Traffic Trace Info
DumpFile: 201004140330.dump
FileSize: 2109.71MB
Id: 201004140330
StartTime: Wed Apr 14 03:30:01 2010
EndTime: Wed Apr 14 03:45:00 2010
TotalTime: 899.41 seconds
TotalCapSize: 1650.77MB CapLen: 96 bytes
# of packets: 30076804 (20045.38MB)
AvgRate: 186.97Mbps stddev:14.52M
IP flow (unique src/dst pair) Information
# of flows: 1188150 (avg. 25.31 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.9% 1.9% 1.6% 1.3% 1.0% 0.9% 0.7% 0.7% 0.5%
IP address Information
# of IPv4 addresses: 687349
Top 10 bandwidth usage (bytes/total in %):
18.3% 8.7% 7.5% 7.2% 6.9% 6.1% 5.9% 4.4% 3.8% 3.4%
# of IPv6 addresses: 932
Top 10 bandwidth usage (bytes/total in %):
47.3% 47.3% 14.2% 5.4% 3.3% 3.2% 3.1% 2.6% 2.4% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004140330.pktlen.png)
detailed numbers
[ 32- 63]: 4812308
[ 64- 127]: 7897295
[ 128- 255]: 1888427
[ 256- 511]: 1810621
[ 512- 1023]: 776893
[ 1024- 2047]: 12891260
Protocol Breakdown
![[protocol breakdown chart]](201004140330.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30076804 (100.00%) 21019109063 (100.00%) 698.85
ip 30019583 ( 99.81%) 21003666367 ( 99.93%) 699.67
tcp 18043495 ( 59.99%) 14661302656 ( 69.75%) 812.55
http(s) 8610346 ( 28.63%) 12132788774 ( 57.72%) 1409.09
http(c) 4525900 ( 15.05%) 387907660 ( 1.85%) 85.71
squid 282176 ( 0.94%) 84056134 ( 0.40%) 297.89
smtp 318759 ( 1.06%) 96664663 ( 0.46%) 303.25
ftp 18496 ( 0.06%) 1674783 ( 0.01%) 90.55
pop3 8446 ( 0.03%) 6852275 ( 0.03%) 811.30
imap 634 ( 0.00%) 151418 ( 0.00%) 238.83
telnet 4941 ( 0.02%) 341397 ( 0.00%) 69.09
ssh 217976 ( 0.72%) 16238693 ( 0.08%) 74.50
dns 52203 ( 0.17%) 4760634 ( 0.02%) 91.19
bgp 149 ( 0.00%) 49116 ( 0.00%) 329.64
napster 41 ( 0.00%) 2460 ( 0.00%) 60.00
rtsp 98 ( 0.00%) 6748 ( 0.00%) 68.86
icecast 373 ( 0.00%) 38556 ( 0.00%) 103.37
other 4002956 ( 13.31%) 1929769285 ( 9.18%) 482.09
udp 7906520 ( 26.29%) 4302137240 ( 20.47%) 544.13
dns 740938 ( 2.46%) 169786196 ( 0.81%) 229.15
rip 1 ( 0.00%) 109 ( 0.00%) 109.00
realaud 47 ( 0.00%) 5325 ( 0.00%) 113.30
halflif 100 ( 0.00%) 10246 ( 0.00%) 102.46
starcra 236 ( 0.00%) 21541 ( 0.00%) 91.28
everque 770 ( 0.00%) 270704 ( 0.00%) 351.56
unreal 148 ( 0.00%) 20658 ( 0.00%) 139.58
quake 44 ( 0.00%) 3552 ( 0.00%) 80.73
cuseeme 3 ( 0.00%) 563 ( 0.00%) 187.67
other 7162277 ( 23.81%) 4130557237 ( 19.65%) 576.71
icmp 962393 ( 3.20%) 166404509 ( 0.79%) 172.91
ipip 314 ( 0.00%) 36862 ( 0.00%) 117.39
ipsec 5088 ( 0.02%) 2177824 ( 0.01%) 428.03
ip6 3062696 ( 10.18%) 1842225378 ( 8.76%) 601.50
other 39077 ( 0.13%) 29381898 ( 0.14%) 751.90
frag 43283 ( 0.14%) 48573417 ( 0.23%) 1122.23
ip6 57221 ( 0.19%) 15442696 ( 0.07%) 269.88
tcp6 23250 ( 0.08%) 9057690 ( 0.04%) 389.58
http(s) 63 ( 0.00%) 27808 ( 0.00%) 441.40
http(c) 6897 ( 0.02%) 663171 ( 0.00%) 96.15
smtp 163 ( 0.00%) 57289 ( 0.00%) 351.47
ftp 2727 ( 0.01%) 283269 ( 0.00%) 103.88
imap 368 ( 0.00%) 43089 ( 0.00%) 117.09
ssh 1589 ( 0.01%) 131954 ( 0.00%) 83.04
dns 249 ( 0.00%) 64568 ( 0.00%) 259.31
bgp 111 ( 0.00%) 14054 ( 0.00%) 126.61
other 11083 ( 0.04%) 7772488 ( 0.04%) 701.30
udp6 27678 ( 0.09%) 5577504 ( 0.03%) 201.51
dns 27357 ( 0.09%) 5503150 ( 0.03%) 201.16
other 321 ( 0.00%) 74354 ( 0.00%) 231.63
icmp6 6205 ( 0.02%) 758278 ( 0.00%) 122.20
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 57 ( 0.00%) 45008 ( 0.00%) 789.61
tcpdump file: 201004140330.dump.gz (774.47 MB)