Traffic Trace Info
DumpFile: 201005061400.dump
FileSize: 2950.01MB
Id: 201005061400
StartTime: Thu May 6 14:00:01 2010
EndTime: Thu May 6 14:15:01 2010
TotalTime: 899.84 seconds
TotalCapSize: -1790.95MB CapLen: 96 bytes
# of packets: 42267233 (27151.39MB)
AvgRate: 253.09Mbps stddev:22.80M
IP flow (unique src/dst pair) Information
# of flows: 990468 (avg. 42.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.4% 2.7% 1.6% 0.8% 0.6% 0.6% 0.6% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 544975
Top 10 bandwidth usage (bytes/total in %):
13.7% 11.5% 8.7% 7.3% 5.7% 3.6% 2.8% 2.7% 2.6% 2.0%
# of IPv6 addresses: 1257
Top 10 bandwidth usage (bytes/total in %):
83.1% 83.1% 4.1% 1.2% 1.2% 1.2% 1.2% 0.6% 0.6% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201005061400.pktlen.png)
detailed numbers
[ 32- 63]: 6907347
[ 64- 127]: 11528628
[ 128- 255]: 2894526
[ 256- 511]: 2144942
[ 512- 1023]: 1206281
[ 1024- 2047]: 17585509
Protocol Breakdown
![[protocol breakdown chart]](201005061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42267233 (100.00%) 28470291855 (100.00%) 673.58
ip 42192292 ( 99.82%) 28416419322 ( 99.81%) 673.50
tcp 25803379 ( 61.05%) 18934663868 ( 66.51%) 733.81
http(s) 8529608 ( 20.18%) 10889275502 ( 38.25%) 1276.64
http(c) 7563391 ( 17.89%) 1745743443 ( 6.13%) 230.81
squid 712236 ( 1.69%) 358262034 ( 1.26%) 503.01
smtp 424298 ( 1.00%) 145817747 ( 0.51%) 343.67
ftp 57291 ( 0.14%) 5328261 ( 0.02%) 93.00
pop3 146430 ( 0.35%) 192273796 ( 0.68%) 1313.08
imap 5828 ( 0.01%) 3249758 ( 0.01%) 557.61
telnet 26197 ( 0.06%) 1959067 ( 0.01%) 74.78
ssh 43259 ( 0.10%) 4879611 ( 0.02%) 112.80
dns 23053 ( 0.05%) 1622027 ( 0.01%) 70.36
bgp 165 ( 0.00%) 72350 ( 0.00%) 438.48
napster 71 ( 0.00%) 14492 ( 0.00%) 204.11
realaud 287 ( 0.00%) 57331 ( 0.00%) 199.76
rtsp 170015 ( 0.40%) 10494749 ( 0.04%) 61.73
icecast 12575 ( 0.03%) 960656 ( 0.00%) 76.39
hotline 5 ( 0.00%) 302 ( 0.00%) 60.40
other 8088666 ( 19.14%) 5574652502 ( 19.58%) 689.19
udp 12148285 ( 28.74%) 7349965994 ( 25.82%) 605.02
dns 821189 ( 1.94%) 143728215 ( 0.50%) 175.02
realaud 28 ( 0.00%) 4405 ( 0.00%) 157.32
halflif 136 ( 0.00%) 10202 ( 0.00%) 75.01
starcra 231 ( 0.00%) 22458 ( 0.00%) 97.22
everque 891 ( 0.00%) 173783 ( 0.00%) 195.04
unreal 171 ( 0.00%) 29050 ( 0.00%) 169.88
quake 43 ( 0.00%) 8375 ( 0.00%) 194.77
cuseeme 14 ( 0.00%) 1593 ( 0.00%) 113.79
other 11301562 ( 26.74%) 7204414158 ( 25.31%) 637.47
icmp 417677 ( 0.99%) 37965349 ( 0.13%) 90.90
ipip 348 ( 0.00%) 46016 ( 0.00%) 132.23
ipsec 418 ( 0.00%) 77772 ( 0.00%) 186.06
ip6 3690675 ( 8.73%) 2075050633 ( 7.29%) 562.24
other 131510 ( 0.31%) 18649690 ( 0.07%) 141.81
frag 60863 ( 0.14%) 42948672 ( 0.15%) 705.66
ip6 74941 ( 0.18%) 53872533 ( 0.19%) 718.87
tcp6 39879 ( 0.09%) 46803565 ( 0.16%) 1173.64
http(s) 260 ( 0.00%) 255191 ( 0.00%) 981.50
http(c) 1324 ( 0.00%) 143752 ( 0.00%) 108.57
smtp 224 ( 0.00%) 170645 ( 0.00%) 761.81
imap 326 ( 0.00%) 38641 ( 0.00%) 118.53
ssh 4394 ( 0.01%) 953052 ( 0.00%) 216.90
dns 175 ( 0.00%) 43606 ( 0.00%) 249.18
bgp 124 ( 0.00%) 17338 ( 0.00%) 139.82
other 33052 ( 0.08%) 45181340 ( 0.16%) 1366.98
udp6 30681 ( 0.07%) 6382479 ( 0.02%) 208.03
dns 29399 ( 0.07%) 6138775 ( 0.02%) 208.81
unreal 1 ( 0.00%) 118 ( 0.00%) 118.00
quake 1 ( 0.00%) 105 ( 0.00%) 105.00
other 1280 ( 0.00%) 243481 ( 0.00%) 190.22
icmp6 4172 ( 0.01%) 502602 ( 0.00%) 120.47
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 178 ( 0.00%) 179671 ( 0.00%) 1009.39
tcpdump file: 201005061400.dump.gz (1064.83 MB)