Traffic Trace Info
DumpFile: 201004160130.dump
FileSize: 2238.74MB
Id: 201004160130
StartTime: Fri Apr 16 01:30:01 2010
EndTime: Fri Apr 16 01:45:01 2010
TotalTime: 900.12 seconds
TotalCapSize: 1744.91MB CapLen: 96 bytes
# of packets: 32362846 (21071.47MB)
AvgRate: 196.39Mbps stddev:17.63M
IP flow (unique src/dst pair) Information
# of flows: 1204624 (avg. 26.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 3.8% 1.5% 1.3% 1.0% 1.0% 1.0% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 657159
Top 10 bandwidth usage (bytes/total in %):
13.9% 7.2% 5.4% 5.4% 5.3% 5.0% 4.4% 4.4% 3.9% 3.8%
# of IPv6 addresses: 943
Top 10 bandwidth usage (bytes/total in %):
30.6% 7.8% 7.3% 6.8% 4.8% 4.1% 4.1% 3.3% 3.2% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004160130.pktlen.png)
detailed numbers
[ 32- 63]: 5089053
[ 64- 127]: 9065572
[ 128- 255]: 2306716
[ 256- 511]: 1661935
[ 512- 1023]: 652801
[ 1024- 2047]: 13586769
Protocol Breakdown
![[protocol breakdown chart]](201004160130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32362846 (100.00%) 22095041918 (100.00%) 682.73
ip 32311860 ( 99.84%) 22086920988 ( 99.96%) 683.55
tcp 19964395 ( 61.69%) 16492991963 ( 74.65%) 826.12
http(s) 10041065 ( 31.03%) 14128834444 ( 63.95%) 1407.11
http(c) 5645715 ( 17.45%) 625240942 ( 2.83%) 110.75
squid 330283 ( 1.02%) 165767939 ( 0.75%) 501.90
smtp 371040 ( 1.15%) 68200688 ( 0.31%) 183.81
ftp 9868 ( 0.03%) 1007087 ( 0.00%) 102.06
pop3 8394 ( 0.03%) 6195323 ( 0.03%) 738.07
imap 3114 ( 0.01%) 2015385 ( 0.01%) 647.20
telnet 497 ( 0.00%) 66491 ( 0.00%) 133.78
ssh 405402 ( 1.25%) 70294928 ( 0.32%) 173.40
dns 54975 ( 0.17%) 3858287 ( 0.02%) 70.18
bgp 144 ( 0.00%) 49179 ( 0.00%) 341.52
napster 35 ( 0.00%) 3194 ( 0.00%) 91.26
realaud 21 ( 0.00%) 1773 ( 0.00%) 84.43
rtsp 50 ( 0.00%) 3699 ( 0.00%) 73.98
icecast 701 ( 0.00%) 86168 ( 0.00%) 122.92
hotline 7 ( 0.00%) 1598 ( 0.00%) 228.29
other 3093082 ( 9.56%) 1421364708 ( 6.43%) 459.53
udp 8509701 ( 26.29%) 4021075454 ( 18.20%) 472.53
dns 756140 ( 2.34%) 135405632 ( 0.61%) 179.07
rip 7 ( 0.00%) 525 ( 0.00%) 75.00
realaud 25 ( 0.00%) 2416 ( 0.00%) 96.64
halflif 113 ( 0.00%) 9370 ( 0.00%) 82.92
starcra 219 ( 0.00%) 23730 ( 0.00%) 108.36
everque 552 ( 0.00%) 109041 ( 0.00%) 197.54
unreal 62 ( 0.00%) 7095 ( 0.00%) 114.44
quake 64 ( 0.00%) 5600 ( 0.00%) 87.50
cuseeme 88 ( 0.00%) 14520 ( 0.00%) 165.00
other 7752093 ( 23.95%) 3885205839 ( 17.58%) 501.18
icmp 996252 ( 3.08%) 165293707 ( 0.75%) 165.92
ipip 367 ( 0.00%) 46344 ( 0.00%) 126.28
ipsec 31860 ( 0.10%) 16555040 ( 0.07%) 519.62
ip6 2268854 ( 7.01%) 1194340695 ( 5.41%) 526.41
other 540431 ( 1.67%) 196617785 ( 0.89%) 363.82
frag 3935 ( 0.01%) 4650983 ( 0.02%) 1181.95
ip6 50986 ( 0.16%) 8120930 ( 0.04%) 159.28
tcp6 14047 ( 0.04%) 1606451 ( 0.01%) 114.36
http(s) 28 ( 0.00%) 15907 ( 0.00%) 568.11
http(c) 6123 ( 0.02%) 547125 ( 0.00%) 89.36
smtp 153 ( 0.00%) 73117 ( 0.00%) 477.89
imap 417 ( 0.00%) 47748 ( 0.00%) 114.50
ssh 5038 ( 0.02%) 597772 ( 0.00%) 118.65
dns 114 ( 0.00%) 37614 ( 0.00%) 329.95
bgp 108 ( 0.00%) 14312 ( 0.00%) 132.52
other 2066 ( 0.01%) 272856 ( 0.00%) 132.07
udp6 29921 ( 0.09%) 5602317 ( 0.03%) 187.24
dns 29767 ( 0.09%) 5575988 ( 0.03%) 187.32
other 154 ( 0.00%) 26329 ( 0.00%) 170.97
icmp6 6921 ( 0.02%) 849038 ( 0.00%) 122.68
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 67 ( 0.00%) 59044 ( 0.00%) 881.25
tcpdump file: 201004160130.dump.gz (814.25 MB)