Traffic Trace Info
DumpFile: 201004140130.dump
FileSize: 2261.73MB
Id: 201004140130
StartTime: Wed Apr 14 01:30:01 2010
EndTime: Wed Apr 14 01:45:01 2010
TotalTime: 900.08 seconds
TotalCapSize: 1763.75MB CapLen: 96 bytes
# of packets: 32635551 (20908.90MB)
AvgRate: 194.88Mbps stddev:11.06M
IP flow (unique src/dst pair) Information
# of flows: 1436789 (avg. 22.71 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 1.0% 0.9% 0.9% 0.7% 0.6% 0.6% 0.5% 0.4% 0.4%
IP address Information
# of IPv4 addresses: 824443
Top 10 bandwidth usage (bytes/total in %):
17.5% 8.1% 7.8% 7.2% 6.4% 5.9% 3.7% 3.6% 3.0% 2.9%
# of IPv6 addresses: 949
Top 10 bandwidth usage (bytes/total in %):
26.9% 13.2% 6.3% 5.8% 5.7% 5.7% 5.4% 4.3% 4.3% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004140130.pktlen.png)
detailed numbers
[ 32- 63]: 5621214
[ 64- 127]: 8809202
[ 128- 255]: 2259773
[ 256- 511]: 1783782
[ 512- 1023]: 759350
[ 1024- 2047]: 13402230
Protocol Breakdown
![[protocol breakdown chart]](201004140130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32635551 (100.00%) 21924572477 (100.00%) 671.80
ip 32585875 ( 99.85%) 21916425558 ( 99.96%) 672.57
tcp 19054651 ( 58.39%) 15017701817 ( 68.50%) 788.14
http(s) 9401387 ( 28.81%) 13060077288 ( 59.57%) 1389.16
http(c) 5385225 ( 16.50%) 487601057 ( 2.22%) 90.54
squid 302688 ( 0.93%) 102460860 ( 0.47%) 338.50
smtp 338021 ( 1.04%) 99934668 ( 0.46%) 295.65
ftp 21508 ( 0.07%) 1999129 ( 0.01%) 92.95
pop3 7459 ( 0.02%) 5392374 ( 0.02%) 722.94
imap 2096 ( 0.01%) 740064 ( 0.00%) 353.08
telnet 1687 ( 0.01%) 144407 ( 0.00%) 85.60
ssh 250128 ( 0.77%) 54147048 ( 0.25%) 216.48
dns 56229 ( 0.17%) 3825253 ( 0.02%) 68.03
bgp 160 ( 0.00%) 63788 ( 0.00%) 398.68
napster 38 ( 0.00%) 4526 ( 0.00%) 119.11
rtsp 80 ( 0.00%) 5560 ( 0.00%) 69.50
icecast 308 ( 0.00%) 19628 ( 0.00%) 63.73
other 3287637 ( 10.07%) 1201286167 ( 5.48%) 365.40
udp 9180352 ( 28.13%) 4960965984 ( 22.63%) 540.39
dns 674073 ( 2.07%) 116141132 ( 0.53%) 172.30
realaud 51 ( 0.00%) 5164 ( 0.00%) 101.25
halflif 67 ( 0.00%) 6426 ( 0.00%) 95.91
starcra 192 ( 0.00%) 19523 ( 0.00%) 101.68
everque 20954 ( 0.06%) 4730435 ( 0.02%) 225.75
unreal 94 ( 0.00%) 15839 ( 0.00%) 168.50
quake 56 ( 0.00%) 4599 ( 0.00%) 82.12
cuseeme 1 ( 0.00%) 464 ( 0.00%) 464.00
other 8484009 ( 26.00%) 4839894137 ( 22.08%) 570.47
icmp 974026 ( 2.98%) 168241808 ( 0.77%) 172.73
ipip 348 ( 0.00%) 42846 ( 0.00%) 123.12
ipsec 1861 ( 0.01%) 624494 ( 0.00%) 335.57
ip6 3091611 ( 9.47%) 1721613112 ( 7.85%) 556.87
other 283026 ( 0.87%) 47235497 ( 0.22%) 166.89
frag 2450 ( 0.01%) 2198576 ( 0.01%) 897.38
ip6 49676 ( 0.15%) 8146919 ( 0.04%) 164.00
tcp6 13267 ( 0.04%) 1468318 ( 0.01%) 110.67
http(s) 60 ( 0.00%) 27535 ( 0.00%) 458.92
http(c) 3734 ( 0.01%) 329298 ( 0.00%) 88.19
smtp 192 ( 0.00%) 82175 ( 0.00%) 427.99
ftp 2659 ( 0.01%) 274334 ( 0.00%) 103.17
imap 354 ( 0.00%) 41719 ( 0.00%) 117.85
ssh 1583 ( 0.00%) 131466 ( 0.00%) 83.05
dns 189 ( 0.00%) 52142 ( 0.00%) 275.88
bgp 108 ( 0.00%) 14032 ( 0.00%) 129.93
other 4388 ( 0.01%) 515617 ( 0.00%) 117.51
udp6 30086 ( 0.09%) 5850702 ( 0.03%) 194.47
dns 29035 ( 0.09%) 5702537 ( 0.03%) 196.40
everque 1 ( 0.00%) 110 ( 0.00%) 110.00
other 1050 ( 0.00%) 148055 ( 0.00%) 141.00
icmp6 6205 ( 0.02%) 754493 ( 0.00%) 121.59
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 87 ( 0.00%) 69190 ( 0.00%) 795.29
tcpdump file: 201004140130.dump.gz (838.55 MB)