Traffic Trace Info
DumpFile: 201004151645.dump
FileSize: 2637.19MB
Id: 201004151645
StartTime: Thu Apr 15 16:45:01 2010
EndTime: Thu Apr 15 17:00:00 2010
TotalTime: 899.73 seconds
TotalCapSize: -2030.52MB CapLen: 96 bytes
# of packets: 37429546 (24180.47MB)
AvgRate: 225.48Mbps stddev:21.60M
IP flow (unique src/dst pair) Information
# of flows: 1050984 (avg. 35.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 3.8% 2.2% 1.2% 1.0% 0.8% 0.7% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 568598
Top 10 bandwidth usage (bytes/total in %):
12.7% 7.9% 5.1% 5.0% 4.9% 4.5% 4.1% 3.9% 3.9% 3.8%
# of IPv6 addresses: 1154
Top 10 bandwidth usage (bytes/total in %):
24.2% 8.9% 6.7% 5.7% 4.9% 4.5% 4.5% 4.1% 3.2% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004151645.pktlen.png)
detailed numbers
[ 32- 63]: 6615851
[ 64- 127]: 9732611
[ 128- 255]: 2526894
[ 256- 511]: 2112978
[ 512- 1023]: 938008
[ 1024- 2047]: 15503204
Protocol Breakdown
![[protocol breakdown chart]](201004151645.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37429546 (100.00%) 25355058715 (100.00%) 677.41
ip 37367696 ( 99.83%) 25344722023 ( 99.96%) 678.25
tcp 24548362 ( 65.59%) 18814114004 ( 74.20%) 766.41
http(s) 10658902 ( 28.48%) 14629362805 ( 57.70%) 1372.50
http(c) 7234196 ( 19.33%) 878019552 ( 3.46%) 121.37
squid 328861 ( 0.88%) 96480343 ( 0.38%) 293.38
smtp 396670 ( 1.06%) 123205001 ( 0.49%) 310.60
ftp 1337020 ( 3.57%) 1281620304 ( 5.05%) 958.56
pop3 27375 ( 0.07%) 13591174 ( 0.05%) 496.48
imap 4511 ( 0.01%) 2051835 ( 0.01%) 454.85
telnet 705 ( 0.00%) 73038 ( 0.00%) 103.60
ssh 886403 ( 2.37%) 132929826 ( 0.52%) 149.97
dns 57498 ( 0.15%) 3956135 ( 0.02%) 68.80
bgp 206 ( 0.00%) 90641 ( 0.00%) 440.00
napster 90 ( 0.00%) 10319 ( 0.00%) 114.66
realaud 24 ( 0.00%) 2488 ( 0.00%) 103.67
rtsp 82960 ( 0.22%) 5183511 ( 0.02%) 62.48
icecast 29360 ( 0.08%) 16388170 ( 0.06%) 558.18
hotline 7 ( 0.00%) 628 ( 0.00%) 89.71
other 3503567 ( 9.36%) 1631147814 ( 6.43%) 465.57
udp 8858612 ( 23.67%) 4444909301 ( 17.53%) 501.76
dns 844814 ( 2.26%) 143328479 ( 0.57%) 169.66
rip 12 ( 0.00%) 900 ( 0.00%) 75.00
realaud 32 ( 0.00%) 3408 ( 0.00%) 106.50
halflif 152 ( 0.00%) 18678 ( 0.00%) 122.88
starcra 264 ( 0.00%) 27495 ( 0.00%) 104.15
everque 575 ( 0.00%) 115641 ( 0.00%) 201.11
unreal 114 ( 0.00%) 19403 ( 0.00%) 170.20
quake 69 ( 0.00%) 16178 ( 0.00%) 234.46
cuseeme 5 ( 0.00%) 396 ( 0.00%) 79.20
other 8012077 ( 21.41%) 4301117407 ( 16.96%) 536.83
icmp 565888 ( 1.51%) 66375649 ( 0.26%) 117.29
ipip 337 ( 0.00%) 43120 ( 0.00%) 127.95
ipsec 3340 ( 0.01%) 1453000 ( 0.01%) 435.03
ip6 3363219 ( 8.99%) 2013009507 ( 7.94%) 598.54
other 27938 ( 0.07%) 4817442 ( 0.02%) 172.43
frag 2153 ( 0.01%) 2174376 ( 0.01%) 1009.93
ip6 61850 ( 0.17%) 10336692 ( 0.04%) 167.13
tcp6 20525 ( 0.05%) 2399245 ( 0.01%) 116.89
http(s) 197 ( 0.00%) 180409 ( 0.00%) 915.78
http(c) 4229 ( 0.01%) 376772 ( 0.00%) 89.09
smtp 421 ( 0.00%) 190948 ( 0.00%) 453.56
ftp 5313 ( 0.01%) 540279 ( 0.00%) 101.69
imap 447 ( 0.00%) 47605 ( 0.00%) 106.50
ssh 3474 ( 0.01%) 407604 ( 0.00%) 117.33
dns 120 ( 0.00%) 41849 ( 0.00%) 348.74
bgp 119 ( 0.00%) 17128 ( 0.00%) 143.93
napster 10 ( 0.00%) 1446 ( 0.00%) 144.60
other 6195 ( 0.02%) 595205 ( 0.00%) 96.08
udp6 33345 ( 0.09%) 6746451 ( 0.03%) 202.32
dns 32987 ( 0.09%) 6682822 ( 0.03%) 202.59
realaud 1 ( 0.00%) 168 ( 0.00%) 168.00
other 357 ( 0.00%) 63461 ( 0.00%) 177.76
icmp6 7863 ( 0.02%) 1109926 ( 0.00%) 141.16
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 87 ( 0.00%) 76990 ( 0.00%) 884.94
tcpdump file: 201004151645.dump.gz (946.39 MB)