Traffic Trace Info
DumpFile: 201004132030.dump
FileSize: 2248.40MB
Id: 201004132030
StartTime: Tue Apr 13 20:30:01 2010
EndTime: Tue Apr 13 20:45:01 2010
TotalTime: 900.03 seconds
TotalCapSize: 1754.82MB CapLen: 96 bytes
# of packets: 32346116 (20952.35MB)
AvgRate: 195.29Mbps stddev:14.62M
IP flow (unique src/dst pair) Information
# of flows: 1107004 (avg. 29.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.4% 1.8% 1.4% 1.0% 0.9% 0.8% 0.5% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 586600
Top 10 bandwidth usage (bytes/total in %):
13.7% 7.9% 6.6% 6.0% 5.9% 5.4% 4.9% 2.7% 2.7% 2.6%
# of IPv6 addresses: 1017
Top 10 bandwidth usage (bytes/total in %):
37.9% 37.9% 14.0% 10.9% 7.8% 4.3% 3.8% 3.0% 2.9% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004132030.pktlen.png)
detailed numbers
[ 32- 63]: 5947747
[ 64- 127]: 8124312
[ 128- 255]: 2367889
[ 256- 511]: 1613748
[ 512- 1023]: 843448
[ 1024- 2047]: 13448972
Protocol Breakdown
![[protocol breakdown chart]](201004132030.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32346116 (100.00%) 21970126868 (100.00%) 679.22
ip 32271320 ( 99.77%) 21954444649 ( 99.93%) 680.31
tcp 20398147 ( 63.06%) 16403630094 ( 74.66%) 804.17
http(s) 9686909 ( 29.95%) 13406055883 ( 61.02%) 1383.94
http(c) 5809881 ( 17.96%) 894358509 ( 4.07%) 153.94
squid 310113 ( 0.96%) 114472954 ( 0.52%) 369.13
smtp 380531 ( 1.18%) 92817419 ( 0.42%) 243.92
ftp 34101 ( 0.11%) 3179178 ( 0.01%) 93.23
pop3 11504 ( 0.04%) 7670057 ( 0.03%) 666.73
imap 3847 ( 0.01%) 1488600 ( 0.01%) 386.95
telnet 359 ( 0.00%) 59395 ( 0.00%) 165.45
ssh 173528 ( 0.54%) 25314374 ( 0.12%) 145.88
dns 56247 ( 0.17%) 3909411 ( 0.02%) 69.50
bgp 144 ( 0.00%) 48785 ( 0.00%) 338.78
napster 206 ( 0.00%) 16411 ( 0.00%) 79.67
realaud 24 ( 0.00%) 3677 ( 0.00%) 153.21
rtsp 123874 ( 0.38%) 9997624 ( 0.05%) 80.71
icecast 948 ( 0.00%) 131010 ( 0.00%) 138.20
hotline 8 ( 0.00%) 492 ( 0.00%) 61.50
other 3805916 ( 11.77%) 1844105895 ( 8.39%) 484.54
udp 8067731 ( 24.94%) 3889133010 ( 17.70%) 482.06
dns 988661 ( 3.06%) 211934504 ( 0.96%) 214.37
realaud 5494 ( 0.02%) 3205742 ( 0.01%) 583.50
halflif 64 ( 0.00%) 7203 ( 0.00%) 112.55
starcra 273 ( 0.00%) 26649 ( 0.00%) 97.62
everque 667 ( 0.00%) 113421 ( 0.00%) 170.05
unreal 182 ( 0.00%) 22002 ( 0.00%) 120.89
quake 52 ( 0.00%) 4174 ( 0.00%) 80.27
cuseeme 5 ( 0.00%) 460 ( 0.00%) 92.00
other 7072198 ( 21.86%) 3673702700 ( 16.72%) 519.46
icmp 957299 ( 2.96%) 166046708 ( 0.76%) 173.45
ipip 384 ( 0.00%) 46584 ( 0.00%) 121.31
ipsec 1404 ( 0.00%) 460392 ( 0.00%) 327.91
ip6 2685763 ( 8.30%) 1472413567 ( 6.70%) 548.23
other 160592 ( 0.50%) 22714294 ( 0.10%) 141.44
frag 886 ( 0.00%) 968058 ( 0.00%) 1092.62
ip6 74796 ( 0.23%) 15682219 ( 0.07%) 209.67
tcp6 38696 ( 0.12%) 8949710 ( 0.04%) 231.28
http(s) 55 ( 0.00%) 36924 ( 0.00%) 671.35
http(c) 4349 ( 0.01%) 391194 ( 0.00%) 89.95
smtp 290 ( 0.00%) 114459 ( 0.00%) 394.69
ftp 2834 ( 0.01%) 295445 ( 0.00%) 104.25
imap 352 ( 0.00%) 41348 ( 0.00%) 117.47
ssh 3587 ( 0.01%) 328910 ( 0.00%) 91.70
dns 145 ( 0.00%) 35848 ( 0.00%) 247.23
bgp 107 ( 0.00%) 13932 ( 0.00%) 130.21
other 26977 ( 0.08%) 7691650 ( 0.04%) 285.12
udp6 29639 ( 0.09%) 5877634 ( 0.03%) 198.31
dns 28872 ( 0.09%) 5724883 ( 0.03%) 198.28
other 767 ( 0.00%) 152751 ( 0.00%) 199.15
icmp6 6304 ( 0.02%) 742730 ( 0.00%) 117.82
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 127 ( 0.00%) 108065 ( 0.00%) 850.91
tcpdump file: 201004132030.dump.gz (832.27 MB)