Traffic Trace Info
DumpFile: 201004150045.dump
FileSize: 2232.34MB
Id: 201004150045
StartTime: Thu Apr 15 00:45:01 2010
EndTime: Thu Apr 15 01:00:01 2010
TotalTime: 900.50 seconds
TotalCapSize: 1742.36MB CapLen: 96 bytes
# of packets: 32110919 (19930.47MB)
AvgRate: 185.64Mbps stddev:20.49M
IP flow (unique src/dst pair) Information
# of flows: 1204076 (avg. 26.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 1.6% 1.4% 0.6% 0.6% 0.5% 0.5% 0.5% 0.4% 0.4%
IP address Information
# of IPv4 addresses: 641031
Top 10 bandwidth usage (bytes/total in %):
14.8% 7.9% 7.0% 6.8% 6.5% 6.1% 3.8% 3.0% 2.3% 2.2%
# of IPv6 addresses: 954
Top 10 bandwidth usage (bytes/total in %):
28.3% 8.0% 8.0% 6.7% 6.5% 5.7% 4.3% 4.2% 3.3% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004150045.pktlen.png)
detailed numbers
[ 32- 63]: 5450695
[ 64- 127]: 9155870
[ 128- 255]: 2319423
[ 256- 511]: 1625031
[ 512- 1023]: 913195
[ 1024- 2047]: 12646705
Protocol Breakdown
![[protocol breakdown chart]](201004150045.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32110919 (100.00%) 20898614523 (100.00%) 650.83
ip 32058065 ( 99.84%) 20889755874 ( 99.96%) 651.62
tcp 19904998 ( 61.99%) 15104452503 ( 72.27%) 758.83
http(s) 8983014 ( 27.97%) 12396770020 ( 59.32%) 1380.02
http(c) 4833660 ( 15.05%) 410647231 ( 1.96%) 84.96
squid 376616 ( 1.17%) 160879906 ( 0.77%) 427.17
smtp 413182 ( 1.29%) 81954334 ( 0.39%) 198.35
ftp 16468 ( 0.05%) 1826744 ( 0.01%) 110.93
pop3 12236 ( 0.04%) 9225831 ( 0.04%) 753.99
imap 2213 ( 0.01%) 490794 ( 0.00%) 221.78
telnet 428 ( 0.00%) 47500 ( 0.00%) 110.98
ssh 1446165 ( 4.50%) 220050929 ( 1.05%) 152.16
dns 57415 ( 0.18%) 3952089 ( 0.02%) 68.83
bgp 159 ( 0.00%) 53824 ( 0.00%) 338.52
napster 219 ( 0.00%) 14066 ( 0.00%) 64.23
realaud 13 ( 0.00%) 1093 ( 0.00%) 84.08
rtsp 10846 ( 0.03%) 4533129 ( 0.02%) 417.95
icecast 8880 ( 0.03%) 588730 ( 0.00%) 66.30
hotline 57 ( 0.00%) 6605 ( 0.00%) 115.88
other 3743421 ( 11.66%) 1813409318 ( 8.68%) 484.43
udp 8229336 ( 25.63%) 4121556277 ( 19.72%) 500.84
dns 787710 ( 2.45%) 137440796 ( 0.66%) 174.48
rip 5 ( 0.00%) 409 ( 0.00%) 81.80
realaud 1160 ( 0.00%) 73026 ( 0.00%) 62.95
halflif 159 ( 0.00%) 22505 ( 0.00%) 141.54
starcra 379 ( 0.00%) 38192 ( 0.00%) 100.77
everque 800 ( 0.00%) 151915 ( 0.00%) 189.89
unreal 161 ( 0.00%) 25272 ( 0.00%) 156.97
quake 60 ( 0.00%) 6064 ( 0.00%) 101.07
cuseeme 7 ( 0.00%) 642 ( 0.00%) 91.71
other 7438573 ( 23.17%) 3983609080 ( 19.06%) 535.53
icmp 947119 ( 2.95%) 151426920 ( 0.72%) 159.88
ipip 362 ( 0.00%) 42330 ( 0.00%) 116.93
ipsec 838 ( 0.00%) 148884 ( 0.00%) 177.67
ip6 2624584 ( 8.17%) 1475706713 ( 7.06%) 562.26
other 350828 ( 1.09%) 36422247 ( 0.17%) 103.82
frag 1415 ( 0.00%) 1459815 ( 0.01%) 1031.67
ip6 52854 ( 0.16%) 8858649 ( 0.04%) 167.61
tcp6 15645 ( 0.05%) 2269480 ( 0.01%) 145.06
http(s) 18 ( 0.00%) 7366 ( 0.00%) 409.22
http(c) 5106 ( 0.02%) 472630 ( 0.00%) 92.56
smtp 159 ( 0.00%) 63746 ( 0.00%) 400.92
ftp 2114 ( 0.01%) 215790 ( 0.00%) 102.08
imap 368 ( 0.00%) 42577 ( 0.00%) 115.70
ssh 3242 ( 0.01%) 269200 ( 0.00%) 83.04
dns 104 ( 0.00%) 23863 ( 0.00%) 229.45
bgp 108 ( 0.00%) 13792 ( 0.00%) 127.70
other 4426 ( 0.01%) 1160516 ( 0.01%) 262.20
udp6 30026 ( 0.09%) 5668106 ( 0.03%) 188.77
dns 29269 ( 0.09%) 5580253 ( 0.03%) 190.65
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
other 756 ( 0.00%) 87746 ( 0.00%) 116.07
icmp6 7095 ( 0.02%) 864864 ( 0.00%) 121.90
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 58 ( 0.00%) 52119 ( 0.00%) 898.60
tcpdump file: 201004150045.dump.gz (842.25 MB)