ( 0.00%) 28585 ( 0.00%) 115.26
ssh 3226 ( 0.01%) 311420 ( 0.00%) 96.53
dns 120 ( 0.00%) 40785 ( 0.00%) 339.88
bgp 118 ( 0.00%) 15722 ( 0.00%) 133.24
other 11846 ( 0.04%) 6125968 ( 0.03%) 517.13
udp6 29453 ( 0.09%) 6117839 ( 0.03%) 207.72
dns 28940 ( 0.09%) 6030005 ( 0.03%) 208.36
halflif 1 ( 0.00%) 103 ( 0.00%) 103.00
other 512 ( 0.00%) 87731 ( 0.00%) 171.35
icmp6 6115 ( 0.02%) 730055 ( 0.00%) 119.39
pim6 29 ( 0.00%) 3944 ( 0.00%) 136.00
other6 68 ( 0.00%) 59826 ( 0.00%) 879.79
tcpdump file: 201004132015.dump.gz (817.88 MB)