Traffic Trace Info
DumpFile: 201004132215.dump
FileSize: 2356.92MB
Id: 201004132215
StartTime: Tue Apr 13 22:15:00 2010
EndTime: Tue Apr 13 22:30:01 2010
TotalTime: 900.40 seconds
TotalCapSize: 1832.81MB CapLen: 96 bytes
# of packets: 34347471 (22342.54MB)
AvgRate: 208.16Mbps stddev:17.01M
IP flow (unique src/dst pair) Information
# of flows: 1521968 (avg. 22.57 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 1.8% 1.0% 0.8% 0.6% 0.5% 0.5% 0.5% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 869709
Top 10 bandwidth usage (bytes/total in %):
14.0% 7.8% 6.9% 6.3% 6.2% 6.1% 4.6% 4.4% 3.6% 2.6%
# of IPv6 addresses: 1036
Top 10 bandwidth usage (bytes/total in %):
26.9% 8.9% 6.1% 5.9% 5.8% 4.5% 4.1% 3.8% 3.3% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004132215.pktlen.png)
detailed numbers
[ 32- 63]: 6266028
[ 64- 127]: 8656808
[ 128- 255]: 2427294
[ 256- 511]: 1828924
[ 512- 1023]: 765175
[ 1024- 2047]: 14403242
Protocol Breakdown
![[protocol breakdown chart]](201004132215.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34347471 (100.00%) 23427855512 (100.00%) 682.08
ip 34296798 ( 99.85%) 23419691569 ( 99.97%) 682.85
tcp 21106837 ( 61.45%) 17267303304 ( 73.70%) 818.09
http(s) 10625580 ( 30.94%) 14663421380 ( 62.59%) 1380.01
http(c) 5733755 ( 16.69%) 662763338 ( 2.83%) 115.59
squid 314388 ( 0.92%) 91263640 ( 0.39%) 290.29
smtp 390369 ( 1.14%) 77300622 ( 0.33%) 198.02
ftp 35524 ( 0.10%) 3358275 ( 0.01%) 94.54
pop3 14003 ( 0.04%) 10820015 ( 0.05%) 772.69
imap 2844 ( 0.01%) 1046176 ( 0.00%) 367.85
telnet 480 ( 0.00%) 53895 ( 0.00%) 112.28
ssh 195736 ( 0.57%) 28017566 ( 0.12%) 143.14
dns 54936 ( 0.16%) 3819070 ( 0.02%) 69.52
bgp 153 ( 0.00%) 61210 ( 0.00%) 400.07
napster 17 ( 0.00%) 2359 ( 0.00%) 138.76
realaud 7 ( 0.00%) 848 ( 0.00%) 121.14
rtsp 5937 ( 0.02%) 461849 ( 0.00%) 77.79
icecast 10471 ( 0.03%) 9777749 ( 0.04%) 933.79
hotline 19 ( 0.00%) 2029 ( 0.00%) 106.79
other 3722615 ( 10.84%) 1715133103 ( 7.32%) 460.73
udp 9220336 ( 26.84%) 4500127344 ( 19.21%) 488.07
dns 828844 ( 2.41%) 149187215 ( 0.64%) 179.99
rip 2 ( 0.00%) 180 ( 0.00%) 90.00
realaud 14 ( 0.00%) 1796 ( 0.00%) 128.29
halflif 68 ( 0.00%) 6624 ( 0.00%) 97.41
starcra 245 ( 0.00%) 24466 ( 0.00%) 99.86
everque 517 ( 0.00%) 96606 ( 0.00%) 186.86
unreal 99 ( 0.00%) 15914 ( 0.00%) 160.75
quake 29 ( 0.00%) 2600 ( 0.00%) 89.66
cuseeme 3 ( 0.00%) 266 ( 0.00%) 88.67
other 8390372 ( 24.43%) 4350647010 ( 18.57%) 518.53
icmp 921211 ( 2.68%) 153761551 ( 0.66%) 166.91
ipip 328 ( 0.00%) 41310 ( 0.00%) 125.95
ipsec 11724 ( 0.03%) 6309704 ( 0.03%) 538.19
ip6 2603902 ( 7.58%) 1434317156 ( 6.12%) 550.83
other 432460 ( 1.26%) 57831200 ( 0.25%) 133.73
frag 1189 ( 0.00%) 1316092 ( 0.01%) 1106.89
ip6 50673 ( 0.15%) 8163943 ( 0.03%) 161.11
tcp6 13880 ( 0.04%) 1491688 ( 0.01%) 107.47
http(s) 52 ( 0.00%) 30925 ( 0.00%) 594.71
http(c) 4167 ( 0.01%) 399374 ( 0.00%) 95.84
smtp 74 ( 0.00%) 21999 ( 0.00%) 297.28
ftp 2704 ( 0.01%) 280417 ( 0.00%) 103.70
imap 282 ( 0.00%) 32599 ( 0.00%) 115.60
ssh 1785 ( 0.01%) 156942 ( 0.00%) 87.92
dns 140 ( 0.00%) 49685 ( 0.00%) 354.89
bgp 116 ( 0.00%) 15615 ( 0.00%) 134.61
other 4560 ( 0.01%) 504132 ( 0.00%) 110.56
udp6 30447 ( 0.09%) 5860875 ( 0.03%) 192.49
dns 29777 ( 0.09%) 5757389 ( 0.02%) 193.35
quake 1 ( 0.00%) 113 ( 0.00%) 113.00
other 669 ( 0.00%) 103373 ( 0.00%) 154.52
icmp6 6246 ( 0.02%) 747158 ( 0.00%) 119.62
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 70 ( 0.00%) 60142 ( 0.00%) 859.17
tcpdump file: 201004132215.dump.gz (875.65 MB)