Traffic Trace Info
DumpFile: 201005031400.dump
FileSize: 2054.70MB
Id: 201005031400
StartTime: Mon May 3 14:00:01 2010
EndTime: Mon May 3 14:15:00 2010
TotalTime: 899.35 seconds
TotalCapSize: 1611.60MB CapLen: 96 bytes
# of packets: 29038511 (18084.10MB)
AvgRate: 168.69Mbps stddev:21.46M
IP flow (unique src/dst pair) Information
# of flows: 729317 (avg. 39.82 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.3% 1.0% 0.9% 0.9% 0.8% 0.8% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 411970
Top 10 bandwidth usage (bytes/total in %):
20.4% 12.1% 5.7% 3.7% 3.3% 3.2% 3.1% 3.0% 2.9% 2.7%
# of IPv6 addresses: 1173
Top 10 bandwidth usage (bytes/total in %):
33.9% 7.5% 7.4% 5.2% 5.2% 5.0% 4.7% 3.9% 3.9% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201005031400.pktlen.png)
detailed numbers
[ 32- 63]: 3700694
[ 64- 127]: 8745420
[ 128- 255]: 2292346
[ 256- 511]: 1911708
[ 512- 1023]: 903956
[ 1024- 2047]: 11484387
Protocol Breakdown
![[protocol breakdown chart]](201005031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29038511 (100.00%) 18962558036 (100.00%) 653.01
ip 28997927 ( 99.86%) 18956117994 ( 99.97%) 653.71
tcp 15601975 ( 53.73%) 11857957814 ( 62.53%) 760.03
http(s) 6989845 ( 24.07%) 9588208396 ( 50.56%) 1371.73
http(c) 4611245 ( 15.88%) 514201028 ( 2.71%) 111.51
squid 347612 ( 1.20%) 98085453 ( 0.52%) 282.17
smtp 279033 ( 0.96%) 49711437 ( 0.26%) 178.16
ftp 20074 ( 0.07%) 2282283 ( 0.01%) 113.69
pop3 8470 ( 0.03%) 5342703 ( 0.03%) 630.78
imap 1590 ( 0.01%) 1118209 ( 0.01%) 703.28
telnet 851 ( 0.00%) 94725 ( 0.00%) 111.31
ssh 567571 ( 1.95%) 84028730 ( 0.44%) 148.05
dns 19914 ( 0.07%) 1425627 ( 0.01%) 71.59
bgp 158 ( 0.00%) 68725 ( 0.00%) 434.97
napster 36 ( 0.00%) 2555 ( 0.00%) 70.97
realaud 158 ( 0.00%) 15012 ( 0.00%) 95.01
rtsp 2631 ( 0.01%) 166861 ( 0.00%) 63.42
icecast 2116 ( 0.01%) 178104 ( 0.00%) 84.17
other 2750669 ( 9.47%) 1513027846 ( 7.98%) 550.06
udp 9148943 ( 31.51%) 4722146051 ( 24.90%) 516.14
dns 616821 ( 2.12%) 106265236 ( 0.56%) 172.28
realaud 3491 ( 0.01%) 3924525 ( 0.02%) 1124.18
halflif 3279 ( 0.01%) 4137899 ( 0.02%) 1261.94
starcra 110 ( 0.00%) 14748 ( 0.00%) 134.07
everque 524 ( 0.00%) 118411 ( 0.00%) 225.98
unreal 99 ( 0.00%) 16012 ( 0.00%) 161.74
quake 12 ( 0.00%) 1047 ( 0.00%) 87.25
other 8524332 ( 29.36%) 4607547814 ( 24.30%) 540.52
icmp 549375 ( 1.89%) 63744790 ( 0.34%) 116.03
ipip 367 ( 0.00%) 45214 ( 0.00%) 123.20
ipsec 949 ( 0.00%) 194286 ( 0.00%) 204.73
ip6 3682080 ( 12.68%) 2309907894 ( 12.18%) 627.34
other 14238 ( 0.05%) 2121945 ( 0.01%) 149.03
frag 1476 ( 0.01%) 1464094 ( 0.01%) 991.93
ip6 40584 ( 0.14%) 6440042 ( 0.03%) 158.68
tcp6 13037 ( 0.04%) 1768315 ( 0.01%) 135.64
http(s) 47 ( 0.00%) 19520 ( 0.00%) 415.32
http(c) 1068 ( 0.00%) 103045 ( 0.00%) 96.48
smtp 81 ( 0.00%) 25078 ( 0.00%) 309.60
ftp 2394 ( 0.01%) 242991 ( 0.00%) 101.50
imap 257 ( 0.00%) 30080 ( 0.00%) 117.04
ssh 1843 ( 0.01%) 333474 ( 0.00%) 180.94
dns 54 ( 0.00%) 12128 ( 0.00%) 224.59
bgp 124 ( 0.00%) 17646 ( 0.00%) 142.31
other 7169 ( 0.02%) 984353 ( 0.01%) 137.31
udp6 23056 ( 0.08%) 4102601 ( 0.02%) 177.94
dns 22562 ( 0.08%) 4010233 ( 0.02%) 177.74
other 494 ( 0.00%) 92368 ( 0.00%) 186.98
icmp6 4434 ( 0.02%) 537228 ( 0.00%) 121.16
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 27 ( 0.00%) 27818 ( 0.00%) 1030.30
tcpdump file: 201005031400.dump.gz (752.80 MB)