Traffic Trace Info
DumpFile: 201004131400.dump
FileSize: 2275.53MB
Id: 201004131400
StartTime: Tue Apr 13 14:00:01 2010
EndTime: Tue Apr 13 14:15:01 2010
TotalTime: 899.85 seconds
TotalCapSize: 1771.44MB CapLen: 96 bytes
# of packets: 33035431 (19865.77MB)
AvgRate: 185.20Mbps stddev:17.64M
IP flow (unique src/dst pair) Information
# of flows: 975441 (avg. 33.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 1.7% 1.4% 1.0% 1.0% 1.0% 0.9% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 530546
Top 10 bandwidth usage (bytes/total in %):
23.0% 7.0% 3.9% 3.4% 3.3% 2.9% 2.9% 2.7% 2.5% 2.2%
# of IPv6 addresses: 963
Top 10 bandwidth usage (bytes/total in %):
24.9% 13.0% 6.8% 5.9% 5.6% 5.3% 4.4% 3.9% 3.7% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201004131400.pktlen.png)
detailed numbers
[ 32- 63]: 5376119
[ 64- 127]: 9163447
[ 128- 255]: 3086081
[ 256- 511]: 1676704
[ 512- 1023]: 908411
[ 1024- 2047]: 12824669
Protocol Breakdown
![[protocol breakdown chart]](201004131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33035431 (100.00%) 20830767671 (100.00%) 630.56
ip 32986627 ( 99.85%) 20821978967 ( 99.96%) 631.22
tcp 19022776 ( 57.58%) 12620088242 ( 60.58%) 663.42
http(s) 7438491 ( 22.52%) 9708057653 ( 46.60%) 1305.11
http(c) 5690719 ( 17.23%) 785840767 ( 3.77%) 138.09
squid 271273 ( 0.82%) 77714393 ( 0.37%) 286.48
smtp 240598 ( 0.73%) 81339762 ( 0.39%) 338.07
ftp 46859 ( 0.14%) 13989357 ( 0.07%) 298.54
pop3 17783 ( 0.05%) 8064375 ( 0.04%) 453.49
imap 2879 ( 0.01%) 1029491 ( 0.00%) 357.59
telnet 668 ( 0.00%) 92000 ( 0.00%) 137.72
ssh 1538645 ( 4.66%) 180440186 ( 0.87%) 117.27
dns 57797 ( 0.17%) 3954264 ( 0.02%) 68.42
bgp 152 ( 0.00%) 55693 ( 0.00%) 366.40
napster 691 ( 0.00%) 360399 ( 0.00%) 521.56
realaud 39 ( 0.00%) 4433 ( 0.00%) 113.67
rtsp 105967 ( 0.32%) 35353743 ( 0.17%) 333.63
icecast 1366 ( 0.00%) 141522 ( 0.00%) 103.60
hotline 8 ( 0.00%) 680 ( 0.00%) 85.00
other 3608837 ( 10.92%) 1723649284 ( 8.27%) 477.62
udp 10813109 ( 32.73%) 6682847492 ( 32.08%) 618.03
dns 773970 ( 2.34%) 156815966 ( 0.75%) 202.61
realaud 54 ( 0.00%) 5901 ( 0.00%) 109.28
halflif 53 ( 0.00%) 7262 ( 0.00%) 137.02
starcra 359 ( 0.00%) 32624 ( 0.00%) 90.87
everque 731 ( 0.00%) 132008 ( 0.00%) 180.59
unreal 63 ( 0.00%) 10458 ( 0.00%) 166.00
quake 30 ( 0.00%) 2996 ( 0.00%) 99.87
cuseeme 6 ( 0.00%) 1535 ( 0.00%) 255.83
other 10037300 ( 30.38%) 6525454809 ( 31.33%) 650.12
icmp 425276 ( 1.29%) 37254159 ( 0.18%) 87.60
ipip 376 ( 0.00%) 44376 ( 0.00%) 118.02
ipsec 2581 ( 0.01%) 1350478 ( 0.01%) 523.24
ip6 2694219 ( 8.16%) 1475243778 ( 7.08%) 547.56
other 28290 ( 0.09%) 5150442 ( 0.02%) 182.06
frag 30049 ( 0.09%) 36501151 ( 0.18%) 1214.72
ip6 48804 ( 0.15%) 8788704 ( 0.04%) 180.08
tcp6 11589 ( 0.04%) 1610604 ( 0.01%) 138.98
http(s) 437 ( 0.00%) 387108 ( 0.00%) 885.83
http(c) 2777 ( 0.01%) 262484 ( 0.00%) 94.52
smtp 260 ( 0.00%) 96244 ( 0.00%) 370.17
ftp 1466 ( 0.00%) 148363 ( 0.00%) 101.20
imap 356 ( 0.00%) 42240 ( 0.00%) 118.65
ssh 1816 ( 0.01%) 175392 ( 0.00%) 96.58
dns 133 ( 0.00%) 44336 ( 0.00%) 333.35
bgp 108 ( 0.00%) 13429 ( 0.00%) 124.34
other 4236 ( 0.01%) 441008 ( 0.00%) 104.11
udp6 30839 ( 0.09%) 6336831 ( 0.03%) 205.48
dns 30532 ( 0.09%) 6286632 ( 0.03%) 205.90
other 307 ( 0.00%) 50199 ( 0.00%) 163.51
icmp6 6253 ( 0.02%) 758003 ( 0.00%) 121.22
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 92 ( 0.00%) 79050 ( 0.00%) 859.24
tcpdump file: 201004131400.dump.gz (848.00 MB)