Traffic Trace Info
DumpFile: 201004142330.dump
FileSize: 2476.28MB
Id: 201004142330
StartTime: Wed Apr 14 23:30:01 2010
EndTime: Wed Apr 14 23:45:01 2010
TotalTime: 899.56 seconds
TotalCapSize: 1938.66MB CapLen: 96 bytes
# of packets: 35213001 (22595.94MB)
AvgRate: 210.71Mbps stddev:22.46M
IP flow (unique src/dst pair) Information
# of flows: 1155319 (avg. 30.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 1.3% 0.9% 0.9% 0.7% 0.7% 0.7% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 616891
Top 10 bandwidth usage (bytes/total in %):
13.4% 7.6% 7.0% 6.3% 6.0% 5.6% 5.2% 4.7% 4.6% 3.0%
# of IPv6 addresses: 992
Top 10 bandwidth usage (bytes/total in %):
24.5% 7.6% 7.5% 6.6% 4.4% 4.3% 4.0% 3.7% 3.6% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004142330.pktlen.png)
detailed numbers
[ 32- 63]: 5876057
[ 64- 127]: 10035804
[ 128- 255]: 2328548
[ 256- 511]: 1677114
[ 512- 1023]: 859212
[ 1024- 2047]: 14436266
Protocol Breakdown
![[protocol breakdown chart]](201004142330.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35213001 (100.00%) 23693564867 (100.00%) 672.86
ip 35160572 ( 99.85%) 23684676571 ( 99.96%) 673.61
tcp 23894360 ( 67.86%) 18585156810 ( 78.44%) 777.81
http(s) 10865040 ( 30.86%) 15061339967 ( 63.57%) 1386.22
http(c) 6604134 ( 18.75%) 611932197 ( 2.58%) 92.66
squid 435566 ( 1.24%) 225096411 ( 0.95%) 516.79
smtp 431798 ( 1.23%) 107188066 ( 0.45%) 248.24
ftp 21995 ( 0.06%) 2197425 ( 0.01%) 99.91
pop3 34731 ( 0.10%) 21629135 ( 0.09%) 622.76
imap 18298 ( 0.05%) 16928900 ( 0.07%) 925.18
telnet 614 ( 0.00%) 76076 ( 0.00%) 123.90
ssh 1244868 ( 3.54%) 185291258 ( 0.78%) 148.84
dns 54259 ( 0.15%) 3719635 ( 0.02%) 68.55
bgp 185 ( 0.00%) 77493 ( 0.00%) 418.88
napster 74 ( 0.00%) 6019 ( 0.00%) 81.34
realaud 9 ( 0.00%) 544 ( 0.00%) 60.44
rtsp 824 ( 0.00%) 571928 ( 0.00%) 694.09
icecast 14398 ( 0.04%) 2156357 ( 0.01%) 149.77
hotline 15 ( 0.00%) 1209 ( 0.00%) 80.60
other 4167539 ( 11.84%) 2346943410 ( 9.91%) 563.15
udp 7804596 ( 22.16%) 3772254171 ( 15.92%) 483.34
dns 818836 ( 2.33%) 142605207 ( 0.60%) 174.16
realaud 444 ( 0.00%) 33811 ( 0.00%) 76.15
halflif 96 ( 0.00%) 14674 ( 0.00%) 152.85
starcra 343 ( 0.00%) 36128 ( 0.00%) 105.33
everque 25346 ( 0.07%) 7123475 ( 0.03%) 281.05
unreal 178 ( 0.00%) 30505 ( 0.00%) 171.38
quake 69 ( 0.00%) 6175 ( 0.00%) 89.49
cuseeme 8 ( 0.00%) 767 ( 0.00%) 95.88
other 6958787 ( 19.76%) 3622144237 ( 15.29%) 520.51
icmp 956738 ( 2.72%) 162175027 ( 0.68%) 169.51
ipip 329 ( 0.00%) 40194 ( 0.00%) 122.17
ipsec 742 ( 0.00%) 123228 ( 0.00%) 166.08
ip6 2287969 ( 6.50%) 1140753769 ( 4.81%) 498.59
other 215838 ( 0.61%) 24173372 ( 0.10%) 112.00
frag 2678 ( 0.01%) 2685739 ( 0.01%) 1002.89
ip6 52429 ( 0.15%) 8888296 ( 0.04%) 169.53
tcp6 14764 ( 0.04%) 2073830 ( 0.01%) 140.47
http(s) 359 ( 0.00%) 468073 ( 0.00%) 1303.82
http(c) 4635 ( 0.01%) 436615 ( 0.00%) 94.20
smtp 193 ( 0.00%) 77436 ( 0.00%) 401.22
ftp 2203 ( 0.01%) 228762 ( 0.00%) 103.84
imap 253 ( 0.00%) 29073 ( 0.00%) 114.91
ssh 3404 ( 0.01%) 350396 ( 0.00%) 102.94
dns 125 ( 0.00%) 28579 ( 0.00%) 228.63
bgp 114 ( 0.00%) 15318 ( 0.00%) 134.37
other 3478 ( 0.01%) 439578 ( 0.00%) 126.39
udp6 30073 ( 0.09%) 5743379 ( 0.02%) 190.98
dns 29375 ( 0.08%) 5660029 ( 0.02%) 192.68
starcra 1 ( 0.00%) 118 ( 0.00%) 118.00
other 697 ( 0.00%) 83232 ( 0.00%) 119.41
icmp6 7474 ( 0.02%) 990290 ( 0.00%) 132.50
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 87 ( 0.00%) 76581 ( 0.00%) 880.24
tcpdump file: 201004142330.dump.gz (928.86 MB)