Traffic Trace Info
DumpFile: 201004141630.dump
FileSize: 2621.85MB
Id: 201004141630
StartTime: Wed Apr 14 16:30:01 2010
EndTime: Wed Apr 14 16:45:00 2010
TotalTime: 899.56 seconds
TotalCapSize: -2044.98MB CapLen: 96 bytes
# of packets: 37409547 (22996.36MB)
AvgRate: 214.45Mbps stddev:19.62M
IP flow (unique src/dst pair) Information
# of flows: 1100994 (avg. 33.98 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 1.5% 1.0% 0.9% 0.8% 0.8% 0.8% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 587560
Top 10 bandwidth usage (bytes/total in %):
15.8% 8.2% 4.8% 4.3% 4.3% 4.3% 4.3% 4.3% 4.1% 3.0%
# of IPv6 addresses: 1146
Top 10 bandwidth usage (bytes/total in %):
50.2% 50.2% 9.5% 7.3% 5.0% 3.0% 2.6% 2.4% 2.1% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004141630.pktlen.png)
detailed numbers
[ 32- 63]: 6271844
[ 64- 127]: 10199868
[ 128- 255]: 2978181
[ 256- 511]: 2088148
[ 512- 1023]: 1382948
[ 1024- 2047]: 14488558
Protocol Breakdown
![[protocol breakdown chart]](201004141630.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37409547 (100.00%) 24113434533 (100.00%) 644.58
ip 37340311 ( 99.81%) 24090488589 ( 99.90%) 645.16
tcp 23301774 ( 62.29%) 17027477746 ( 70.61%) 730.74
http(s) 10094447 ( 26.98%) 13629618265 ( 56.52%) 1350.21
http(c) 7872467 ( 21.04%) 921011325 ( 3.82%) 116.99
squid 305180 ( 0.82%) 92129174 ( 0.38%) 301.88
smtp 372007 ( 0.99%) 115391813 ( 0.48%) 310.19
nntp 2 ( 0.00%) 124 ( 0.00%) 62.00
ftp 17931 ( 0.05%) 4686439 ( 0.02%) 261.36
pop3 22182 ( 0.06%) 9857211 ( 0.04%) 444.38
imap 2215 ( 0.01%) 560346 ( 0.00%) 252.98
telnet 670 ( 0.00%) 48810 ( 0.00%) 72.85
ssh 66354 ( 0.18%) 14468234 ( 0.06%) 218.05
dns 54027 ( 0.14%) 3718261 ( 0.02%) 68.82
bgp 167 ( 0.00%) 63119 ( 0.00%) 377.96
napster 48 ( 0.00%) 11010 ( 0.00%) 229.38
realaud 48 ( 0.00%) 5058 ( 0.00%) 105.38
rtsp 134450 ( 0.36%) 71384930 ( 0.30%) 530.94
icecast 6467 ( 0.02%) 1088355 ( 0.00%) 168.29
hotline 4 ( 0.00%) 276 ( 0.00%) 69.00
other 4353102 ( 11.64%) 2163434636 ( 8.97%) 496.99
udp 9879499 ( 26.41%) 4953832952 ( 20.54%) 501.43
dns 1020513 ( 2.73%) 180912861 ( 0.75%) 177.28
rip 17 ( 0.00%) 1275 ( 0.00%) 75.00
realaud 39 ( 0.00%) 4959 ( 0.00%) 127.15
halflif 87 ( 0.00%) 10106 ( 0.00%) 116.16
starcra 8235 ( 0.02%) 5555809 ( 0.02%) 674.66
everque 718 ( 0.00%) 157746 ( 0.00%) 219.70
unreal 155 ( 0.00%) 22196 ( 0.00%) 143.20
quake 52 ( 0.00%) 4513 ( 0.00%) 86.79
cuseeme 4 ( 0.00%) 377 ( 0.00%) 94.25
other 8849233 ( 23.66%) 4766948408 ( 19.77%) 538.68
icmp 580976 ( 1.55%) 73961846 ( 0.31%) 127.31
ipip 327 ( 0.00%) 40190 ( 0.00%) 122.91
ipsec 1509 ( 0.00%) 490046 ( 0.00%) 324.75
ip6 3292975 ( 8.80%) 1997401770 ( 8.28%) 606.56
other 283251 ( 0.76%) 37284039 ( 0.15%) 131.63
frag 1969 ( 0.01%) 1970574 ( 0.01%) 1000.80
ip6 69236 ( 0.19%) 22945944 ( 0.10%) 331.42
tcp6 24971 ( 0.07%) 13847769 ( 0.06%) 554.55
http(s) 730 ( 0.00%) 793047 ( 0.00%) 1086.37
http(c) 4882 ( 0.01%) 474778 ( 0.00%) 97.25
smtp 167 ( 0.00%) 55341 ( 0.00%) 331.38
ftp 2611 ( 0.01%) 271759 ( 0.00%) 104.08
imap 297 ( 0.00%) 34115 ( 0.00%) 114.87
ssh 3250 ( 0.01%) 274948 ( 0.00%) 84.60
dns 181 ( 0.00%) 51301 ( 0.00%) 283.43
bgp 125 ( 0.00%) 23648 ( 0.00%) 189.18
other 12728 ( 0.03%) 11868832 ( 0.05%) 932.50
udp6 37732 ( 0.10%) 8253778 ( 0.03%) 218.75
dns 37249 ( 0.10%) 8170898 ( 0.03%) 219.36
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
other 482 ( 0.00%) 82775 ( 0.00%) 171.73
icmp6 6442 ( 0.02%) 781446 ( 0.00%) 121.30
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 61 ( 0.00%) 58871 ( 0.00%) 965.10
tcpdump file: 201004141630.dump.gz (943.33 MB)