Traffic Trace Info
DumpFile: 201004150030.dump
FileSize: 2232.47MB
Id: 201004150030
StartTime: Thu Apr 15 00:30:01 2010
EndTime: Thu Apr 15 00:45:01 2010
TotalTime: 900.18 seconds
TotalCapSize: 1742.03MB CapLen: 96 bytes
# of packets: 32140741 (19927.07MB)
AvgRate: 185.70Mbps stddev:19.33M
IP flow (unique src/dst pair) Information
# of flows: 1232895 (avg. 26.07 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 1.4% 0.7% 0.7% 0.6% 0.6% 0.6% 0.6% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 657524
Top 10 bandwidth usage (bytes/total in %):
15.7% 7.7% 7.0% 6.6% 6.0% 5.9% 3.3% 3.2% 3.2% 2.1%
# of IPv6 addresses: 1016
Top 10 bandwidth usage (bytes/total in %):
26.9% 7.7% 7.4% 7.1% 6.4% 5.4% 4.3% 4.1% 4.0% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004150030.pktlen.png)
detailed numbers
[ 32- 63]: 5630076
[ 64- 127]: 8927245
[ 128- 255]: 2333563
[ 256- 511]: 1639460
[ 512- 1023]: 941602
[ 1024- 2047]: 12668795
Protocol Breakdown
![[protocol breakdown chart]](201004150030.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32140741 (100.00%) 20895046248 (100.00%) 650.11
ip 32086807 ( 99.83%) 20885761074 ( 99.96%) 650.91
tcp 19759613 ( 61.48%) 14860212755 ( 71.12%) 752.05
http(s) 8805140 ( 27.40%) 12075371167 ( 57.79%) 1371.40
http(c) 4684023 ( 14.57%) 406573893 ( 1.95%) 86.80
squid 359122 ( 1.12%) 163476897 ( 0.78%) 455.21
smtp 389382 ( 1.21%) 95793532 ( 0.46%) 246.01
ftp 17911 ( 0.06%) 1798580 ( 0.01%) 100.42
pop3 11217 ( 0.03%) 8263800 ( 0.04%) 736.72
imap 2991 ( 0.01%) 1128091 ( 0.01%) 377.16
telnet 3708 ( 0.01%) 2817376 ( 0.01%) 759.81
ssh 1343207 ( 4.18%) 203229027 ( 0.97%) 151.30
dns 54672 ( 0.17%) 3743012 ( 0.02%) 68.46
bgp 146 ( 0.00%) 53585 ( 0.00%) 367.02
napster 85 ( 0.00%) 8717 ( 0.00%) 102.55
realaud 13 ( 0.00%) 1797 ( 0.00%) 138.23
rtsp 6629 ( 0.02%) 4890918 ( 0.02%) 737.81
icecast 8402 ( 0.03%) 554446 ( 0.00%) 65.99
hotline 15 ( 0.00%) 1218 ( 0.00%) 81.20
other 4072949 ( 12.67%) 1892506639 ( 9.06%) 464.65
udp 8372962 ( 26.05%) 4354017604 ( 20.84%) 520.01
dns 795088 ( 2.47%) 137882744 ( 0.66%) 173.42
realaud 680 ( 0.00%) 42406 ( 0.00%) 62.36
halflif 182 ( 0.00%) 27361 ( 0.00%) 150.34
starcra 366 ( 0.00%) 38650 ( 0.00%) 105.60
everque 18438 ( 0.06%) 9564902 ( 0.05%) 518.76
unreal 203 ( 0.00%) 35002 ( 0.00%) 172.42
quake 56 ( 0.00%) 5964 ( 0.00%) 106.50
cuseeme 2 ( 0.00%) 206 ( 0.00%) 103.00
other 7557588 ( 23.51%) 4206219498 ( 20.13%) 556.56
icmp 996271 ( 3.10%) 165792403 ( 0.79%) 166.41
ipip 333 ( 0.00%) 42500 ( 0.00%) 127.63
ipsec 719 ( 0.00%) 118346 ( 0.00%) 164.60
ip6 2650688 ( 8.25%) 1470191987 ( 7.04%) 554.65
other 306221 ( 0.95%) 35385479 ( 0.17%) 115.56
frag 1677 ( 0.01%) 1735192 ( 0.01%) 1034.70
ip6 53934 ( 0.17%) 9285174 ( 0.04%) 172.16
tcp6 15808 ( 0.05%) 2464897 ( 0.01%) 155.93
http(s) 67 ( 0.00%) 40806 ( 0.00%) 609.04
http(c) 5151 ( 0.02%) 484546 ( 0.00%) 94.07
smtp 230 ( 0.00%) 83750 ( 0.00%) 364.13
ftp 2181 ( 0.01%) 227139 ( 0.00%) 104.14
imap 253 ( 0.00%) 28865 ( 0.00%) 114.09
ssh 3243 ( 0.01%) 271978 ( 0.00%) 83.87
dns 85 ( 0.00%) 18852 ( 0.00%) 221.79
bgp 117 ( 0.00%) 15841 ( 0.00%) 135.39
other 4481 ( 0.01%) 1293120 ( 0.01%) 288.58
udp6 31060 ( 0.10%) 5917651 ( 0.03%) 190.52
dns 30151 ( 0.09%) 5798126 ( 0.03%) 192.30
unreal 1 ( 0.00%) 104 ( 0.00%) 104.00
other 908 ( 0.00%) 119421 ( 0.00%) 131.52
icmp6 6981 ( 0.02%) 852083 ( 0.00%) 122.06
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 54 ( 0.00%) 46327 ( 0.00%) 857.91
tcpdump file: 201004150030.dump.gz (841.94 MB)