Traffic Trace Info
DumpFile: 201004151245.dump
FileSize: 2278.04MB
Id: 201004151245
StartTime: Thu Apr 15 12:45:01 2010
EndTime: Thu Apr 15 13:00:01 2010
TotalTime: 900.08 seconds
TotalCapSize: 1779.81MB CapLen: 96 bytes
# of packets: 32649778 (19841.56MB)
AvgRate: 184.93Mbps stddev:16.43M
IP flow (unique src/dst pair) Information
# of flows: 958077 (avg. 34.08 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.3% 1.2% 1.1% 1.1% 1.1% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 529404
Top 10 bandwidth usage (bytes/total in %):
18.9% 8.8% 3.5% 3.1% 3.1% 3.1% 3.1% 3.0% 2.9% 2.1%
# of IPv6 addresses: 1024
Top 10 bandwidth usage (bytes/total in %):
25.8% 9.2% 7.2% 6.2% 6.1% 4.7% 4.5% 4.5% 3.6% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004151245.pktlen.png)
detailed numbers
[ 32- 63]: 5925453
[ 64- 127]: 8440685
[ 128- 255]: 2793754
[ 256- 511]: 1988109
[ 512- 1023]: 872743
[ 1024- 2047]: 12629034
Protocol Breakdown
![[protocol breakdown chart]](201004151245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32649778 (100.00%) 20805382210 (100.00%) 637.23
ip 32591311 ( 99.82%) 20795699336 ( 99.95%) 638.07
tcp 19141515 ( 58.63%) 13677982399 ( 65.74%) 714.57
http(s) 7853680 ( 24.05%) 10269664695 ( 49.36%) 1307.62
http(c) 6498100 ( 19.90%) 1284179661 ( 6.17%) 197.62
squid 306641 ( 0.94%) 99174219 ( 0.48%) 323.42
smtp 299984 ( 0.92%) 87480356 ( 0.42%) 291.62
ftp 17694 ( 0.05%) 3238827 ( 0.02%) 183.05
pop3 29570 ( 0.09%) 19140864 ( 0.09%) 647.31
imap 6723 ( 0.02%) 2109414 ( 0.01%) 313.76
telnet 819 ( 0.00%) 101728 ( 0.00%) 124.21
ssh 686580 ( 2.10%) 102106510 ( 0.49%) 148.72
dns 56248 ( 0.17%) 3908101 ( 0.02%) 69.48
bgp 145 ( 0.00%) 44872 ( 0.00%) 309.46
napster 51 ( 0.00%) 3792 ( 0.00%) 74.35
realaud 13 ( 0.00%) 1457 ( 0.00%) 112.08
rtsp 184954 ( 0.57%) 65217718 ( 0.31%) 352.62
icecast 58525 ( 0.18%) 14051781 ( 0.07%) 240.10
hotline 2 ( 0.00%) 124 ( 0.00%) 62.00
other 3141778 ( 9.62%) 1727557354 ( 8.30%) 549.87
udp 9607834 ( 29.43%) 5189040815 ( 24.94%) 540.08
dns 685908 ( 2.10%) 117067270 ( 0.56%) 170.67
realaud 1881 ( 0.01%) 115053 ( 0.00%) 61.17
halflif 144 ( 0.00%) 22414 ( 0.00%) 155.65
starcra 149 ( 0.00%) 16447 ( 0.00%) 110.38
everque 2081 ( 0.01%) 1659939 ( 0.01%) 797.66
unreal 139 ( 0.00%) 22563 ( 0.00%) 162.32
quake 9 ( 0.00%) 1387 ( 0.00%) 154.11
cuseeme 3 ( 0.00%) 548 ( 0.00%) 182.67
other 8917429 ( 27.31%) 5070060663 ( 24.37%) 568.56
icmp 585189 ( 1.79%) 85158900 ( 0.41%) 145.52
ipip 345 ( 0.00%) 41924 ( 0.00%) 121.52
ipsec 1754 ( 0.01%) 480604 ( 0.00%) 274.00
ip6 3233481 ( 9.90%) 1840338483 ( 8.85%) 569.15
other 21193 ( 0.06%) 2656211 ( 0.01%) 125.33
frag 1007 ( 0.00%) 1089579 ( 0.01%) 1082.00
ip6 58467 ( 0.18%) 9682874 ( 0.05%) 165.61
tcp6 20494 ( 0.06%) 2453911 ( 0.01%) 119.74
http(s) 319 ( 0.00%) 280574 ( 0.00%) 879.54
http(c) 4697 ( 0.01%) 438436 ( 0.00%) 93.34
smtp 414 ( 0.00%) 237639 ( 0.00%) 574.01
ftp 5191 ( 0.02%) 516262 ( 0.00%) 99.45
imap 374 ( 0.00%) 42126 ( 0.00%) 112.64
ssh 3298 ( 0.01%) 287940 ( 0.00%) 87.31
dns 85 ( 0.00%) 21208 ( 0.00%) 249.51
bgp 110 ( 0.00%) 16947 ( 0.00%) 154.06
other 6006 ( 0.02%) 612779 ( 0.00%) 102.03
udp6 30939 ( 0.09%) 6316836 ( 0.03%) 204.17
dns 30686 ( 0.09%) 6278130 ( 0.03%) 204.59
other 253 ( 0.00%) 38706 ( 0.00%) 152.99
icmp6 6940 ( 0.02%) 852793 ( 0.00%) 122.88
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 64 ( 0.00%) 55254 ( 0.00%) 863.34
tcpdump file: 201004151245.dump.gz (831.00 MB)