Traffic Trace Info
DumpFile: 201005041400.dump
FileSize: 2517.36MB
Id: 201005041400
StartTime: Tue May 4 14:00:01 2010
EndTime: Tue May 4 14:15:00 2010
TotalTime: 899.34 seconds
TotalCapSize: 1981.02MB CapLen: 96 bytes
# of packets: 35149018 (23775.48MB)
AvgRate: 221.76Mbps stddev:28.01M
IP flow (unique src/dst pair) Information
# of flows: 809963 (avg. 43.40 pkts/flow)
Top 10 big flow size (bytes/total in %):
20.1% 7.3% 1.7% 1.2% 1.2% 0.9% 0.9% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 479989
Top 10 bandwidth usage (bytes/total in %):
21.8% 20.9% 14.8% 10.1% 7.3% 7.1% 3.7% 2.9% 2.4% 2.4%
# of IPv6 addresses: 1169
Top 10 bandwidth usage (bytes/total in %):
26.3% 9.5% 8.0% 5.7% 5.7% 4.2% 4.2% 4.0% 4.0% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201005041400.pktlen.png)
detailed numbers
[ 32- 63]: 4272331
[ 64- 127]: 10593373
[ 128- 255]: 2114968
[ 256- 511]: 1698981
[ 512- 1023]: 751862
[ 1024- 2047]: 15717503
Protocol Breakdown
![[protocol breakdown chart]](201005041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35149018 (100.00%) 24930393638 (100.00%) 709.28
ip 35104830 ( 99.87%) 24922078953 ( 99.97%) 709.93
tcp 22931094 ( 65.24%) 18723771878 ( 75.10%) 816.52
http(s) 6558520 ( 18.66%) 9006723970 ( 36.13%) 1373.29
http(c) 4434657 ( 12.62%) 458828303 ( 1.84%) 103.46
squid 442499 ( 1.26%) 101220405 ( 0.41%) 228.75
smtp 354482 ( 1.01%) 81134246 ( 0.33%) 228.88
nntp 23 ( 0.00%) 3413 ( 0.00%) 148.39
ftp 14796 ( 0.04%) 1778479 ( 0.01%) 120.20
pop3 12123 ( 0.03%) 9193964 ( 0.04%) 758.39
imap 1965 ( 0.01%) 833370 ( 0.00%) 424.11
telnet 6314 ( 0.02%) 497738 ( 0.00%) 78.83
ssh 112639 ( 0.32%) 16466801 ( 0.07%) 146.19
dns 19446 ( 0.06%) 1371944 ( 0.01%) 70.55
bgp 203 ( 0.00%) 92041 ( 0.00%) 453.40
napster 178 ( 0.00%) 47700 ( 0.00%) 267.98
realaud 206 ( 0.00%) 25999 ( 0.00%) 126.21
rtsp 36303 ( 0.10%) 31777939 ( 0.13%) 875.35
icecast 967 ( 0.00%) 69585 ( 0.00%) 71.96
other 10935769 ( 31.11%) 9013705741 ( 36.16%) 824.24
udp 8464578 ( 24.08%) 4343949012 ( 17.42%) 513.19
dns 660430 ( 1.88%) 113202881 ( 0.45%) 171.41
realaud 3204 ( 0.01%) 1318843 ( 0.01%) 411.62
halflif 50 ( 0.00%) 4878 ( 0.00%) 97.56
starcra 178 ( 0.00%) 23966 ( 0.00%) 134.64
everque 444 ( 0.00%) 98879 ( 0.00%) 222.70
unreal 35 ( 0.00%) 4966 ( 0.00%) 141.89
quake 22 ( 0.00%) 1951 ( 0.00%) 88.68
cuseeme 9 ( 0.00%) 786 ( 0.00%) 87.33
other 7800093 ( 22.19%) 4229207164 ( 16.96%) 542.20
icmp 504051 ( 1.43%) 63046622 ( 0.25%) 125.08
ipip 332 ( 0.00%) 42728 ( 0.00%) 128.70
ipsec 1835 ( 0.01%) 285458 ( 0.00%) 155.56
ip6 3202207 ( 9.11%) 1790902511 ( 7.18%) 559.27
other 733 ( 0.00%) 80744 ( 0.00%) 110.16
frag 936 ( 0.00%) 1040625 ( 0.00%) 1111.78
ip6 44188 ( 0.13%) 8314685 ( 0.03%) 188.17
tcp6 12956 ( 0.04%) 2000341 ( 0.01%) 154.39
http(s) 518 ( 0.00%) 496679 ( 0.00%) 958.84
http(c) 1758 ( 0.01%) 188891 ( 0.00%) 107.45
smtp 127 ( 0.00%) 31456 ( 0.00%) 247.69
ftp 1623 ( 0.00%) 167139 ( 0.00%) 102.98
imap 430 ( 0.00%) 50060 ( 0.00%) 116.42
ssh 1843 ( 0.01%) 333378 ( 0.00%) 180.89
dns 116 ( 0.00%) 31072 ( 0.00%) 267.86
bgp 110 ( 0.00%) 14352 ( 0.00%) 130.47
other 6431 ( 0.02%) 687314 ( 0.00%) 106.88
udp6 28342 ( 0.08%) 5867439 ( 0.02%) 207.02
dns 27641 ( 0.08%) 5741792 ( 0.02%) 207.73
other 701 ( 0.00%) 125647 ( 0.00%) 179.24
icmp6 2770 ( 0.01%) 350830 ( 0.00%) 126.65
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 89 ( 0.00%) 91859 ( 0.00%) 1032.12
tcpdump file: 201005041400.dump.gz (854.44 MB)