Traffic Trace Info
DumpFile: 201004151130.dump
FileSize: 2162.58MB
Id: 201004151130
StartTime: Thu Apr 15 11:30:00 2010
EndTime: Thu Apr 15 11:45:00 2010
TotalTime: 899.94 seconds
TotalCapSize: 1693.44MB CapLen: 96 bytes
# of packets: 30740558 (18488.40MB)
AvgRate: 172.33Mbps stddev:18.39M
IP flow (unique src/dst pair) Information
# of flows: 1061398 (avg. 28.96 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.5% 1.2% 1.1% 1.1% 1.0% 0.9% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 596320
Top 10 bandwidth usage (bytes/total in %):
16.9% 10.4% 3.5% 3.4% 3.0% 2.9% 2.8% 2.5% 2.4% 2.1%
# of IPv6 addresses: 1050
Top 10 bandwidth usage (bytes/total in %):
24.7% 8.9% 6.4% 5.9% 5.4% 5.0% 5.0% 4.6% 4.1% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004151130.pktlen.png)
detailed numbers
[ 32- 63]: 5036997
[ 64- 127]: 8617984
[ 128- 255]: 2712437
[ 256- 511]: 1798823
[ 512- 1023]: 925218
[ 1024- 2047]: 11649099
Protocol Breakdown
![[protocol breakdown chart]](201004151130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30740558 (100.00%) 19386490948 (100.00%) 630.65
ip 30679565 ( 99.80%) 19376349039 ( 99.95%) 631.57
tcp 17899386 ( 58.23%) 12677754542 ( 65.39%) 708.28
http(s) 7487416 ( 24.36%) 9907656696 ( 51.11%) 1323.24
http(c) 5727680 ( 18.63%) 667416313 ( 3.44%) 116.52
squid 330668 ( 1.08%) 155125989 ( 0.80%) 469.13
smtp 348989 ( 1.14%) 110431640 ( 0.57%) 316.43
ftp 16531 ( 0.05%) 1686762 ( 0.01%) 102.04
pop3 18558 ( 0.06%) 8036145 ( 0.04%) 433.03
imap 2834 ( 0.01%) 705887 ( 0.00%) 249.08
telnet 1399 ( 0.00%) 128577 ( 0.00%) 91.91
ssh 687898 ( 2.24%) 102958506 ( 0.53%) 149.67
dns 55915 ( 0.18%) 3845013 ( 0.02%) 68.77
bgp 134 ( 0.00%) 42685 ( 0.00%) 318.54
napster 834 ( 0.00%) 616317 ( 0.00%) 738.99
realaud 11 ( 0.00%) 2442 ( 0.00%) 222.00
rtsp 69758 ( 0.23%) 38719055 ( 0.20%) 555.05
icecast 14842 ( 0.05%) 986184 ( 0.01%) 66.45
hotline 31 ( 0.00%) 3784 ( 0.00%) 122.06
other 3135885 ( 10.20%) 1679392367 ( 8.66%) 535.54
udp 8777438 ( 28.55%) 4565199505 ( 23.55%) 520.11
dns 684266 ( 2.23%) 115840755 ( 0.60%) 169.29
realaud 18 ( 0.00%) 2358 ( 0.00%) 131.00
halflif 178 ( 0.00%) 30770 ( 0.00%) 172.87
starcra 123 ( 0.00%) 11718 ( 0.00%) 95.27
everque 731 ( 0.00%) 142113 ( 0.00%) 194.41
unreal 116 ( 0.00%) 20259 ( 0.00%) 174.65
quake 17 ( 0.00%) 1712 ( 0.00%) 100.71
cuseeme 4 ( 0.00%) 398 ( 0.00%) 99.50
other 8091902 ( 26.32%) 4449092452 ( 22.95%) 549.82
icmp 684277 ( 2.23%) 102177057 ( 0.53%) 149.32
ipip 362 ( 0.00%) 46540 ( 0.00%) 128.56
ipsec 2441 ( 0.01%) 727470 ( 0.00%) 298.02
ip6 3302079 ( 10.74%) 2028474653 ( 10.46%) 614.30
other 13582 ( 0.04%) 1969272 ( 0.01%) 144.99
frag 789 ( 0.00%) 858632 ( 0.00%) 1088.25
ip6 60993 ( 0.20%) 10141909 ( 0.05%) 166.28
tcp6 21894 ( 0.07%) 2669215 ( 0.01%) 121.92
http(s) 222 ( 0.00%) 186271 ( 0.00%) 839.06
http(c) 5382 ( 0.02%) 488584 ( 0.00%) 90.78
smtp 252 ( 0.00%) 121476 ( 0.00%) 482.05
ftp 5251 ( 0.02%) 522738 ( 0.00%) 99.55
imap 487 ( 0.00%) 56862 ( 0.00%) 116.76
ssh 4014 ( 0.01%) 609884 ( 0.00%) 151.94
dns 147 ( 0.00%) 35978 ( 0.00%) 244.75
bgp 107 ( 0.00%) 13786 ( 0.00%) 128.84
other 6032 ( 0.02%) 633636 ( 0.00%) 105.05
udp6 32033 ( 0.10%) 6543870 ( 0.03%) 204.29
dns 31800 ( 0.10%) 6507392 ( 0.03%) 204.63
other 233 ( 0.00%) 36478 ( 0.00%) 156.56
icmp6 6972 ( 0.02%) 854550 ( 0.00%) 122.57
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 64 ( 0.00%) 70194 ( 0.00%) 1096.78
tcpdump file: 201004151130.dump.gz (780.68 MB)