Traffic Trace Info
DumpFile: 201004141130.dump
FileSize: 2448.69MB
Id: 201004141130
StartTime: Wed Apr 14 11:30:00 2010
EndTime: Wed Apr 14 11:45:01 2010
TotalTime: 900.29 seconds
TotalCapSize: 1925.02MB CapLen: 96 bytes
# of packets: 34318192 (21497.66MB)
AvgRate: 200.32Mbps stddev:14.98M
IP flow (unique src/dst pair) Information
# of flows: 1100936 (avg. 31.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.9% 2.2% 1.4% 1.1% 1.0% 1.0% 0.8% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 627163
Top 10 bandwidth usage (bytes/total in %):
14.6% 13.7% 13.2% 9.0% 3.5% 2.8% 2.6% 2.5% 2.5% 2.3%
# of IPv6 addresses: 1037
Top 10 bandwidth usage (bytes/total in %):
66.4% 66.4% 6.4% 3.0% 3.0% 2.3% 2.3% 2.1% 1.9% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004141130.pktlen.png)
detailed numbers
[ 32- 63]: 5507990
[ 64- 127]: 9952875
[ 128- 255]: 2453474
[ 256- 511]: 1731902
[ 512- 1023]: 1016268
[ 1024- 2047]: 13655683
Protocol Breakdown
![[protocol breakdown chart]](201004141130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34318192 (100.00%) 22541929085 (100.00%) 656.85
ip 34237802 ( 99.77%) 22507698014 ( 99.85%) 657.39
tcp 22008722 ( 64.13%) 15981375173 ( 70.90%) 726.14
http(s) 7368223 ( 21.47%) 9700861756 ( 43.03%) 1316.58
http(c) 6615171 ( 19.28%) 844197197 ( 3.75%) 127.62
squid 232872 ( 0.68%) 78981717 ( 0.35%) 339.16
smtp 408025 ( 1.19%) 186214017 ( 0.83%) 456.38
ftp 22053 ( 0.06%) 2049642 ( 0.01%) 92.94
pop3 15394 ( 0.04%) 6882737 ( 0.03%) 447.11
imap 7219 ( 0.02%) 2574424 ( 0.01%) 356.62
telnet 1483 ( 0.00%) 100331 ( 0.00%) 67.65
ssh 366712 ( 1.07%) 50182396 ( 0.22%) 136.84
dns 54277 ( 0.16%) 3743693 ( 0.02%) 68.97
bgp 141 ( 0.00%) 38756 ( 0.00%) 274.87
napster 40 ( 0.00%) 4674 ( 0.00%) 116.85
realaud 337 ( 0.00%) 23659 ( 0.00%) 70.20
rtsp 234422 ( 0.68%) 125566090 ( 0.56%) 535.64
icecast 1052 ( 0.00%) 110867 ( 0.00%) 105.39
hotline 23 ( 0.00%) 1941 ( 0.00%) 84.39
other 6681278 ( 19.47%) 4979841276 ( 22.09%) 745.34
udp 8380194 ( 24.42%) 4405136762 ( 19.54%) 525.66
dns 690538 ( 2.01%) 117838333 ( 0.52%) 170.65
realaud 21 ( 0.00%) 2401 ( 0.00%) 114.33
halflif 155 ( 0.00%) 13147 ( 0.00%) 84.82
starcra 173 ( 0.00%) 17945 ( 0.00%) 103.73
everque 3114 ( 0.01%) 513740 ( 0.00%) 164.98
unreal 100 ( 0.00%) 14993 ( 0.00%) 149.93
quake 13358 ( 0.04%) 9893526 ( 0.04%) 740.64
cuseeme 2 ( 0.00%) 204 ( 0.00%) 102.00
other 7671985 ( 22.36%) 4276451926 ( 18.97%) 557.41
icmp 551165 ( 1.61%) 70205288 ( 0.31%) 127.38
ipip 347 ( 0.00%) 42034 ( 0.00%) 121.14
ipsec 3579 ( 0.01%) 825666 ( 0.00%) 230.70
ip6 3288937 ( 9.58%) 2049379771 ( 9.09%) 623.11
other 4858 ( 0.01%) 733320 ( 0.00%) 150.95
frag 2648 ( 0.01%) 2553782 ( 0.01%) 964.42
ip6 80390 ( 0.23%) 34231071 ( 0.15%) 425.81
tcp6 44669 ( 0.13%) 27150271 ( 0.12%) 607.81
http(s) 706 ( 0.00%) 630110 ( 0.00%) 892.51
http(c) 13934 ( 0.04%) 1266108 ( 0.01%) 90.86
squid 4 ( 0.00%) 296 ( 0.00%) 74.00
smtp 173 ( 0.00%) 64341 ( 0.00%) 371.91
ftp 2758 ( 0.01%) 285521 ( 0.00%) 103.52
imap 377 ( 0.00%) 42392 ( 0.00%) 112.45
ssh 4093 ( 0.01%) 664578 ( 0.00%) 162.37
dns 139 ( 0.00%) 39008 ( 0.00%) 280.63
bgp 105 ( 0.00%) 14194 ( 0.00%) 135.18
icecast 2 ( 0.00%) 148 ( 0.00%) 74.00
other 22378 ( 0.07%) 24143575 ( 0.11%) 1078.90
udp6 29614 ( 0.09%) 6237038 ( 0.03%) 210.61
dns 29425 ( 0.09%) 6204937 ( 0.03%) 210.87
other 189 ( 0.00%) 32101 ( 0.00%) 169.85
icmp6 5937 ( 0.02%) 714853 ( 0.00%) 120.41
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 140 ( 0.00%) 124829 ( 0.00%) 891.64
tcpdump file: 201004141130.dump.gz (866.91 MB)