Traffic Trace Info
DumpFile: 201004141115.dump
FileSize: 2340.81MB
Id: 201004141115
StartTime: Wed Apr 14 11:15:01 2010
EndTime: Wed Apr 14 11:30:00 2010
TotalTime: 899.44 seconds
TotalCapSize: 1841.30MB CapLen: 96 bytes
# of packets: 32735158 (21346.47MB)
AvgRate: 199.10Mbps stddev:17.04M
IP flow (unique src/dst pair) Information
# of flows: 1133144 (avg. 28.89 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.8% 2.2% 1.7% 1.2% 1.2% 1.0% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 647788
Top 10 bandwidth usage (bytes/total in %):
14.6% 14.1% 13.6% 8.3% 3.7% 2.9% 2.9% 2.9% 2.8% 2.8%
# of IPv6 addresses: 1005
Top 10 bandwidth usage (bytes/total in %):
67.5% 67.5% 7.3% 4.0% 4.0% 2.4% 1.7% 1.6% 1.6% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004141115.pktlen.png)
detailed numbers
[ 32- 63]: 4855706
[ 64- 127]: 9445931
[ 128- 255]: 2148641
[ 256- 511]: 1776081
[ 512- 1023]: 853773
[ 1024- 2047]: 13655026
Protocol Breakdown
![[protocol breakdown chart]](201004141115.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32735158 (100.00%) 22383396720 (100.00%) 683.77
ip 32663557 ( 99.78%) 22353295292 ( 99.87%) 684.35
tcp 20882040 ( 63.79%) 16175075111 ( 72.26%) 774.59
http(s) 7539387 ( 23.03%) 10020412423 ( 44.77%) 1329.08
http(c) 5846463 ( 17.86%) 780509049 ( 3.49%) 133.50
squid 241700 ( 0.74%) 94227330 ( 0.42%) 389.85
smtp 297002 ( 0.91%) 68544250 ( 0.31%) 230.79
ftp 34460 ( 0.11%) 10178820 ( 0.05%) 295.38
pop3 21752 ( 0.07%) 9073204 ( 0.04%) 417.12
imap 3882 ( 0.01%) 1313834 ( 0.01%) 338.44
telnet 775 ( 0.00%) 53379 ( 0.00%) 68.88
ssh 158181 ( 0.48%) 138861595 ( 0.62%) 877.87
dns 56063 ( 0.17%) 3882082 ( 0.02%) 69.24
bgp 141 ( 0.00%) 37728 ( 0.00%) 267.57
realaud 9 ( 0.00%) 743 ( 0.00%) 82.56
rtsp 70970 ( 0.22%) 64181643 ( 0.29%) 904.35
icecast 1721 ( 0.01%) 716171 ( 0.00%) 416.14
other 6609530 ( 20.19%) 4983082620 ( 22.26%) 753.92
udp 8119306 ( 24.80%) 4245285246 ( 18.97%) 522.86
dns 679651 ( 2.08%) 116818798 ( 0.52%) 171.88
realaud 22 ( 0.00%) 2270 ( 0.00%) 103.18
halflif 111 ( 0.00%) 16283 ( 0.00%) 146.69
starcra 262 ( 0.00%) 30805 ( 0.00%) 117.58
everque 738 ( 0.00%) 138594 ( 0.00%) 187.80
unreal 132 ( 0.00%) 24867 ( 0.00%) 188.39
quake 16550 ( 0.05%) 12629565 ( 0.06%) 763.12
cuseeme 2 ( 0.00%) 201 ( 0.00%) 100.50
other 7421033 ( 22.67%) 4115260325 ( 18.39%) 554.54
icmp 538408 ( 1.64%) 59696706 ( 0.27%) 110.88
ipip 332 ( 0.00%) 39468 ( 0.00%) 118.88
ipsec 3111 ( 0.01%) 945966 ( 0.00%) 304.07
ip6 3115502 ( 9.52%) 1871510808 ( 8.36%) 600.71
other 4858 ( 0.01%) 741987 ( 0.00%) 152.74
frag 2892 ( 0.01%) 2555288 ( 0.01%) 883.57
ip6 71601 ( 0.22%) 30101428 ( 0.13%) 420.41
tcp6 37374 ( 0.11%) 23526066 ( 0.11%) 629.48
http(s) 176 ( 0.00%) 112391 ( 0.00%) 638.59
http(c) 8557 ( 0.03%) 733849 ( 0.00%) 85.76
smtp 195 ( 0.00%) 88235 ( 0.00%) 452.49
ftp 2716 ( 0.01%) 279282 ( 0.00%) 102.83
imap 460 ( 0.00%) 53022 ( 0.00%) 115.27
ssh 3469 ( 0.01%) 320766 ( 0.00%) 92.47
dns 146 ( 0.00%) 34099 ( 0.00%) 233.55
bgp 112 ( 0.00%) 16635 ( 0.00%) 148.53
other 21543 ( 0.07%) 21887787 ( 0.10%) 1016.00
udp6 28112 ( 0.09%) 5793608 ( 0.03%) 206.09
dns 27839 ( 0.09%) 5749053 ( 0.03%) 206.51
other 273 ( 0.00%) 44555 ( 0.00%) 163.21
icmp6 6027 ( 0.02%) 727725 ( 0.00%) 120.74
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 58 ( 0.00%) 49949 ( 0.00%) 861.19
tcpdump file: 201004141115.dump.gz (831.54 MB)