Traffic Trace Info
DumpFile: 201004141315.dump
FileSize: 3065.81MB
Id: 201004141315
StartTime: Wed Apr 14 13:15:00 2010
EndTime: Wed Apr 14 13:30:01 2010
TotalTime: 900.13 seconds
TotalCapSize: -1680.03MB CapLen: 96 bytes
# of packets: 42583887 (28067.19MB)
AvgRate: 261.57Mbps stddev:28.48M
IP flow (unique src/dst pair) Information
# of flows: 1001547 (avg. 42.52 pkts/flow)
Top 10 big flow size (bytes/total in %):
25.5% 1.4% 1.2% 1.1% 0.9% 0.8% 0.7% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 567785
Top 10 bandwidth usage (bytes/total in %):
26.7% 26.2% 12.2% 7.7% 3.4% 2.9% 2.7% 2.5% 1.9% 1.7%
# of IPv6 addresses: 1023
Top 10 bandwidth usage (bytes/total in %):
68.2% 68.2% 7.1% 3.5% 3.5% 2.4% 1.9% 1.8% 1.6% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004141315.pktlen.png)
detailed numbers
[ 32- 63]: 5351983
[ 64- 127]: 13113418
[ 128- 255]: 3105318
[ 256- 511]: 1912992
[ 512- 1023]: 1099330
[ 1024- 2047]: 18000846
Protocol Breakdown
![[protocol breakdown chart]](201004141315.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42583887 (100.00%) 29430577956 (100.00%) 691.12
ip 42517776 ( 99.84%) 29400812732 ( 99.90%) 691.49
tcp 27964670 ( 65.67%) 21632594627 ( 73.50%) 773.57
http(s) 7746385 ( 18.19%) 10209949903 ( 34.69%) 1318.03
http(c) 6782169 ( 15.93%) 929568832 ( 3.16%) 137.06
squid 218917 ( 0.51%) 69012510 ( 0.23%) 315.25
smtp 309406 ( 0.73%) 95859088 ( 0.33%) 309.82
nntp 4 ( 0.00%) 240 ( 0.00%) 60.00
ftp 16663 ( 0.04%) 3108195 ( 0.01%) 186.53
pop3 20020 ( 0.05%) 6688934 ( 0.02%) 334.11
imap 3208 ( 0.01%) 787418 ( 0.00%) 245.45
telnet 8123 ( 0.02%) 5716468 ( 0.02%) 703.74
ssh 693598 ( 1.63%) 105155487 ( 0.36%) 151.61
dns 52289 ( 0.12%) 3594464 ( 0.01%) 68.74
bgp 756 ( 0.00%) 534663 ( 0.00%) 707.23
napster 193 ( 0.00%) 34544 ( 0.00%) 178.98
realaud 25 ( 0.00%) 2343 ( 0.00%) 93.72
rtsp 80066 ( 0.19%) 50621802 ( 0.17%) 632.25
icecast 6314 ( 0.01%) 964449 ( 0.00%) 152.75
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 12026507 ( 28.24%) 10150993667 ( 34.49%) 844.05
udp 9940554 ( 23.34%) 5375915598 ( 18.27%) 540.81
dns 749389 ( 1.76%) 145098639 ( 0.49%) 193.62
realaud 369 ( 0.00%) 28542 ( 0.00%) 77.35
halflif 571 ( 0.00%) 39978 ( 0.00%) 70.01
starcra 227 ( 0.00%) 31573 ( 0.00%) 139.09
everque 734 ( 0.00%) 132875 ( 0.00%) 181.03
unreal 96 ( 0.00%) 13652 ( 0.00%) 142.21
quake 23 ( 0.00%) 3749 ( 0.00%) 163.00
cuseeme 11 ( 0.00%) 1380 ( 0.00%) 125.45
other 9188457 ( 21.58%) 5230290071 ( 17.77%) 569.22
icmp 1056432 ( 2.48%) 104244426 ( 0.35%) 98.68
ipip 305 ( 0.00%) 38075 ( 0.00%) 124.84
ipsec 1694 ( 0.00%) 499604 ( 0.00%) 294.93
ip6 3542873 ( 8.32%) 2284462149 ( 7.76%) 644.80
other 11248 ( 0.03%) 3058253 ( 0.01%) 271.89
frag 2341 ( 0.01%) 2352559 ( 0.01%) 1004.94
ip6 66111 ( 0.16%) 29765224 ( 0.10%) 450.23
tcp6 32087 ( 0.08%) 23229111 ( 0.08%) 723.94
http(s) 839 ( 0.00%) 1153296 ( 0.00%) 1374.61
http(c) 4041 ( 0.01%) 368232 ( 0.00%) 91.12
smtp 201 ( 0.00%) 85814 ( 0.00%) 426.94
ftp 2603 ( 0.01%) 268834 ( 0.00%) 103.28
imap 265 ( 0.00%) 30476 ( 0.00%) 115.00
ssh 3401 ( 0.01%) 365230 ( 0.00%) 107.39
dns 123 ( 0.00%) 44040 ( 0.00%) 358.05
bgp 156 ( 0.00%) 47508 ( 0.00%) 304.54
other 20458 ( 0.05%) 20865681 ( 0.07%) 1019.93
udp6 27730 ( 0.07%) 5755352 ( 0.02%) 207.55
dns 27432 ( 0.06%) 5718698 ( 0.02%) 208.47
other 298 ( 0.00%) 36654 ( 0.00%) 123.00
icmp6 6232 ( 0.01%) 750144 ( 0.00%) 120.37
pim6 29 ( 0.00%) 3944 ( 0.00%) 136.00
other6 33 ( 0.00%) 26673 ( 0.00%) 808.27
tcpdump file: 201004141315.dump.gz (1057.18 MB)