Traffic Trace Info
DumpFile: 201004141030.dump
FileSize: 2327.78MB
Id: 201004141030
StartTime: Wed Apr 14 10:30:01 2010
EndTime: Wed Apr 14 10:45:01 2010
TotalTime: 900.42 seconds
TotalCapSize: 1819.33MB CapLen: 96 bytes
# of packets: 33320857 (21227.18MB)
AvgRate: 197.77Mbps stddev:19.82M
IP flow (unique src/dst pair) Information
# of flows: 964466 (avg. 34.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.6% 1.9% 1.6% 1.4% 1.3% 1.3% 1.1% 1.1% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 541521
Top 10 bandwidth usage (bytes/total in %):
16.6% 12.4% 11.9% 8.1% 3.5% 3.0% 2.8% 2.8% 2.5% 1.9%
# of IPv6 addresses: 1001
Top 10 bandwidth usage (bytes/total in %):
47.5% 47.5% 14.0% 3.7% 3.5% 3.5% 3.1% 3.0% 2.2% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004141030.pktlen.png)
detailed numbers
[ 32- 63]: 4881091
[ 64- 127]: 8731912
[ 128- 255]: 3107610
[ 256- 511]: 2251210
[ 512- 1023]: 914149
[ 1024- 2047]: 13434885
Protocol Breakdown
![[protocol breakdown chart]](201004141030.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33320857 (100.00%) 22258310382 (100.00%) 668.00
ip 33268787 ( 99.84%) 22242693705 ( 99.93%) 668.58
tcp 19014355 ( 57.06%) 14839255415 ( 66.67%) 780.42
http(s) 6806617 ( 20.43%) 9044095631 ( 40.63%) 1328.72
http(c) 5043165 ( 15.14%) 755086540 ( 3.39%) 149.72
squid 246239 ( 0.74%) 86363763 ( 0.39%) 350.73
smtp 364852 ( 1.09%) 177227370 ( 0.80%) 485.75
ftp 25961 ( 0.08%) 3395251 ( 0.02%) 130.78
pop3 23156 ( 0.07%) 18359439 ( 0.08%) 792.86
imap 2456 ( 0.01%) 651438 ( 0.00%) 265.24
telnet 647 ( 0.00%) 45345 ( 0.00%) 70.09
ssh 372136 ( 1.12%) 47501237 ( 0.21%) 127.64
dns 64143 ( 0.19%) 7931628 ( 0.04%) 123.66
bgp 178 ( 0.00%) 69116 ( 0.00%) 388.29
realaud 56 ( 0.00%) 6351 ( 0.00%) 113.41
rtsp 17211 ( 0.05%) 1135968 ( 0.01%) 66.00
icecast 9902 ( 0.03%) 677323 ( 0.00%) 68.40
hotline 11 ( 0.00%) 1040 ( 0.00%) 94.55
other 6037617 ( 18.12%) 4696707495 ( 21.10%) 777.91
udp 10239929 ( 30.73%) 5416651804 ( 24.34%) 528.97
dns 710270 ( 2.13%) 129579894 ( 0.58%) 182.44
realaud 34 ( 0.00%) 3930 ( 0.00%) 115.59
halflif 1434 ( 0.00%) 100031 ( 0.00%) 69.76
starcra 314 ( 0.00%) 27668 ( 0.00%) 88.11
everque 662 ( 0.00%) 147707 ( 0.00%) 223.12
unreal 106 ( 0.00%) 15315 ( 0.00%) 144.48
quake 13619 ( 0.04%) 8604765 ( 0.04%) 631.82
cuseeme 2 ( 0.00%) 407 ( 0.00%) 203.50
other 9504397 ( 28.52%) 5277360353 ( 23.71%) 555.25
icmp 727642 ( 2.18%) 87201454 ( 0.39%) 119.84
ipip 381 ( 0.00%) 47287 ( 0.00%) 124.11
ipsec 171850 ( 0.52%) 83046004 ( 0.37%) 483.25
ip6 3089828 ( 9.27%) 1812669354 ( 8.14%) 586.66
other 24802 ( 0.07%) 3822387 ( 0.02%) 154.12
frag 36646 ( 0.11%) 28502686 ( 0.13%) 777.78
ip6 52070 ( 0.16%) 15616677 ( 0.07%) 299.92
tcp6 17875 ( 0.05%) 9080762 ( 0.04%) 508.01
http(s) 6150 ( 0.02%) 7886815 ( 0.04%) 1282.41
http(c) 2457 ( 0.01%) 237561 ( 0.00%) 96.69
smtp 202 ( 0.00%) 47160 ( 0.00%) 233.47
ftp 2694 ( 0.01%) 277425 ( 0.00%) 102.98
imap 825 ( 0.00%) 86835 ( 0.00%) 105.25
ssh 1772 ( 0.01%) 151180 ( 0.00%) 85.32
dns 108 ( 0.00%) 35143 ( 0.00%) 325.40
bgp 112 ( 0.00%) 15695 ( 0.00%) 140.13
other 3555 ( 0.01%) 342948 ( 0.00%) 96.47
udp6 27964 ( 0.08%) 5678297 ( 0.03%) 203.06
dns 27790 ( 0.08%) 5649545 ( 0.03%) 203.29
other 174 ( 0.00%) 28752 ( 0.00%) 165.24
icmp6 6078 ( 0.02%) 737948 ( 0.00%) 121.41
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 123 ( 0.00%) 115590 ( 0.00%) 939.76
tcpdump file: 201004141030.dump.gz (814.49 MB)