Traffic Trace Info
DumpFile: 201004160345.dump
FileSize: 2044.59MB
Id: 201004160345
StartTime: Fri Apr 16 03:45:01 2010
EndTime: Fri Apr 16 04:00:00 2010
TotalTime: 899.34 seconds
TotalCapSize: 1601.13MB CapLen: 96 bytes
# of packets: 29061725 (19125.66MB)
AvgRate: 178.40Mbps stddev:16.18M
IP flow (unique src/dst pair) Information
# of flows: 1213608 (avg. 23.95 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.7% 1.3% 1.3% 1.1% 1.0% 0.9% 0.9% 0.9% 0.7%
IP address Information
# of IPv4 addresses: 633145
Top 10 bandwidth usage (bytes/total in %):
15.9% 8.6% 8.2% 7.0% 5.7% 5.6% 5.5% 3.3% 3.0% 2.7%
# of IPv6 addresses: 964
Top 10 bandwidth usage (bytes/total in %):
26.4% 8.4% 7.6% 7.3% 5.5% 4.6% 4.6% 3.4% 3.3% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004160345.pktlen.png)
detailed numbers
[ 32- 63]: 4675140
[ 64- 127]: 7405591
[ 128- 255]: 2301496
[ 256- 511]: 1673959
[ 512- 1023]: 757549
[ 1024- 2047]: 12247990
Protocol Breakdown
![[protocol breakdown chart]](201004160345.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29061725 (100.00%) 20054713298 (100.00%) 690.07
ip 29018007 ( 99.85%) 20047639545 ( 99.96%) 690.87
tcp 17917220 ( 61.65%) 14480291905 ( 72.20%) 808.18
http(s) 7483691 ( 25.75%) 10464832750 ( 52.18%) 1398.35
http(c) 3832384 ( 13.19%) 374687603 ( 1.87%) 97.77
squid 404510 ( 1.39%) 110020197 ( 0.55%) 271.98
smtp 331750 ( 1.14%) 62923848 ( 0.31%) 189.67
ftp 13821 ( 0.05%) 1557521 ( 0.01%) 112.69
pop3 7961 ( 0.03%) 5494861 ( 0.03%) 690.22
imap 638 ( 0.00%) 94646 ( 0.00%) 148.35
telnet 2112 ( 0.01%) 154297 ( 0.00%) 73.06
ssh 749476 ( 2.58%) 112799790 ( 0.56%) 150.50
dns 235062 ( 0.81%) 274461973 ( 1.37%) 1167.62
bgp 193 ( 0.00%) 81859 ( 0.00%) 424.14
napster 8 ( 0.00%) 528 ( 0.00%) 66.00
rtsp 32158 ( 0.11%) 36541800 ( 0.18%) 1136.32
icecast 872 ( 0.00%) 98007 ( 0.00%) 112.39
hotline 12 ( 0.00%) 744 ( 0.00%) 62.00
other 4821158 ( 16.59%) 3036456641 ( 15.14%) 629.82
udp 7078288 ( 24.36%) 3635212141 ( 18.13%) 513.57
dns 688918 ( 2.37%) 122007604 ( 0.61%) 177.10
rip 24 ( 0.00%) 1868 ( 0.00%) 77.83
realaud 48 ( 0.00%) 4038 ( 0.00%) 84.12
halflif 77 ( 0.00%) 6652 ( 0.00%) 86.39
starcra 268 ( 0.00%) 33772 ( 0.00%) 126.01
everque 515 ( 0.00%) 107868 ( 0.00%) 209.45
unreal 64 ( 0.00%) 8945 ( 0.00%) 139.77
quake 53 ( 0.00%) 4674 ( 0.00%) 88.19
cuseeme 3 ( 0.00%) 280 ( 0.00%) 93.33
other 6384380 ( 21.97%) 3512500564 ( 17.51%) 550.17
icmp 1038421 ( 3.57%) 184721682 ( 0.92%) 177.89
ipip 324 ( 0.00%) 38355 ( 0.00%) 118.38
ipsec 1785 ( 0.01%) 525518 ( 0.00%) 294.41
ip6 2956127 ( 10.17%) 1724964428 ( 8.60%) 583.52
other 25842 ( 0.09%) 21885516 ( 0.11%) 846.90
frag 14360 ( 0.05%) 13087547 ( 0.07%) 911.39
ip6 43718 ( 0.15%) 7073753 ( 0.04%) 161.80
tcp6 12471 ( 0.04%) 1535138 ( 0.01%) 123.10
http(s) 105 ( 0.00%) 70879 ( 0.00%) 675.04
http(c) 4484 ( 0.02%) 397533 ( 0.00%) 88.66
smtp 440 ( 0.00%) 177848 ( 0.00%) 404.20
imap 246 ( 0.00%) 28275 ( 0.00%) 114.94
ssh 5036 ( 0.02%) 596008 ( 0.00%) 118.35
dns 120 ( 0.00%) 31218 ( 0.00%) 260.15
bgp 110 ( 0.00%) 14748 ( 0.00%) 134.07
other 1930 ( 0.01%) 218629 ( 0.00%) 113.28
udp6 24393 ( 0.08%) 4652124 ( 0.02%) 190.72
dns 24172 ( 0.08%) 4618422 ( 0.02%) 191.06
other 221 ( 0.00%) 33702 ( 0.00%) 152.50
icmp6 6745 ( 0.02%) 812297 ( 0.00%) 120.43
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 79 ( 0.00%) 70114 ( 0.00%) 887.52
tcpdump file: 201004160345.dump.gz (739.82 MB)