Traffic Trace Info
DumpFile: 201005021400.dump
FileSize: 1783.07MB
Id: 201005021400
StartTime: Sun May 2 14:00:00 2010
EndTime: Sun May 2 14:15:00 2010
TotalTime: 899.93 seconds
TotalCapSize: 1395.73MB CapLen: 96 bytes
# of packets: 25384267 (15496.84MB)
AvgRate: 144.46Mbps stddev:13.10M
IP flow (unique src/dst pair) Information
# of flows: 679242 (avg. 37.37 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.2% 1.1% 1.0% 1.0% 1.0% 0.9% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 388504
Top 10 bandwidth usage (bytes/total in %):
23.1% 13.4% 4.5% 3.6% 3.4% 3.0% 2.9% 2.6% 2.5% 2.5%
# of IPv6 addresses: 1074
Top 10 bandwidth usage (bytes/total in %):
36.0% 5.4% 5.4% 4.8% 4.8% 4.3% 4.1% 4.1% 3.8% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201005021400.pktlen.png)
detailed numbers
[ 32- 63]: 3678128
[ 64- 127]: 7413160
[ 128- 255]: 2000861
[ 256- 511]: 1708982
[ 512- 1023]: 747917
[ 1024- 2047]: 9835219
Protocol Breakdown
![[protocol breakdown chart]](201005021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25384267 (100.00%) 16249614094 (100.00%) 640.15
ip 25346821 ( 99.85%) 16243527091 ( 99.96%) 640.85
tcp 12487687 ( 49.19%) 9626857625 ( 59.24%) 770.91
http(s) 5691683 ( 22.42%) 7866267798 ( 48.41%) 1382.06
http(c) 3645711 ( 14.36%) 399917613 ( 2.46%) 109.70
squid 283428 ( 1.12%) 96134137 ( 0.59%) 339.18
smtp 198516 ( 0.78%) 33649472 ( 0.21%) 169.51
ftp 16450 ( 0.06%) 1977656 ( 0.01%) 120.22
pop3 11765 ( 0.05%) 8736044 ( 0.05%) 742.55
imap 1484 ( 0.01%) 378803 ( 0.00%) 255.26
telnet 1652 ( 0.01%) 151275 ( 0.00%) 91.57
ssh 86062 ( 0.34%) 14882935 ( 0.09%) 172.93
dns 18859 ( 0.07%) 1326310 ( 0.01%) 70.33
bgp 153 ( 0.00%) 62777 ( 0.00%) 410.31
napster 64 ( 0.00%) 5493 ( 0.00%) 85.83
realaud 116 ( 0.00%) 10767 ( 0.00%) 92.82
rtsp 6762 ( 0.03%) 420844 ( 0.00%) 62.24
icecast 551 ( 0.00%) 39934 ( 0.00%) 72.48
hotline 6 ( 0.00%) 679 ( 0.00%) 113.17
other 2524412 ( 9.94%) 1202894308 ( 7.40%) 476.50
udp 8558833 ( 33.72%) 4371031978 ( 26.90%) 510.70
dns 527189 ( 2.08%) 91320565 ( 0.56%) 173.22
realaud 4740 ( 0.02%) 5013302 ( 0.03%) 1057.66
halflif 65 ( 0.00%) 6183 ( 0.00%) 95.12
starcra 131 ( 0.00%) 15447 ( 0.00%) 117.92
everque 424 ( 0.00%) 83081 ( 0.00%) 195.95
unreal 43 ( 0.00%) 6585 ( 0.00%) 153.14
quake 15 ( 0.00%) 1353 ( 0.00%) 90.20
cuseeme 5 ( 0.00%) 440 ( 0.00%) 88.00
other 8025855 ( 31.62%) 4274398129 ( 26.30%) 532.58
icmp 545298 ( 2.15%) 65749031 ( 0.40%) 120.57
ipip 348 ( 0.00%) 44600 ( 0.00%) 128.16
ipsec 705 ( 0.00%) 116886 ( 0.00%) 165.80
ip6 3752690 ( 14.78%) 2179535700 ( 13.41%) 580.79
other 1260 ( 0.00%) 191271 ( 0.00%) 151.80
frag 1765 ( 0.01%) 1722987 ( 0.01%) 976.20
ip6 37446 ( 0.15%) 6087003 ( 0.04%) 162.55
tcp6 11328 ( 0.04%) 1635700 ( 0.01%) 144.39
http(s) 42 ( 0.00%) 17976 ( 0.00%) 428.00
http(c) 1290 ( 0.01%) 119822 ( 0.00%) 92.89
smtp 31 ( 0.00%) 3478 ( 0.00%) 112.19
ftp 1621 ( 0.01%) 169169 ( 0.00%) 104.36
imap 245 ( 0.00%) 29196 ( 0.00%) 119.17
ssh 1808 ( 0.01%) 328832 ( 0.00%) 181.88
dns 48 ( 0.00%) 7145 ( 0.00%) 148.85
bgp 124 ( 0.00%) 20986 ( 0.00%) 169.24
other 6119 ( 0.02%) 939096 ( 0.01%) 153.47
udp6 22571 ( 0.09%) 3972738 ( 0.02%) 176.01
dns 21891 ( 0.09%) 3842534 ( 0.02%) 175.53
other 680 ( 0.00%) 130204 ( 0.00%) 191.48
icmp6 3471 ( 0.01%) 430770 ( 0.00%) 124.11
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 46 ( 0.00%) 43715 ( 0.00%) 950.33
tcpdump file: 201005021400.dump.gz (655.59 MB)