Traffic Trace Info
DumpFile: 201004132045.dump
FileSize: 2342.58MB
Id: 201004132045
StartTime: Tue Apr 13 20:45:01 2010
EndTime: Tue Apr 13 21:00:01 2010
TotalTime: 900.30 seconds
TotalCapSize: 1828.91MB CapLen: 96 bytes
# of packets: 33663556 (21746.61MB)
AvgRate: 202.65Mbps stddev:42.14M
IP flow (unique src/dst pair) Information
# of flows: 1229266 (avg. 27.39 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 3.3% 2.0% 0.8% 0.8% 0.7% 0.6% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 654749
Top 10 bandwidth usage (bytes/total in %):
14.4% 7.1% 6.8% 6.7% 6.6% 5.4% 5.2% 4.3% 3.3% 3.3%
# of IPv6 addresses: 1060
Top 10 bandwidth usage (bytes/total in %):
34.6% 34.6% 13.3% 11.5% 8.5% 4.4% 3.6% 2.9% 2.9% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004132045.pktlen.png)
detailed numbers
[ 32- 63]: 5855798
[ 64- 127]: 8629628
[ 128- 255]: 2583355
[ 256- 511]: 1752513
[ 512- 1023]: 913624
[ 1024- 2047]: 13928638
Protocol Breakdown
![[protocol breakdown chart]](201004132045.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33663556 (100.00%) 22802974720 (100.00%) 677.38
ip 33584831 ( 99.77%) 22786534547 ( 99.93%) 678.48
tcp 20745180 ( 61.63%) 16743455822 ( 73.43%) 807.10
http(s) 10027829 ( 29.79%) 13838194926 ( 60.69%) 1379.98
http(c) 6042930 ( 17.95%) 909349142 ( 3.99%) 150.48
squid 327722 ( 0.97%) 80732835 ( 0.35%) 246.35
smtp 383537 ( 1.14%) 80109145 ( 0.35%) 208.87
ftp 36702 ( 0.11%) 3037174 ( 0.01%) 82.75
pop3 17070 ( 0.05%) 14395169 ( 0.06%) 843.30
imap 2476 ( 0.01%) 618440 ( 0.00%) 249.77
telnet 226 ( 0.00%) 35677 ( 0.00%) 157.86
ssh 147918 ( 0.44%) 21843029 ( 0.10%) 147.67
dns 57556 ( 0.17%) 3920258 ( 0.02%) 68.11
bgp 151 ( 0.00%) 51684 ( 0.00%) 342.28
napster 9 ( 0.00%) 1393 ( 0.00%) 154.78
realaud 32 ( 0.00%) 3779 ( 0.00%) 118.09
rtsp 175690 ( 0.52%) 153112265 ( 0.67%) 871.49
icecast 17712 ( 0.05%) 13056156 ( 0.06%) 737.14
hotline 7 ( 0.00%) 432 ( 0.00%) 61.71
other 3507608 ( 10.42%) 1624994018 ( 7.13%) 463.28
udp 8986432 ( 26.69%) 4343264598 ( 19.05%) 483.31
dns 1011257 ( 3.00%) 215516012 ( 0.95%) 213.12
realaud 990 ( 0.00%) 72377 ( 0.00%) 73.11
halflif 79 ( 0.00%) 9753 ( 0.00%) 123.46
starcra 234 ( 0.00%) 26071 ( 0.00%) 111.41
everque 447 ( 0.00%) 86354 ( 0.00%) 193.19
unreal 131 ( 0.00%) 18774 ( 0.00%) 143.31
quake 49 ( 0.00%) 4220 ( 0.00%) 86.12
cuseeme 5 ( 0.00%) 408 ( 0.00%) 81.60
other 7973141 ( 23.68%) 4127452159 ( 18.10%) 517.67
icmp 958872 ( 2.85%) 156594480 ( 0.69%) 163.31
ipip 333 ( 0.00%) 39602 ( 0.00%) 118.92
ipsec 1503 ( 0.00%) 489002 ( 0.00%) 325.35
ip6 2811504 ( 8.35%) 1521297991 ( 6.67%) 541.10
other 81007 ( 0.24%) 21393052 ( 0.09%) 264.09
frag 765 ( 0.00%) 817273 ( 0.00%) 1068.33
ip6 78725 ( 0.23%) 16440173 ( 0.07%) 208.83
tcp6 41857 ( 0.12%) 9511778 ( 0.04%) 227.24
http(s) 325 ( 0.00%) 302901 ( 0.00%) 932.00
http(c) 5090 ( 0.02%) 474187 ( 0.00%) 93.16
smtp 514 ( 0.00%) 318532 ( 0.00%) 619.71
ftp 2723 ( 0.01%) 284452 ( 0.00%) 104.46
imap 274 ( 0.00%) 32007 ( 0.00%) 116.81
ssh 3518 ( 0.01%) 393660 ( 0.00%) 111.90
dns 158 ( 0.00%) 57242 ( 0.00%) 362.29
bgp 115 ( 0.00%) 15208 ( 0.00%) 132.24
other 29140 ( 0.09%) 7633589 ( 0.03%) 261.96
udp6 30560 ( 0.09%) 6130692 ( 0.03%) 200.61
dns 29912 ( 0.09%) 6022545 ( 0.03%) 201.34
other 648 ( 0.00%) 108147 ( 0.00%) 166.89
icmp6 6222 ( 0.02%) 746680 ( 0.00%) 120.01
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 56 ( 0.00%) 46943 ( 0.00%) 838.27
tcpdump file: 201004132045.dump.gz (865.72 MB)