Traffic Trace Info
DumpFile: 201004121400.dump
FileSize: 2367.75MB
Id: 201004121400
StartTime: Mon Apr 12 14:00:00 2010
EndTime: Mon Apr 12 14:15:00 2010
TotalTime: 899.90 seconds
TotalCapSize: 1854.53MB CapLen: 96 bytes
# of packets: 33633770 (20759.37MB)
AvgRate: 193.53Mbps stddev:14.24M
IP flow (unique src/dst pair) Information
# of flows: 1167989 (avg. 28.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 1.2% 1.0% 1.0% 0.9% 0.9% 0.9% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 638605
Top 10 bandwidth usage (bytes/total in %):
16.7% 11.0% 6.1% 5.4% 5.1% 4.9% 4.4% 3.7% 1.9% 1.5%
# of IPv6 addresses: 1002
Top 10 bandwidth usage (bytes/total in %):
22.6% 8.4% 7.4% 6.7% 6.7% 6.6% 6.1% 5.0% 4.9% 4.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004121400.pktlen.png)
detailed numbers
[ 32- 63]: 5852505
[ 64- 127]: 8910679
[ 128- 255]: 2676896
[ 256- 511]: 2028073
[ 512- 1023]: 902625
[ 1024- 2047]: 13262992
Protocol Breakdown
![[protocol breakdown chart]](201004121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33633770 (100.00%) 21767781738 (100.00%) 647.20
ip 33581160 ( 99.84%) 21758084291 ( 99.96%) 647.93
tcp 19825324 ( 58.94%) 14249452704 ( 65.46%) 718.75
http(s) 8323210 ( 24.75%) 11064149952 ( 50.83%) 1329.31
http(c) 6689053 ( 19.89%) 837888588 ( 3.85%) 125.26
squid 265427 ( 0.79%) 87363092 ( 0.40%) 329.14
smtp 387696 ( 1.15%) 127446987 ( 0.59%) 328.73
ftp 38228 ( 0.11%) 12867250 ( 0.06%) 336.59
pop3 23605 ( 0.07%) 11502337 ( 0.05%) 487.28
imap 3062 ( 0.01%) 1003315 ( 0.00%) 327.67
telnet 1429 ( 0.00%) 139396 ( 0.00%) 97.55
ssh 180982 ( 0.54%) 26289495 ( 0.12%) 145.26
dns 76382 ( 0.23%) 5226575 ( 0.02%) 68.43
bgp 154 ( 0.00%) 49347 ( 0.00%) 320.44
napster 17 ( 0.00%) 1452 ( 0.00%) 85.41
realaud 12003 ( 0.04%) 11801181 ( 0.05%) 983.19
rtsp 148131 ( 0.44%) 75922878 ( 0.35%) 512.54
icecast 1398 ( 0.00%) 99328 ( 0.00%) 71.05
hotline 17 ( 0.00%) 1653 ( 0.00%) 97.24
other 3674526 ( 10.93%) 1987699638 ( 9.13%) 540.94
udp 9301870 ( 27.66%) 5061563637 ( 23.25%) 544.14
dns 725524 ( 2.16%) 120523261 ( 0.55%) 166.12
rip 1 ( 0.00%) 109 ( 0.00%) 109.00
realaud 43 ( 0.00%) 5799 ( 0.00%) 134.86
halflif 103 ( 0.00%) 14302 ( 0.00%) 138.85
starcra 264 ( 0.00%) 29169 ( 0.00%) 110.49
everque 690 ( 0.00%) 113743 ( 0.00%) 164.84
unreal 65 ( 0.00%) 11120 ( 0.00%) 171.08
quake 69 ( 0.00%) 5993 ( 0.00%) 86.86
cuseeme 9 ( 0.00%) 1069 ( 0.00%) 118.78
other 8573986 ( 25.49%) 4940681004 ( 22.70%) 576.24
icmp 413809 ( 1.23%) 34949129 ( 0.16%) 84.46
ipip 328 ( 0.00%) 38840 ( 0.00%) 118.41
ipsec 1792 ( 0.01%) 867648 ( 0.00%) 484.18
ip6 4028917 ( 11.98%) 2405453129 ( 11.05%) 597.05
other 9120 ( 0.03%) 5759204 ( 0.03%) 631.49
frag 3338 ( 0.01%) 2721913 ( 0.01%) 815.43
ip6 52610 ( 0.16%) 9697447 ( 0.04%) 184.33
tcp6 15593 ( 0.05%) 2439148 ( 0.01%) 156.43
http(s) 835 ( 0.00%) 910988 ( 0.00%) 1091.00
http(c) 3796 ( 0.01%) 348142 ( 0.00%) 91.71
smtp 143 ( 0.00%) 52202 ( 0.00%) 365.05
ftp 2729 ( 0.01%) 281602 ( 0.00%) 103.19
imap 353 ( 0.00%) 43277 ( 0.00%) 122.60
ssh 3226 ( 0.01%) 267604 ( 0.00%) 82.95
dns 193 ( 0.00%) 60510 ( 0.00%) 313.52
bgp 102 ( 0.00%) 12817 ( 0.00%) 125.66
napster 4 ( 0.00%) 356 ( 0.00%) 89.00
realaud 4 ( 0.00%) 356 ( 0.00%) 89.00
other 4208 ( 0.01%) 461294 ( 0.00%) 109.62
udp6 30427 ( 0.09%) 6411227 ( 0.03%) 210.71
dns 29611 ( 0.09%) 6239264 ( 0.03%) 210.71
other 816 ( 0.00%) 171963 ( 0.00%) 210.74
icmp6 6490 ( 0.02%) 785080 ( 0.00%) 120.97
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 70 ( 0.00%) 57912 ( 0.00%) 827.31
tcpdump file: 201004121400.dump.gz (852.86 MB)