Traffic Trace Info
DumpFile: 201004160045.dump
FileSize: 2406.86MB
Id: 201004160045
StartTime: Fri Apr 16 00:45:01 2010
EndTime: Fri Apr 16 01:00:00 2010
TotalTime: 899.61 seconds
TotalCapSize: 1873.22MB CapLen: 96 bytes
# of packets: 34971862 (22568.53MB)
AvgRate: 210.37Mbps stddev:20.32M
IP flow (unique src/dst pair) Information
# of flows: 1172142 (avg. 29.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.9% 3.5% 2.9% 1.7% 1.6% 1.6% 0.8% 0.6% 0.6% 0.5%
IP address Information
# of IPv4 addresses: 660687
Top 10 bandwidth usage (bytes/total in %):
14.0% 8.1% 6.1% 6.0% 5.9% 5.8% 4.8% 4.6% 3.6% 3.6%
# of IPv6 addresses: 967
Top 10 bandwidth usage (bytes/total in %):
30.4% 7.6% 7.2% 6.4% 4.6% 4.0% 4.0% 3.6% 3.2% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004160045.pktlen.png)
detailed numbers
[ 32- 63]: 5597458
[ 64- 127]: 9830656
[ 128- 255]: 2688893
[ 256- 511]: 1570653
[ 512- 1023]: 690101
[ 1024- 2047]: 14594101
Protocol Breakdown
![[protocol breakdown chart]](201004160045.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34971862 (100.00%) 23664815555 (100.00%) 676.68
ip 34921763 ( 99.86%) 23656630874 ( 99.97%) 677.42
tcp 21125710 ( 60.41%) 17574511640 ( 74.26%) 831.90
http(s) 10631522 ( 30.40%) 14921888132 ( 63.06%) 1403.55
http(c) 5876762 ( 16.80%) 536695890 ( 2.27%) 91.33
squid 286983 ( 0.82%) 88423300 ( 0.37%) 308.11
smtp 406001 ( 1.16%) 111397121 ( 0.47%) 274.38
ftp 6951 ( 0.02%) 697960 ( 0.00%) 100.41
pop3 10704 ( 0.03%) 8105119 ( 0.03%) 757.20
imap 1728 ( 0.00%) 1139202 ( 0.00%) 659.26
telnet 483 ( 0.00%) 49685 ( 0.00%) 102.87
ssh 526502 ( 1.51%) 87328265 ( 0.37%) 165.87
dns 55893 ( 0.16%) 3872982 ( 0.02%) 69.29
bgp 159 ( 0.00%) 63949 ( 0.00%) 402.19
napster 6 ( 0.00%) 372 ( 0.00%) 62.00
realaud 18 ( 0.00%) 1524 ( 0.00%) 84.67
rtsp 823 ( 0.00%) 239766 ( 0.00%) 291.33
icecast 1772 ( 0.01%) 1134182 ( 0.00%) 640.06
hotline 12 ( 0.00%) 961 ( 0.00%) 80.08
other 3319388 ( 9.49%) 1813473050 ( 7.66%) 546.33
udp 9867221 ( 28.21%) 4380111287 ( 18.51%) 443.91
dns 735225 ( 2.10%) 131282428 ( 0.55%) 178.56
rip 1 ( 0.00%) 109 ( 0.00%) 109.00
realaud 12 ( 0.00%) 1364 ( 0.00%) 113.67
halflif 50 ( 0.00%) 4526 ( 0.00%) 90.52
starcra 224 ( 0.00%) 21378 ( 0.00%) 95.44
everque 514 ( 0.00%) 99137 ( 0.00%) 192.87
unreal 70 ( 0.00%) 6799 ( 0.00%) 97.13
quake 64 ( 0.00%) 5165 ( 0.00%) 80.70
cuseeme 89 ( 0.00%) 13481 ( 0.00%) 151.47
other 9130688 ( 26.11%) 4248496353 ( 17.95%) 465.30
icmp 937634 ( 2.68%) 153748260 ( 0.65%) 163.97
ipip 328 ( 0.00%) 39528 ( 0.00%) 120.51
ipsec 1636 ( 0.00%) 361896 ( 0.00%) 221.21
ip6 2565075 ( 7.33%) 1420701904 ( 6.00%) 553.86
other 424159 ( 1.21%) 127156359 ( 0.54%) 299.78
frag 3020 ( 0.01%) 3241116 ( 0.01%) 1073.22
ip6 50099 ( 0.14%) 8184681 ( 0.03%) 163.37
tcp6 12896 ( 0.04%) 1562778 ( 0.01%) 121.18
http(s) 18 ( 0.00%) 7365 ( 0.00%) 409.17
http(c) 4588 ( 0.01%) 405143 ( 0.00%) 88.30
smtp 490 ( 0.00%) 232334 ( 0.00%) 474.15
imap 330 ( 0.00%) 36098 ( 0.00%) 109.39
ssh 4996 ( 0.01%) 591812 ( 0.00%) 118.46
dns 98 ( 0.00%) 19388 ( 0.00%) 197.84
bgp 112 ( 0.00%) 15039 ( 0.00%) 134.28
other 2264 ( 0.01%) 255599 ( 0.00%) 112.90
udp6 30394 ( 0.09%) 5731191 ( 0.02%) 188.56
dns 30135 ( 0.09%) 5688555 ( 0.02%) 188.77
other 259 ( 0.00%) 42636 ( 0.00%) 164.62
icmp6 6713 ( 0.02%) 818498 ( 0.00%) 121.93
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 66 ( 0.00%) 68134 ( 0.00%) 1032.33
tcpdump file: 201004160045.dump.gz (863.90 MB)