Traffic Trace Info
DumpFile: 201004132230.dump
FileSize: 2292.79MB
Id: 201004132230
StartTime: Tue Apr 13 22:30:01 2010
EndTime: Tue Apr 13 22:45:00 2010
TotalTime: 899.54 seconds
TotalCapSize: 1783.05MB CapLen: 96 bytes
# of packets: 33405585 (21389.93MB)
AvgRate: 199.48Mbps stddev:18.78M
IP flow (unique src/dst pair) Information
# of flows: 1529427 (avg. 21.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 1.4% 1.1% 1.0% 0.6% 0.5% 0.5% 0.5% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 838430
Top 10 bandwidth usage (bytes/total in %):
15.1% 8.0% 6.6% 6.3% 5.9% 5.7% 4.6% 4.5% 3.0% 2.9%
# of IPv6 addresses: 1034
Top 10 bandwidth usage (bytes/total in %):
23.3% 8.3% 5.3% 5.2% 5.1% 5.0% 4.6% 4.6% 4.1% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004132230.pktlen.png)
detailed numbers
[ 32- 63]: 6175692
[ 64- 127]: 8400858
[ 128- 255]: 2478936
[ 256- 511]: 1779341
[ 512- 1023]: 836901
[ 1024- 2047]: 13733857
Protocol Breakdown
![[protocol breakdown chart]](201004132230.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33405585 (100.00%) 22428962570 (100.00%) 671.41
ip 33353844 ( 99.85%) 22419590891 ( 99.96%) 672.17
tcp 20150944 ( 60.32%) 16198725211 ( 72.22%) 803.87
http(s) 9706581 ( 29.06%) 13394296186 ( 59.72%) 1379.92
http(c) 5300300 ( 15.87%) 619712071 ( 2.76%) 116.92
squid 363394 ( 1.09%) 136397315 ( 0.61%) 375.34
smtp 407586 ( 1.22%) 100790145 ( 0.45%) 247.29
ftp 87916 ( 0.26%) 51408057 ( 0.23%) 584.74
pop3 11651 ( 0.03%) 8482900 ( 0.04%) 728.08
imap 2282 ( 0.01%) 685623 ( 0.00%) 300.45
telnet 356 ( 0.00%) 59330 ( 0.00%) 166.66
ssh 279053 ( 0.84%) 40310958 ( 0.18%) 144.46
dns 54210 ( 0.16%) 3701743 ( 0.02%) 68.29
bgp 152 ( 0.00%) 53942 ( 0.00%) 354.88
napster 39 ( 0.00%) 4725 ( 0.00%) 121.15
realaud 14 ( 0.00%) 2063 ( 0.00%) 147.36
rtsp 460 ( 0.00%) 124274 ( 0.00%) 270.16
icecast 11911 ( 0.04%) 11434423 ( 0.05%) 959.99
hotline 4 ( 0.00%) 260 ( 0.00%) 65.00
other 3925033 ( 11.75%) 1831261076 ( 8.16%) 466.56
udp 9144644 ( 27.37%) 4523233047 ( 20.17%) 494.63
dns 785193 ( 2.35%) 132924834 ( 0.59%) 169.29
rip 2 ( 0.00%) 218 ( 0.00%) 109.00
realaud 34 ( 0.00%) 6431 ( 0.00%) 189.15
halflif 71 ( 0.00%) 6923 ( 0.00%) 97.51
starcra 178 ( 0.00%) 17276 ( 0.00%) 97.06
everque 424 ( 0.00%) 74441 ( 0.00%) 175.57
unreal 90 ( 0.00%) 15661 ( 0.00%) 174.01
quake 37 ( 0.00%) 3591 ( 0.00%) 97.05
cuseeme 1 ( 0.00%) 107 ( 0.00%) 107.00
other 8358477 ( 25.02%) 4390039998 ( 19.57%) 525.22
icmp 1022649 ( 3.06%) 171232782 ( 0.76%) 167.44
ipip 360 ( 0.00%) 41068 ( 0.00%) 114.08
ipsec 1482 ( 0.00%) 512748 ( 0.00%) 345.98
ip6 2620522 ( 7.84%) 1432026641 ( 6.38%) 546.47
other 413243 ( 1.24%) 93819394 ( 0.42%) 227.03
frag 957 ( 0.00%) 1043362 ( 0.00%) 1090.24
ip6 51739 ( 0.15%) 9371559 ( 0.04%) 181.13
tcp6 14049 ( 0.04%) 2325210 ( 0.01%) 165.51
http(s) 704 ( 0.00%) 834002 ( 0.00%) 1184.66
http(c) 3211 ( 0.01%) 299174 ( 0.00%) 93.17
smtp 260 ( 0.00%) 127330 ( 0.00%) 489.73
ftp 2703 ( 0.01%) 280612 ( 0.00%) 103.82
imap 340 ( 0.00%) 40090 ( 0.00%) 117.91
ssh 1696 ( 0.01%) 149700 ( 0.00%) 88.27
dns 125 ( 0.00%) 31283 ( 0.00%) 250.26
bgp 105 ( 0.00%) 13287 ( 0.00%) 126.54
other 4905 ( 0.01%) 549732 ( 0.00%) 112.08
udp6 30946 ( 0.09%) 6181264 ( 0.03%) 199.74
dns 30361 ( 0.09%) 6077544 ( 0.03%) 200.18
realaud 1 ( 0.00%) 117 ( 0.00%) 117.00
halflif 1 ( 0.00%) 97 ( 0.00%) 97.00
cuseeme 1 ( 0.00%) 108 ( 0.00%) 108.00
other 582 ( 0.00%) 103398 ( 0.00%) 177.66
icmp6 6632 ( 0.02%) 794778 ( 0.00%) 119.84
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 82 ( 0.00%) 66227 ( 0.00%) 807.65
tcpdump file: 201004132230.dump.gz (856.81 MB)