Traffic Trace Info
DumpFile: 201004140145.dump
FileSize: 2309.41MB
Id: 201004140145
StartTime: Wed Apr 14 01:45:01 2010
EndTime: Wed Apr 14 02:00:01 2010
TotalTime: 899.75 seconds
TotalCapSize: 1804.86MB CapLen: 96 bytes
# of packets: 33065701 (21075.49MB)
AvgRate: 196.47Mbps stddev:15.28M
IP flow (unique src/dst pair) Information
# of flows: 1570424 (avg. 21.06 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 2.5% 2.5% 1.0% 1.0% 1.0% 1.0% 0.7% 0.6% 0.5%
IP address Information
# of IPv4 addresses: 861247
Top 10 bandwidth usage (bytes/total in %):
16.8% 10.2% 7.7% 7.7% 5.6% 5.3% 5.2% 3.7% 3.6% 2.7%
# of IPv6 addresses: 890
Top 10 bandwidth usage (bytes/total in %):
27.9% 13.1% 6.4% 6.2% 6.0% 5.9% 5.1% 4.3% 4.1% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004140145.pktlen.png)
detailed numbers
[ 32- 63]: 5349495
[ 64- 127]: 9499185
[ 128- 255]: 2248411
[ 256- 511]: 1719157
[ 512- 1023]: 684855
[ 1024- 2047]: 13564598
Protocol Breakdown
![[protocol breakdown chart]](201004140145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33065701 (100.00%) 22099256757 (100.00%) 668.34
ip 33017721 ( 99.85%) 22091402216 ( 99.96%) 669.08
tcp 19525890 ( 59.05%) 15067370363 ( 68.18%) 771.66
http(s) 9338134 ( 28.24%) 12969211601 ( 58.69%) 1388.84
http(c) 5765366 ( 17.44%) 506821238 ( 2.29%) 87.91
squid 371831 ( 1.12%) 148755374 ( 0.67%) 400.06
smtp 351709 ( 1.06%) 90337664 ( 0.41%) 256.85
ftp 20248 ( 0.06%) 1788365 ( 0.01%) 88.32
pop3 8506 ( 0.03%) 6319761 ( 0.03%) 742.98
imap 2821 ( 0.01%) 1513546 ( 0.01%) 536.53
telnet 6345 ( 0.02%) 465190 ( 0.00%) 73.32
ssh 54507 ( 0.16%) 8624462 ( 0.04%) 158.23
dns 55943 ( 0.17%) 3837092 ( 0.02%) 68.59
bgp 154 ( 0.00%) 43613 ( 0.00%) 283.20
napster 8 ( 0.00%) 821 ( 0.00%) 102.62
realaud 16 ( 0.00%) 2022 ( 0.00%) 126.38
rtsp 78 ( 0.00%) 5428 ( 0.00%) 69.59
icecast 303 ( 0.00%) 22028 ( 0.00%) 72.70
hotline 9 ( 0.00%) 1580 ( 0.00%) 175.56
other 3549910 ( 10.74%) 1329620405 ( 6.02%) 374.55
udp 9359284 ( 28.31%) 5109348515 ( 23.12%) 545.91
dns 681927 ( 2.06%) 116021374 ( 0.53%) 170.14
realaud 39 ( 0.00%) 4794 ( 0.00%) 122.92
halflif 99 ( 0.00%) 11323 ( 0.00%) 114.37
starcra 217 ( 0.00%) 21953 ( 0.00%) 101.17
everque 120121 ( 0.36%) 26687631 ( 0.12%) 222.17
unreal 93 ( 0.00%) 12765 ( 0.00%) 137.26
quake 36 ( 0.00%) 2923 ( 0.00%) 81.19
cuseeme 1 ( 0.00%) 78 ( 0.00%) 78.00
other 8556545 ( 25.88%) 4966460368 ( 22.47%) 580.43
icmp 1022141 ( 3.09%) 158133109 ( 0.72%) 154.71
ipip 357 ( 0.00%) 42816 ( 0.00%) 119.93
ipsec 1740 ( 0.01%) 580084 ( 0.00%) 333.38
ip6 2996535 ( 9.06%) 1723518966 ( 7.80%) 575.17
other 111774 ( 0.34%) 32408363 ( 0.15%) 289.95
frag 969 ( 0.00%) 929808 ( 0.00%) 959.55
ip6 47980 ( 0.15%) 7854541 ( 0.04%) 163.70
tcp6 12644 ( 0.04%) 1366628 ( 0.01%) 108.09
http(s) 45 ( 0.00%) 20444 ( 0.00%) 454.31
http(c) 3025 ( 0.01%) 283033 ( 0.00%) 93.56
smtp 258 ( 0.00%) 81233 ( 0.00%) 314.86
ftp 2659 ( 0.01%) 274454 ( 0.00%) 103.22
imap 260 ( 0.00%) 29828 ( 0.00%) 114.72
ssh 1719 ( 0.01%) 143078 ( 0.00%) 83.23
dns 140 ( 0.00%) 34439 ( 0.00%) 245.99
bgp 103 ( 0.00%) 13003 ( 0.00%) 126.24
other 4435 ( 0.01%) 487116 ( 0.00%) 109.83
udp6 29255 ( 0.09%) 5667160 ( 0.03%) 193.72
dns 28611 ( 0.09%) 5554122 ( 0.03%) 194.13
other 644 ( 0.00%) 113038 ( 0.00%) 175.52
icmp6 5936 ( 0.02%) 710604 ( 0.00%) 119.71
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 115 ( 0.00%) 106069 ( 0.00%) 922.34
tcpdump file: 201004140145.dump.gz (854.33 MB)