Traffic Trace Info
DumpFile: 201004141245.dump
FileSize: 2921.06MB
Id: 201004141245
StartTime: Wed Apr 14 12:45:01 2010
EndTime: Wed Apr 14 13:00:01 2010
TotalTime: 899.75 seconds
TotalCapSize: -1790.57MB CapLen: 96 bytes
# of packets: 40334477 (27042.09MB)
AvgRate: 252.10Mbps stddev:24.85M
IP flow (unique src/dst pair) Information
# of flows: 1086231 (avg. 37.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
24.8% 2.3% 1.7% 1.4% 0.9% 0.9% 0.6% 0.6% 0.6% 0.5%
IP address Information
# of IPv4 addresses: 606371
Top 10 bandwidth usage (bytes/total in %):
26.0% 25.4% 10.4% 8.5% 4.1% 2.6% 2.5% 2.3% 2.3% 2.1%
# of IPv6 addresses: 992
Top 10 bandwidth usage (bytes/total in %):
68.0% 68.0% 7.6% 2.3% 2.3% 2.1% 2.1% 1.7% 1.7% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004141245.pktlen.png)
detailed numbers
[ 32- 63]: 5432797
[ 64- 127]: 12221813
[ 128- 255]: 2400740
[ 256- 511]: 1908991
[ 512- 1023]: 1026096
[ 1024- 2047]: 17344040
Protocol Breakdown
![[protocol breakdown chart]](201004141245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40334477 (100.00%) 28355686812 (100.00%) 703.01
ip 40266874 ( 99.83%) 28327107667 ( 99.90%) 703.48
tcp 27308526 ( 67.71%) 21348712902 ( 75.29%) 781.76
http(s) 7668780 ( 19.01%) 10102123135 ( 35.63%) 1317.31
http(c) 6181622 ( 15.33%) 847207175 ( 2.99%) 137.05
squid 240048 ( 0.60%) 83429129 ( 0.29%) 347.55
smtp 317490 ( 0.79%) 83820057 ( 0.30%) 264.01
ftp 17458 ( 0.04%) 2565830 ( 0.01%) 146.97
pop3 35470 ( 0.09%) 10026091 ( 0.04%) 282.66
imap 4209 ( 0.01%) 968153 ( 0.00%) 230.02
telnet 640 ( 0.00%) 92614 ( 0.00%) 144.71
ssh 681847 ( 1.69%) 102328804 ( 0.36%) 150.08
dns 55276 ( 0.14%) 3834072 ( 0.01%) 69.36
bgp 144 ( 0.00%) 41217 ( 0.00%) 286.23
napster 63 ( 0.00%) 5454 ( 0.00%) 86.57
realaud 42 ( 0.00%) 2724 ( 0.00%) 64.86
rtsp 142945 ( 0.35%) 95150414 ( 0.34%) 665.64
icecast 26225 ( 0.07%) 15788403 ( 0.06%) 602.04
other 11936262 ( 29.59%) 10001329330 ( 35.27%) 837.89
udp 8601373 ( 21.33%) 4492947431 ( 15.84%) 522.35
dns 820759 ( 2.03%) 174736966 ( 0.62%) 212.90
realaud 58 ( 0.00%) 6362 ( 0.00%) 109.69
halflif 174 ( 0.00%) 22359 ( 0.00%) 128.50
starcra 244 ( 0.00%) 29286 ( 0.00%) 120.02
everque 602 ( 0.00%) 120442 ( 0.00%) 200.07
unreal 108 ( 0.00%) 16103 ( 0.00%) 149.10
quake 21690 ( 0.05%) 17519234 ( 0.06%) 807.71
cuseeme 5 ( 0.00%) 493 ( 0.00%) 98.60
other 7757143 ( 19.23%) 4300204963 ( 15.17%) 554.35
icmp 486524 ( 1.21%) 54523913 ( 0.19%) 112.07
ipip 331 ( 0.00%) 42284 ( 0.00%) 127.75
ipsec 1825 ( 0.00%) 537718 ( 0.00%) 294.64
ip6 3820959 ( 9.47%) 2424158685 ( 8.55%) 634.44
other 47336 ( 0.12%) 6184734 ( 0.02%) 130.66
frag 12522 ( 0.03%) 14333821 ( 0.05%) 1144.69
ip6 67603 ( 0.17%) 28579145 ( 0.10%) 422.75
tcp6 32489 ( 0.08%) 22006208 ( 0.08%) 677.34
http(s) 103 ( 0.00%) 69303 ( 0.00%) 672.84
http(c) 4231 ( 0.01%) 385625 ( 0.00%) 91.14
smtp 282 ( 0.00%) 84882 ( 0.00%) 301.00
ftp 2695 ( 0.01%) 279257 ( 0.00%) 103.62
imap 357 ( 0.00%) 42158 ( 0.00%) 118.09
ssh 3232 ( 0.01%) 273888 ( 0.00%) 84.74
dns 113 ( 0.00%) 29812 ( 0.00%) 263.82
bgp 118 ( 0.00%) 15841 ( 0.00%) 134.25
other 21358 ( 0.05%) 20825442 ( 0.07%) 975.07
udp6 28686 ( 0.07%) 5755547 ( 0.02%) 200.64
dns 28156 ( 0.07%) 5684620 ( 0.02%) 201.90
other 530 ( 0.00%) 70927 ( 0.00%) 133.82
icmp6 6319 ( 0.02%) 751506 ( 0.00%) 118.93
rtopt6 2 ( 0.00%) 284 ( 0.00%) 142.00
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 76 ( 0.00%) 61384 ( 0.00%) 807.68
tcpdump file: 201004141245.dump.gz (1007.86 MB)