Traffic Trace Info
DumpFile: 201004140245.dump
FileSize: 1987.23MB
Id: 201004140245
StartTime: Wed Apr 14 02:45:00 2010
EndTime: Wed Apr 14 03:00:01 2010
TotalTime: 901.00 seconds
TotalCapSize: 1549.23MB CapLen: 96 bytes
# of packets: 28704293 (18482.32MB)
AvgRate: 172.06Mbps stddev:16.59M
IP flow (unique src/dst pair) Information
# of flows: 1302992 (avg. 22.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.0% 0.8% 0.7% 0.7% 0.7% 0.6% 0.6% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 722223
Top 10 bandwidth usage (bytes/total in %):
20.9% 8.9% 7.8% 7.0% 7.0% 6.1% 4.1% 3.4% 3.2% 2.8%
# of IPv6 addresses: 930
Top 10 bandwidth usage (bytes/total in %):
28.1% 12.1% 7.4% 6.2% 6.1% 6.1% 5.2% 4.3% 3.0% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004140245.pktlen.png)
detailed numbers
[ 32- 63]: 4558326
[ 64- 127]: 7709598
[ 128- 255]: 2159419
[ 256- 511]: 1723979
[ 512- 1023]: 709893
[ 1024- 2047]: 11843078
Protocol Breakdown
![[protocol breakdown chart]](201004140245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28704293 (100.00%) 19380113561 (100.00%) 675.16
ip 28656749 ( 99.83%) 19372311037 ( 99.96%) 676.01
tcp 16042275 ( 55.89%) 12540037948 ( 64.71%) 781.69
http(s) 7444557 ( 25.94%) 10342010110 ( 53.36%) 1389.20
http(c) 4159134 ( 14.49%) 403285764 ( 2.08%) 96.96
squid 363490 ( 1.27%) 139686611 ( 0.72%) 384.29
smtp 317188 ( 1.11%) 52784143 ( 0.27%) 166.41
ftp 23595 ( 0.08%) 2107823 ( 0.01%) 89.33
pop3 8290 ( 0.03%) 5991773 ( 0.03%) 722.77
imap 638 ( 0.00%) 115822 ( 0.00%) 181.54
telnet 2875 ( 0.01%) 204184 ( 0.00%) 71.02
ssh 25453 ( 0.09%) 13561807 ( 0.07%) 532.82
dns 52542 ( 0.18%) 3633489 ( 0.02%) 69.15
bgp 143 ( 0.00%) 46116 ( 0.00%) 322.49
napster 56 ( 0.00%) 3766 ( 0.00%) 67.25
realaud 14 ( 0.00%) 1586 ( 0.00%) 113.29
rtsp 77 ( 0.00%) 5514 ( 0.00%) 71.61
icecast 224 ( 0.00%) 14180 ( 0.00%) 63.30
hotline 13 ( 0.00%) 1288 ( 0.00%) 99.08
other 3643983 ( 12.69%) 1576583792 ( 8.14%) 432.65
udp 8885090 ( 30.95%) 5094699148 ( 26.29%) 573.40
dns 664400 ( 2.31%) 116240770 ( 0.60%) 174.96
realaud 53 ( 0.00%) 6010 ( 0.00%) 113.40
halflif 100 ( 0.00%) 10230 ( 0.00%) 102.30
starcra 323 ( 0.00%) 37042 ( 0.00%) 114.68
everque 336 ( 0.00%) 56964 ( 0.00%) 169.54
unreal 119 ( 0.00%) 15615 ( 0.00%) 131.22
quake 34 ( 0.00%) 4518 ( 0.00%) 132.88
cuseeme 22 ( 0.00%) 4295 ( 0.00%) 195.23
other 8219077 ( 28.63%) 4978009369 ( 25.69%) 605.67
icmp 958371 ( 3.34%) 155176913 ( 0.80%) 161.92
ipip 356 ( 0.00%) 42928 ( 0.00%) 120.58
ipsec 5692 ( 0.02%) 2066732 ( 0.01%) 363.09
ip6 2712970 ( 9.45%) 1529039152 ( 7.89%) 563.60
other 51995 ( 0.18%) 51248216 ( 0.26%) 985.64
frag 2601 ( 0.01%) 2652211 ( 0.01%) 1019.69
ip6 47544 ( 0.17%) 7802524 ( 0.04%) 164.11
tcp6 13266 ( 0.05%) 1673918 ( 0.01%) 126.18
http(s) 113 ( 0.00%) 103284 ( 0.00%) 914.02
http(c) 3587 ( 0.01%) 376506 ( 0.00%) 104.96
smtp 330 ( 0.00%) 213795 ( 0.00%) 647.86
ftp 2737 ( 0.01%) 282149 ( 0.00%) 103.09
imap 245 ( 0.00%) 28263 ( 0.00%) 115.36
ssh 1724 ( 0.01%) 143536 ( 0.00%) 83.26
dns 113 ( 0.00%) 36261 ( 0.00%) 320.89
bgp 112 ( 0.00%) 15266 ( 0.00%) 136.30
other 4305 ( 0.01%) 474858 ( 0.00%) 110.30
udp6 28133 ( 0.10%) 5331695 ( 0.03%) 189.52
dns 27687 ( 0.10%) 5234038 ( 0.03%) 189.04
other 446 ( 0.00%) 97657 ( 0.00%) 218.96
icmp6 6065 ( 0.02%) 750914 ( 0.00%) 123.81
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 50 ( 0.00%) 41917 ( 0.00%) 838.34
tcpdump file: 201004140245.dump.gz (740.14 MB)