Traffic Trace Info
DumpFile: 201004141200.dump
FileSize: 2867.76MB
Id: 201004141200
StartTime: Wed Apr 14 12:00:01 2010
EndTime: Wed Apr 14 12:15:01 2010
TotalTime: 900.26 seconds
TotalCapSize: -1834.19MB CapLen: 96 bytes
# of packets: 39710901 (26702.49MB)
AvgRate: 248.86Mbps stddev:38.58M
IP flow (unique src/dst pair) Information
# of flows: 1167057 (avg. 34.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
16.3% 3.1% 2.1% 1.8% 1.6% 1.3% 1.2% 1.0% 0.9% 0.7%
IP address Information
# of IPv4 addresses: 670911
Top 10 bandwidth usage (bytes/total in %):
17.2% 16.7% 10.7% 7.7% 3.2% 3.2% 3.1% 3.1% 2.6% 2.4%
# of IPv6 addresses: 1023
Top 10 bandwidth usage (bytes/total in %):
69.9% 69.3% 6.9% 2.8% 2.8% 2.4% 1.9% 1.5% 1.5% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004141200.pktlen.png)
detailed numbers
[ 32- 63]: 5891974
[ 64- 127]: 11191304
[ 128- 255]: 2476685
[ 256- 511]: 1815940
[ 512- 1023]: 1185547
[ 1024- 2047]: 17149451
Protocol Breakdown
![[protocol breakdown chart]](201004141200.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39710901 (100.00%) 27999586503 (100.00%) 705.09
ip 39641466 ( 99.83%) 27967780122 ( 99.89%) 705.52
tcp 27369654 ( 68.92%) 21574208149 ( 77.05%) 788.25
http(s) 9084400 ( 22.88%) 12204840962 ( 43.59%) 1343.49
http(c) 6799594 ( 17.12%) 1119901096 ( 4.00%) 164.70
squid 263438 ( 0.66%) 99575609 ( 0.36%) 377.98
smtp 338750 ( 0.85%) 112928545 ( 0.40%) 333.37
ftp 29602 ( 0.07%) 5311936 ( 0.02%) 179.45
pop3 19335 ( 0.05%) 9295611 ( 0.03%) 480.77
imap 7269 ( 0.02%) 1073725 ( 0.00%) 147.71
telnet 1549 ( 0.00%) 105341 ( 0.00%) 68.01
ssh 680182 ( 1.71%) 111349618 ( 0.40%) 163.71
dns 54848 ( 0.14%) 3748277 ( 0.01%) 68.34
bgp 148 ( 0.00%) 47936 ( 0.00%) 323.89
napster 32 ( 0.00%) 2171 ( 0.00%) 67.84
realaud 23 ( 0.00%) 3027 ( 0.00%) 131.61
rtsp 96878 ( 0.24%) 53825543 ( 0.19%) 555.60
icecast 867 ( 0.00%) 106384 ( 0.00%) 122.70
hotline 7 ( 0.00%) 883 ( 0.00%) 126.14
other 9992730 ( 25.16%) 7852091365 ( 28.04%) 785.78
udp 7958552 ( 20.04%) 3999527763 ( 14.28%) 502.54
dns 806453 ( 2.03%) 173940484 ( 0.62%) 215.69
rip 2 ( 0.00%) 254 ( 0.00%) 127.00
realaud 35 ( 0.00%) 4472 ( 0.00%) 127.77
halflif 786 ( 0.00%) 59619 ( 0.00%) 75.85
starcra 192 ( 0.00%) 20342 ( 0.00%) 105.95
everque 1125 ( 0.00%) 149304 ( 0.00%) 132.71
unreal 118 ( 0.00%) 20191 ( 0.00%) 171.11
quake 11537 ( 0.03%) 6649958 ( 0.02%) 576.40
cuseeme 4 ( 0.00%) 366 ( 0.00%) 91.50
other 7137706 ( 17.97%) 3818413001 ( 13.64%) 534.96
icmp 630062 ( 1.59%) 76415939 ( 0.27%) 121.28
ipip 335 ( 0.00%) 40358 ( 0.00%) 120.47
ipsec 1729 ( 0.00%) 515382 ( 0.00%) 298.08
ip6 3628149 ( 9.14%) 2309973482 ( 8.25%) 636.68
other 52985 ( 0.13%) 7099049 ( 0.03%) 133.98
frag 21564 ( 0.05%) 25080129 ( 0.09%) 1163.06
ip6 69435 ( 0.17%) 31806381 ( 0.11%) 458.07
tcp6 33292 ( 0.08%) 24780594 ( 0.09%) 744.34
http(s) 355 ( 0.00%) 307640 ( 0.00%) 866.59
http(c) 4140 ( 0.01%) 372475 ( 0.00%) 89.97
smtp 171 ( 0.00%) 54995 ( 0.00%) 321.61
ftp 2741 ( 0.01%) 281708 ( 0.00%) 102.78
imap 368 ( 0.00%) 41155 ( 0.00%) 111.83
ssh 3267 ( 0.01%) 281366 ( 0.00%) 86.12
dns 119 ( 0.00%) 41722 ( 0.00%) 350.61
bgp 119 ( 0.00%) 15843 ( 0.00%) 133.13
other 22012 ( 0.06%) 23383690 ( 0.08%) 1062.32
udp6 29295 ( 0.07%) 6150391 ( 0.02%) 209.95
dns 29136 ( 0.07%) 6122765 ( 0.02%) 210.14
other 159 ( 0.00%) 27626 ( 0.00%) 173.75
icmp6 6756 ( 0.02%) 820601 ( 0.00%) 121.46
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 62 ( 0.00%) 50715 ( 0.00%) 817.98
tcpdump file: 201004141200.dump.gz (992.72 MB)