Traffic Trace Info
DumpFile: 201004140230.dump
FileSize: 2071.42MB
Id: 201004140230
StartTime: Wed Apr 14 02:30:00 2010
EndTime: Wed Apr 14 02:45:00 2010
TotalTime: 899.99 seconds
TotalCapSize: 1616.41MB CapLen: 96 bytes
# of packets: 29819233 (19718.63MB)
AvgRate: 183.80Mbps stddev:17.28M
IP flow (unique src/dst pair) Information
# of flows: 1308218 (avg. 22.79 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.3% 2.1% 1.8% 1.1% 1.0% 1.0% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 725605
Top 10 bandwidth usage (bytes/total in %):
18.8% 7.8% 7.5% 6.4% 5.6% 5.6% 5.5% 5.4% 3.5% 2.9%
# of IPv6 addresses: 922
Top 10 bandwidth usage (bytes/total in %):
28.1% 12.1% 6.6% 6.2% 6.1% 5.5% 4.6% 4.5% 4.1% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004140230.pktlen.png)
detailed numbers
[ 32- 63]: 4810416
[ 64- 127]: 7785583
[ 128- 255]: 2144596
[ 256- 511]: 1652374
[ 512- 1023]: 737621
[ 1024- 2047]: 12688643
Protocol Breakdown
![[protocol breakdown chart]](201004140230.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29819233 (100.00%) 20676483558 (100.00%) 693.39
ip 29769447 ( 99.83%) 20668763525 ( 99.96%) 694.29
tcp 17329720 ( 58.12%) 14065326524 ( 68.03%) 811.63
http(s) 7601414 ( 25.49%) 10642991907 ( 51.47%) 1400.13
http(c) 4316020 ( 14.47%) 409946237 ( 1.98%) 94.98
squid 320361 ( 1.07%) 107290095 ( 0.52%) 334.90
smtp 311696 ( 1.05%) 55222442 ( 0.27%) 177.17
ftp 24600 ( 0.08%) 2234305 ( 0.01%) 90.83
pop3 5888 ( 0.02%) 3783023 ( 0.02%) 642.50
imap 902 ( 0.00%) 295567 ( 0.00%) 327.68
telnet 2722 ( 0.01%) 210006 ( 0.00%) 77.15
ssh 31324 ( 0.11%) 15633699 ( 0.08%) 499.10
dns 54857 ( 0.18%) 6216182 ( 0.03%) 113.32
bgp 158 ( 0.00%) 48916 ( 0.00%) 309.59
napster 102 ( 0.00%) 7571 ( 0.00%) 74.23
realaud 4 ( 0.00%) 252 ( 0.00%) 63.00
rtsp 87 ( 0.00%) 6038 ( 0.00%) 69.40
icecast 274 ( 0.00%) 19691 ( 0.00%) 71.86
hotline 9 ( 0.00%) 554 ( 0.00%) 61.56
other 4659296 ( 15.63%) 2821419559 ( 13.65%) 605.55
udp 8557588 ( 28.70%) 4822692892 ( 23.32%) 563.56
dns 656392 ( 2.20%) 114865840 ( 0.56%) 175.00
rip 8 ( 0.00%) 600 ( 0.00%) 75.00
realaud 68 ( 0.00%) 6738 ( 0.00%) 99.09
halflif 91 ( 0.00%) 8956 ( 0.00%) 98.42
starcra 222 ( 0.00%) 22076 ( 0.00%) 99.44
everque 464 ( 0.00%) 90449 ( 0.00%) 194.93
unreal 122 ( 0.00%) 17915 ( 0.00%) 146.84
quake 42 ( 0.00%) 4229 ( 0.00%) 100.69
cuseeme 4 ( 0.00%) 352 ( 0.00%) 88.00
other 7898316 ( 26.49%) 4707288793 ( 22.77%) 595.99
icmp 1017200 ( 3.41%) 172161473 ( 0.83%) 169.25
ipip 343 ( 0.00%) 42102 ( 0.00%) 122.75
ipsec 5648 ( 0.02%) 2631868 ( 0.01%) 465.98
ip6 2810237 ( 9.42%) 1564685676 ( 7.57%) 556.78
other 48711 ( 0.16%) 41222990 ( 0.20%) 846.28
frag 4774 ( 0.02%) 4240722 ( 0.02%) 888.30
ip6 49784 ( 0.17%) 7719913 ( 0.04%) 155.07
tcp6 16222 ( 0.05%) 1692416 ( 0.01%) 104.33
http(s) 51 ( 0.00%) 23982 ( 0.00%) 470.24
http(c) 6656 ( 0.02%) 559502 ( 0.00%) 84.06
smtp 287 ( 0.00%) 128945 ( 0.00%) 449.29
ftp 2692 ( 0.01%) 277494 ( 0.00%) 103.08
imap 385 ( 0.00%) 44885 ( 0.00%) 116.58
ssh 1574 ( 0.01%) 130672 ( 0.00%) 83.02
dns 115 ( 0.00%) 40548 ( 0.00%) 352.59
bgp 104 ( 0.00%) 13319 ( 0.00%) 128.07
other 4358 ( 0.01%) 473069 ( 0.00%) 108.55
udp6 27360 ( 0.09%) 5238719 ( 0.03%) 191.47
dns 26828 ( 0.09%) 5128722 ( 0.02%) 191.17
other 532 ( 0.00%) 109997 ( 0.00%) 206.76
icmp6 6125 ( 0.02%) 738401 ( 0.00%) 120.56
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 47 ( 0.00%) 46297 ( 0.00%) 985.04
tcpdump file: 201004140230.dump.gz (760.33 MB)