Traffic Trace Info
DumpFile: 201005051400.dump
FileSize: 1979.06MB
Id: 201005051400
StartTime: Wed May 5 14:00:01 2010
EndTime: Wed May 5 14:15:00 2010
TotalTime: 898.99 seconds
TotalCapSize: 1542.61MB CapLen: 96 bytes
# of packets: 28602432 (17561.87MB)
AvgRate: 163.88Mbps stddev:14.45M
IP flow (unique src/dst pair) Information
# of flows: 911329 (avg. 31.39 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.9% 1.6% 1.5% 1.3% 1.3% 1.1% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 525120
Top 10 bandwidth usage (bytes/total in %):
19.5% 10.1% 5.0% 4.0% 3.6% 3.5% 2.6% 2.4% 2.4% 2.1%
# of IPv6 addresses: 1172
Top 10 bandwidth usage (bytes/total in %):
28.5% 9.6% 9.4% 6.1% 4.4% 4.3% 4.3% 4.2% 3.6% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201005051400.pktlen.png)
detailed numbers
[ 32- 63]: 4538195
[ 64- 127]: 7768331
[ 128- 255]: 2365573
[ 256- 511]: 1925804
[ 512- 1023]: 903106
[ 1024- 2047]: 11101423
Protocol Breakdown
![[protocol breakdown chart]](201005051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28602432 (100.00%) 18414958661 (100.00%) 643.82
ip 28559266 ( 99.85%) 18407300245 ( 99.96%) 644.53
tcp 14857867 ( 51.95%) 11227246289 ( 60.97%) 755.64
http(s) 6209393 ( 21.71%) 8488292414 ( 46.09%) 1367.01
http(c) 3917803 ( 13.70%) 527718844 ( 2.87%) 134.70
squid 581678 ( 2.03%) 114052247 ( 0.62%) 196.07
smtp 276495 ( 0.97%) 50766567 ( 0.28%) 183.61
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 21321 ( 0.07%) 2348446 ( 0.01%) 110.15
pop3 42330 ( 0.15%) 9895488 ( 0.05%) 233.77
imap 1775 ( 0.01%) 1228375 ( 0.01%) 692.04
telnet 14884 ( 0.05%) 1127844 ( 0.01%) 75.78
ssh 221565 ( 0.77%) 32945406 ( 0.18%) 148.69
dns 20566 ( 0.07%) 1471441 ( 0.01%) 71.55
bgp 179 ( 0.00%) 80272 ( 0.00%) 448.45
napster 145 ( 0.00%) 23785 ( 0.00%) 164.03
realaud 11 ( 0.00%) 754 ( 0.00%) 68.55
rtsp 5994 ( 0.02%) 4290474 ( 0.02%) 715.79
icecast 17269 ( 0.06%) 15500182 ( 0.08%) 897.57
hotline 21 ( 0.00%) 1644 ( 0.00%) 78.29
other 3526434 ( 12.33%) 1977501864 ( 10.74%) 560.77
udp 9456364 ( 33.06%) 5000061913 ( 27.15%) 528.75
dns 643138 ( 2.25%) 111470994 ( 0.61%) 173.32
realaud 6377 ( 0.02%) 2470212 ( 0.01%) 387.36
halflif 44 ( 0.00%) 5408 ( 0.00%) 122.91
starcra 100 ( 0.00%) 12427 ( 0.00%) 124.27
everque 2216 ( 0.01%) 662358 ( 0.00%) 298.90
unreal 121 ( 0.00%) 20148 ( 0.00%) 166.51
quake 12 ( 0.00%) 1042 ( 0.00%) 86.83
cuseeme 115 ( 0.00%) 15767 ( 0.00%) 137.10
other 8804009 ( 30.78%) 4885285261 ( 26.53%) 554.89
icmp 472429 ( 1.65%) 58215259 ( 0.32%) 123.23
ipip 343 ( 0.00%) 44506 ( 0.00%) 129.76
ipsec 251 ( 0.00%) 31554 ( 0.00%) 125.71
ip6 3405543 ( 11.91%) 1864582061 ( 10.13%) 547.51
other 366469 ( 1.28%) 257118663 ( 1.40%) 701.61
frag 1521 ( 0.01%) 1481068 ( 0.01%) 973.75
ip6 43166 ( 0.15%) 7658416 ( 0.04%) 177.42
tcp6 12007 ( 0.04%) 1462930 ( 0.01%) 121.84
http(s) 82 ( 0.00%) 46468 ( 0.00%) 566.68
http(c) 1316 ( 0.00%) 127763 ( 0.00%) 97.08
squid 53 ( 0.00%) 4482 ( 0.00%) 84.57
smtp 45 ( 0.00%) 6708 ( 0.00%) 149.07
imap 408 ( 0.00%) 49220 ( 0.00%) 120.64
ssh 1806 ( 0.01%) 328468 ( 0.00%) 181.88
dns 121 ( 0.00%) 30685 ( 0.00%) 253.60
bgp 113 ( 0.00%) 15614 ( 0.00%) 138.18
other 8063 ( 0.03%) 853522 ( 0.00%) 105.86
udp6 28036 ( 0.10%) 5743616 ( 0.03%) 204.87
dns 27269 ( 0.10%) 5628152 ( 0.03%) 206.39
other 767 ( 0.00%) 115464 ( 0.00%) 150.54
icmp6 3026 ( 0.01%) 378662 ( 0.00%) 125.14
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 67 ( 0.00%) 69128 ( 0.00%) 1031.76
tcpdump file: 201005051400.dump.gz (720.71 MB)