Traffic Trace Info
DumpFile: 201004160145.dump
FileSize: 2145.30MB
Id: 201004160145
StartTime: Fri Apr 16 01:45:01 2010
EndTime: Fri Apr 16 02:00:01 2010
TotalTime: 900.16 seconds
TotalCapSize: 1675.91MB CapLen: 96 bytes
# of packets: 30761574 (19983.11MB)
AvgRate: 186.22Mbps stddev:19.33M
IP flow (unique src/dst pair) Information
# of flows: 1025786 (avg. 29.99 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 4.0% 2.9% 1.2% 1.2% 1.0% 0.8% 0.7% 0.6% 0.5%
IP address Information
# of IPv4 addresses: 545270
Top 10 bandwidth usage (bytes/total in %):
13.2% 7.1% 6.6% 6.1% 6.0% 5.3% 4.5% 4.5% 4.1% 4.0%
# of IPv6 addresses: 959
Top 10 bandwidth usage (bytes/total in %):
30.8% 7.3% 7.1% 6.6% 5.0% 4.1% 4.1% 3.2% 3.1% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004160145.pktlen.png)
detailed numbers
[ 32- 63]: 4765879
[ 64- 127]: 8683871
[ 128- 255]: 2242998
[ 256- 511]: 1581657
[ 512- 1023]: 655748
[ 1024- 2047]: 12831421
Protocol Breakdown
![[protocol breakdown chart]](201004160145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30761574 (100.00%) 20953811593 (100.00%) 681.17
ip 30711835 ( 99.84%) 20945682417 ( 99.96%) 682.01
tcp 19349988 ( 62.90%) 15909346173 ( 75.93%) 822.19
http(s) 9650580 ( 31.37%) 13553433805 ( 64.68%) 1404.42
http(c) 5016898 ( 16.31%) 478454678 ( 2.28%) 95.37
squid 302564 ( 0.98%) 117653304 ( 0.56%) 388.85
smtp 367434 ( 1.19%) 71455828 ( 0.34%) 194.47
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 9984 ( 0.03%) 963474 ( 0.00%) 96.50
pop3 9620 ( 0.03%) 8285493 ( 0.04%) 861.28
imap 3482 ( 0.01%) 2266190 ( 0.01%) 650.83
telnet 844 ( 0.00%) 72803 ( 0.00%) 86.26
ssh 819412 ( 2.66%) 120438426 ( 0.57%) 146.98
dns 56370 ( 0.18%) 3886594 ( 0.02%) 68.95
bgp 155 ( 0.00%) 54334 ( 0.00%) 350.54
napster 446 ( 0.00%) 362949 ( 0.00%) 813.79
realaud 10 ( 0.00%) 1024 ( 0.00%) 102.40
rtsp 49 ( 0.00%) 3614 ( 0.00%) 73.76
icecast 396 ( 0.00%) 43319 ( 0.00%) 109.39
hotline 13 ( 0.00%) 882 ( 0.00%) 67.85
other 3111726 ( 10.12%) 1551969154 ( 7.41%) 498.75
udp 7676165 ( 24.95%) 3509683346 ( 16.75%) 457.22
dns 734069 ( 2.39%) 131759156 ( 0.63%) 179.49
rip 2 ( 0.00%) 218 ( 0.00%) 109.00
realaud 41 ( 0.00%) 3451 ( 0.00%) 84.17
halflif 69 ( 0.00%) 5526 ( 0.00%) 80.09
starcra 219 ( 0.00%) 21615 ( 0.00%) 98.70
everque 512 ( 0.00%) 89256 ( 0.00%) 174.33
unreal 63 ( 0.00%) 7234 ( 0.00%) 114.83
quake 26 ( 0.00%) 2210 ( 0.00%) 85.00
cuseeme 20 ( 0.00%) 3795 ( 0.00%) 189.75
other 6940908 ( 22.56%) 3377656612 ( 16.12%) 486.63
icmp 952952 ( 3.10%) 155477148 ( 0.74%) 163.15
ipip 349 ( 0.00%) 42698 ( 0.00%) 122.34
ipsec 18442 ( 0.06%) 3608344 ( 0.02%) 195.66
ip6 2368823 ( 7.70%) 1290728459 ( 6.16%) 544.88
other 345116 ( 1.12%) 76796249 ( 0.37%) 222.52
frag 1830 ( 0.01%) 1811955 ( 0.01%) 990.14
ip6 49739 ( 0.16%) 8129176 ( 0.04%) 163.44
tcp6 13105 ( 0.04%) 1562335 ( 0.01%) 119.22
http(s) 28 ( 0.00%) 15908 ( 0.00%) 568.14
http(c) 5112 ( 0.02%) 449743 ( 0.00%) 87.98
smtp 444 ( 0.00%) 202699 ( 0.00%) 456.53
imap 265 ( 0.00%) 30423 ( 0.00%) 114.80
ssh 5094 ( 0.02%) 603024 ( 0.00%) 118.38
dns 41 ( 0.00%) 11244 ( 0.00%) 274.24
bgp 115 ( 0.00%) 15047 ( 0.00%) 130.84
other 2006 ( 0.01%) 234247 ( 0.00%) 116.77
udp6 29752 ( 0.10%) 5671369 ( 0.03%) 190.62
dns 29512 ( 0.10%) 5629187 ( 0.03%) 190.74
starcra 1 ( 0.00%) 119 ( 0.00%) 119.00
other 239 ( 0.00%) 42063 ( 0.00%) 176.00
icmp6 6779 ( 0.02%) 821248 ( 0.00%) 121.15
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 73 ( 0.00%) 70144 ( 0.00%) 960.88
tcpdump file: 201004160145.dump.gz (787.92 MB)