Traffic Trace Info
DumpFile: 201004141545.dump
FileSize: 2549.16MB
Id: 201004141545
StartTime: Wed Apr 14 15:45:00 2010
EndTime: Wed Apr 14 16:00:01 2010
TotalTime: 900.55 seconds
TotalCapSize: 1992.57MB CapLen: 96 bytes
# of packets: 36476246 (22459.29MB)
AvgRate: 209.20Mbps stddev:20.27M
IP flow (unique src/dst pair) Information
# of flows: 1106911 (avg. 32.95 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.6% 1.0% 0.9% 0.8% 0.8% 0.7% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 630362
Top 10 bandwidth usage (bytes/total in %):
15.5% 9.3% 5.1% 4.8% 4.1% 4.0% 3.6% 2.9% 2.8% 2.5%
# of IPv6 addresses: 1093
Top 10 bandwidth usage (bytes/total in %):
48.2% 48.2% 11.2% 5.3% 3.0% 3.0% 2.6% 2.5% 2.4% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004141545.pktlen.png)
detailed numbers
[ 32- 63]: 6589608
[ 64- 127]: 9369343
[ 128- 255]: 2965503
[ 256- 511]: 1977354
[ 512- 1023]: 1478855
[ 1024- 2047]: 14095583
Protocol Breakdown
![[protocol breakdown chart]](201004141545.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36476246 (100.00%) 23550275626 (100.00%) 645.63
ip 36412639 ( 99.83%) 23530772878 ( 99.92%) 646.23
tcp 22401487 ( 61.41%) 16278947767 ( 69.12%) 726.69
http(s) 9430321 ( 25.85%) 12728973899 ( 54.05%) 1349.79
http(c) 7670161 ( 21.03%) 938611271 ( 3.99%) 122.37
squid 258635 ( 0.71%) 74817756 ( 0.32%) 289.28
smtp 351283 ( 0.96%) 93308706 ( 0.40%) 265.62
nntp 9 ( 0.00%) 558 ( 0.00%) 62.00
ftp 39264 ( 0.11%) 21857378 ( 0.09%) 556.68
pop3 26102 ( 0.07%) 16868339 ( 0.07%) 646.25
imap 5166 ( 0.01%) 2992066 ( 0.01%) 579.18
telnet 651 ( 0.00%) 50868 ( 0.00%) 78.14
ssh 268030 ( 0.73%) 43337724 ( 0.18%) 161.69
dns 56342 ( 0.15%) 3892517 ( 0.02%) 69.09
bgp 138 ( 0.00%) 48326 ( 0.00%) 350.19
napster 123 ( 0.00%) 10321 ( 0.00%) 83.91
realaud 102 ( 0.00%) 6907 ( 0.00%) 67.72
rtsp 173164 ( 0.47%) 133485498 ( 0.57%) 770.86
icecast 5326 ( 0.01%) 365571 ( 0.00%) 68.64
hotline 7 ( 0.00%) 668 ( 0.00%) 95.43
other 4116651 ( 11.29%) 2220318674 ( 9.43%) 539.35
udp 9966397 ( 27.32%) 4985099266 ( 21.17%) 500.19
dns 789997 ( 2.17%) 133161384 ( 0.57%) 168.56
rip 1 ( 0.00%) 109 ( 0.00%) 109.00
realaud 25 ( 0.00%) 2898 ( 0.00%) 115.92
halflif 1275 ( 0.00%) 82758 ( 0.00%) 64.91
starcra 329 ( 0.00%) 40148 ( 0.00%) 122.03
everque 613 ( 0.00%) 119892 ( 0.00%) 195.58
unreal 80 ( 0.00%) 12855 ( 0.00%) 160.69
quake 65 ( 0.00%) 5978 ( 0.00%) 91.97
cuseeme 8 ( 0.00%) 797 ( 0.00%) 99.62
other 9173505 ( 25.15%) 4851430146 ( 20.60%) 528.85
icmp 488193 ( 1.34%) 55136853 ( 0.23%) 112.94
ipip 325 ( 0.00%) 38828 ( 0.00%) 119.47
ipsec 1736 ( 0.00%) 490960 ( 0.00%) 282.81
ip6 3489999 ( 9.57%) 2201101809 ( 9.35%) 630.69
other 64502 ( 0.18%) 9957395 ( 0.04%) 154.37
frag 2407 ( 0.01%) 2417705 ( 0.01%) 1004.45
ip6 63607 ( 0.17%) 19502748 ( 0.08%) 306.61
tcp6 24665 ( 0.07%) 11951088 ( 0.05%) 484.54
http(s) 311 ( 0.00%) 408811 ( 0.00%) 1314.50
http(c) 4317 ( 0.01%) 384473 ( 0.00%) 89.06
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 257 ( 0.00%) 115084 ( 0.00%) 447.80
ftp 2689 ( 0.01%) 278624 ( 0.00%) 103.62
imap 358 ( 0.00%) 42307 ( 0.00%) 118.18
ssh 5541 ( 0.02%) 941942 ( 0.00%) 169.99
dns 159 ( 0.00%) 46151 ( 0.00%) 290.26
bgp 106 ( 0.00%) 14237 ( 0.00%) 134.31
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 10924 ( 0.03%) 9719237 ( 0.04%) 889.71
udp6 32348 ( 0.09%) 6707280 ( 0.03%) 207.35
dns 32096 ( 0.09%) 6671833 ( 0.03%) 207.87
other 252 ( 0.00%) 35447 ( 0.00%) 140.66
icmp6 6487 ( 0.02%) 772843 ( 0.00%) 119.14
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 77 ( 0.00%) 67457 ( 0.00%) 876.06
tcpdump file: 201004141545.dump.gz (918.21 MB)