Traffic Trace Info
DumpFile: 201004111400.dump
FileSize: 2311.83MB
Id: 201004111400
StartTime: Sun Apr 11 14:00:01 2010
EndTime: Sun Apr 11 14:15:00 2010
TotalTime: 899.80 seconds
TotalCapSize: 1799.15MB CapLen: 96 bytes
# of packets: 33598169 (19932.76MB)
AvgRate: 185.84Mbps stddev:25.23M
IP flow (unique src/dst pair) Information
# of flows: 844682 (avg. 39.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 5.4% 2.1% 2.1% 1.8% 1.7% 1.4% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 499847
Top 10 bandwidth usage (bytes/total in %):
26.4% 12.5% 9.3% 7.5% 6.0% 5.4% 3.1% 3.1% 2.2% 2.2%
# of IPv6 addresses: 873
Top 10 bandwidth usage (bytes/total in %):
25.2% 22.8% 7.0% 6.0% 6.0% 4.9% 3.4% 2.8% 2.7% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004111400.pktlen.png)
detailed numbers
[ 32- 63]: 3186755
[ 64- 127]: 11523214
[ 128- 255]: 3182825
[ 256- 511]: 2346630
[ 512- 1023]: 933750
[ 1024- 2047]: 12424995
Protocol Breakdown
![[protocol breakdown chart]](201004111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33598169 (100.00%) 20901016291 (100.00%) 622.09
ip 33547949 ( 99.85%) 20892551584 ( 99.96%) 622.77
tcp 16316593 ( 48.56%) 12460573953 ( 59.62%) 763.67
http(s) 6244276 ( 18.59%) 8669945372 ( 41.48%) 1388.46
http(c) 3817627 ( 11.36%) 445491708 ( 2.13%) 116.69
squid 220153 ( 0.66%) 62782867 ( 0.30%) 285.18
smtp 151808 ( 0.45%) 41905519 ( 0.20%) 276.04
ftp 47366 ( 0.14%) 20050368 ( 0.10%) 423.31
pop3 9950 ( 0.03%) 7113276 ( 0.03%) 714.90
imap 982 ( 0.00%) 460877 ( 0.00%) 469.32
telnet 548 ( 0.00%) 68691 ( 0.00%) 125.35
ssh 1802030 ( 5.36%) 234288362 ( 1.12%) 130.01
dns 73850 ( 0.22%) 5091006 ( 0.02%) 68.94
bgp 146 ( 0.00%) 39562 ( 0.00%) 270.97
napster 87 ( 0.00%) 8025 ( 0.00%) 92.24
realaud 41 ( 0.00%) 2676 ( 0.00%) 65.27
rtsp 79304 ( 0.24%) 31182781 ( 0.15%) 393.21
icecast 494 ( 0.00%) 34278 ( 0.00%) 69.39
hotline 2 ( 0.00%) 122 ( 0.00%) 61.00
other 3867922 ( 11.51%) 2942108043 ( 14.08%) 760.64
udp 13025724 ( 38.77%) 6420280142 ( 30.72%) 492.89
dns 537537 ( 1.60%) 110641466 ( 0.53%) 205.83
realaud 1857 ( 0.01%) 114606 ( 0.00%) 61.72
halflif 75 ( 0.00%) 9065 ( 0.00%) 120.87
starcra 170 ( 0.00%) 19760 ( 0.00%) 116.24
everque 500 ( 0.00%) 105769 ( 0.00%) 211.54
unreal 61 ( 0.00%) 8455 ( 0.00%) 138.61
quake 20 ( 0.00%) 2807 ( 0.00%) 140.35
cuseeme 30 ( 0.00%) 7211 ( 0.00%) 240.37
other 12473689 ( 37.13%) 6307560753 ( 30.18%) 505.67
icmp 394473 ( 1.17%) 32983409 ( 0.16%) 83.61
ipip 304 ( 0.00%) 38396 ( 0.00%) 126.30
ipsec 1314 ( 0.00%) 360012 ( 0.00%) 273.98
ip6 3520561 ( 10.48%) 1948100274 ( 9.32%) 553.35
other 288980 ( 0.86%) 30215398 ( 0.14%) 104.56
frag 33208 ( 0.10%) 26666663 ( 0.13%) 803.02
ip6 50220 ( 0.15%) 8464707 ( 0.04%) 168.55
tcp6 17045 ( 0.05%) 1645370 ( 0.01%) 96.53
http(s) 28 ( 0.00%) 15907 ( 0.00%) 568.11
http(c) 10495 ( 0.03%) 853159 ( 0.00%) 81.29
smtp 164 ( 0.00%) 105851 ( 0.00%) 645.43
imap 350 ( 0.00%) 41930 ( 0.00%) 119.80
ssh 3225 ( 0.01%) 267410 ( 0.00%) 82.92
dns 74 ( 0.00%) 17347 ( 0.00%) 234.42
bgp 127 ( 0.00%) 29789 ( 0.00%) 234.56
other 2582 ( 0.01%) 313977 ( 0.00%) 121.60
udp6 26289 ( 0.08%) 5629711 ( 0.03%) 214.15
dns 24299 ( 0.07%) 5443789 ( 0.03%) 224.03
quake 1 ( 0.00%) 118 ( 0.00%) 118.00
other 1989 ( 0.01%) 185804 ( 0.00%) 93.42
icmp6 6448 ( 0.02%) 772270 ( 0.00%) 119.77
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 408 ( 0.00%) 413276 ( 0.00%) 1012.93
tcpdump file: 201004111400.dump.gz (832.58 MB)