Traffic Trace Info
DumpFile: 201004132130.dump
FileSize: 2268.80MB
Id: 201004132130
StartTime: Tue Apr 13 21:30:00 2010
EndTime: Tue Apr 13 21:45:01 2010
TotalTime: 900.39 seconds
TotalCapSize: 1768.74MB CapLen: 96 bytes
# of packets: 32770862 (21040.21MB)
AvgRate: 196.02Mbps stddev:16.06M
IP flow (unique src/dst pair) Information
# of flows: 1109277 (avg. 29.54 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.7% 1.6% 1.3% 0.9% 0.7% 0.7% 0.5% 0.4% 0.4% 0.4%
IP address Information
# of IPv4 addresses: 608353
Top 10 bandwidth usage (bytes/total in %):
13.5% 6.6% 6.4% 5.9% 5.8% 5.7% 5.5% 5.1% 3.0% 2.7%
# of IPv6 addresses: 1041
Top 10 bandwidth usage (bytes/total in %):
72.6% 72.6% 8.2% 8.2% 4.7% 1.6% 1.2% 1.2% 1.1% 1.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004132130.pktlen.png)
detailed numbers
[ 32- 63]: 5539004
[ 64- 127]: 8862328
[ 128- 255]: 2262193
[ 256- 511]: 1848699
[ 512- 1023]: 835263
[ 1024- 2047]: 13423375
Protocol Breakdown
![[protocol breakdown chart]](201004132130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32770862 (100.00%) 22062256851 (100.00%) 673.23
ip 32686456 ( 99.74%) 22015188859 ( 99.79%) 673.53
tcp 20207813 ( 61.66%) 16392459613 ( 74.30%) 811.19
http(s) 9504587 ( 29.00%) 13145017221 ( 59.58%) 1383.02
http(c) 5523643 ( 16.86%) 747949501 ( 3.39%) 135.41
squid 361541 ( 1.10%) 107981360 ( 0.49%) 298.67
smtp 406306 ( 1.24%) 112856815 ( 0.51%) 277.76
ftp 42518 ( 0.13%) 3623941 ( 0.02%) 85.23
pop3 14582 ( 0.04%) 11948723 ( 0.05%) 819.42
imap 2693 ( 0.01%) 548655 ( 0.00%) 203.73
telnet 470 ( 0.00%) 75338 ( 0.00%) 160.29
ssh 246595 ( 0.75%) 34939732 ( 0.16%) 141.69
dns 57768 ( 0.18%) 6416214 ( 0.03%) 111.07
bgp 162 ( 0.00%) 58180 ( 0.00%) 359.14
napster 34 ( 0.00%) 15083 ( 0.00%) 443.62
realaud 5 ( 0.00%) 300 ( 0.00%) 60.00
rtsp 93110 ( 0.28%) 68676211 ( 0.31%) 737.58
icecast 618 ( 0.00%) 94974 ( 0.00%) 153.68
hotline 52 ( 0.00%) 5069 ( 0.00%) 97.48
other 3953127 ( 12.06%) 2152252176 ( 9.76%) 544.44
udp 8557822 ( 26.11%) 3992668600 ( 18.10%) 466.55
dns 1008756 ( 3.08%) 225257574 ( 1.02%) 223.30
realaud 909 ( 0.00%) 56704 ( 0.00%) 62.38
halflif 79 ( 0.00%) 8081 ( 0.00%) 102.29
starcra 227 ( 0.00%) 22078 ( 0.00%) 97.26
everque 521 ( 0.00%) 96768 ( 0.00%) 185.74
unreal 105 ( 0.00%) 16862 ( 0.00%) 160.59
quake 71 ( 0.00%) 5767 ( 0.00%) 81.23
cuseeme 7 ( 0.00%) 635 ( 0.00%) 90.71
other 7547056 ( 23.03%) 3767126454 ( 17.07%) 499.15
icmp 952779 ( 2.91%) 165055293 ( 0.75%) 173.24
ipip 364 ( 0.00%) 43770 ( 0.00%) 120.25
ipsec 1510 ( 0.00%) 510228 ( 0.00%) 337.90
ip6 2651071 ( 8.09%) 1417432171 ( 6.42%) 534.66
other 315097 ( 0.96%) 47019184 ( 0.21%) 149.22
frag 1072 ( 0.00%) 969159 ( 0.00%) 904.07
ip6 84406 ( 0.26%) 47067992 ( 0.21%) 557.64
tcp6 45038 ( 0.14%) 39820112 ( 0.18%) 884.14
http(s) 24538 ( 0.07%) 34180530 ( 0.15%) 1392.96
http(c) 5315 ( 0.02%) 506368 ( 0.00%) 95.27
smtp 97 ( 0.00%) 36295 ( 0.00%) 374.18
ftp 2726 ( 0.01%) 280546 ( 0.00%) 102.91
imap 371 ( 0.00%) 44449 ( 0.00%) 119.81
ssh 3129 ( 0.01%) 270182 ( 0.00%) 86.35
dns 225 ( 0.00%) 50927 ( 0.00%) 226.34
bgp 117 ( 0.00%) 18083 ( 0.00%) 154.56
other 8520 ( 0.03%) 4432732 ( 0.02%) 520.27
udp6 32259 ( 0.10%) 6337479 ( 0.03%) 196.46
dns 31474 ( 0.10%) 6208974 ( 0.03%) 197.27
other 785 ( 0.00%) 128505 ( 0.00%) 163.70
icmp6 7007 ( 0.02%) 845561 ( 0.00%) 120.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 72 ( 0.00%) 60760 ( 0.00%) 843.89
tcpdump file: 201004132130.dump.gz (848.86 MB)