Traffic Trace Info
DumpFile: 201005071400.dump
FileSize: 2518.89MB
Id: 201005071400
StartTime: Fri May 7 14:00:01 2010
EndTime: Fri May 7 14:15:01 2010
TotalTime: 899.56 seconds
TotalCapSize: 1974.99MB CapLen: 96 bytes
# of packets: 35644486 (24155.12MB)
AvgRate: 225.24Mbps stddev:40.15M
IP flow (unique src/dst pair) Information
# of flows: 1211607 (avg. 29.42 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.6% 3.8% 1.6% 0.9% 0.8% 0.7% 0.7% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 598503
Top 10 bandwidth usage (bytes/total in %):
18.1% 14.1% 8.1% 4.6% 3.9% 3.0% 2.9% 2.6% 2.4% 2.4%
# of IPv6 addresses: 1208
Top 10 bandwidth usage (bytes/total in %):
58.8% 58.8% 11.7% 3.5% 3.4% 3.1% 1.8% 1.7% 1.5% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201005071400.pktlen.png)
detailed numbers
[ 32- 63]: 6969185
[ 64- 127]: 9694144
[ 128- 255]: 1271547
[ 256- 511]: 1134758
[ 512- 1023]: 664363
[ 1024- 2047]: 15910489
Protocol Breakdown
![[protocol breakdown chart]](201005071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35644486 (100.00%) 25328475611 (100.00%) 710.59
ip 35594586 ( 99.86%) 25309857295 ( 99.93%) 711.06
tcp 28605025 ( 80.25%) 22133381309 ( 87.39%) 773.76
http(s) 9849749 ( 27.63%) 13035046946 ( 51.46%) 1323.39
http(c) 7308230 ( 20.50%) 1145938215 ( 4.52%) 156.80
squid 586717 ( 1.65%) 140037652 ( 0.55%) 238.68
smtp 398818 ( 1.12%) 109004827 ( 0.43%) 273.32
nntp 97 ( 0.00%) 6842 ( 0.00%) 70.54
ftp 26796 ( 0.08%) 2743204 ( 0.01%) 102.37
pop3 23523 ( 0.07%) 13837604 ( 0.05%) 588.26
imap 3180 ( 0.01%) 976080 ( 0.00%) 306.94
telnet 17987 ( 0.05%) 1358818 ( 0.01%) 75.54
ssh 93548 ( 0.26%) 41100789 ( 0.16%) 439.36
dns 23590 ( 0.07%) 1656872 ( 0.01%) 70.24
bgp 258 ( 0.00%) 134503 ( 0.00%) 521.33
napster 539 ( 0.00%) 87053 ( 0.00%) 161.51
realaud 312 ( 0.00%) 50743 ( 0.00%) 162.64
rtsp 206825 ( 0.58%) 47119371 ( 0.19%) 227.82
icecast 25615 ( 0.07%) 11687359 ( 0.05%) 456.27
hotline 22 ( 0.00%) 3407 ( 0.00%) 154.86
other 10039213 ( 28.16%) 7582590664 ( 29.94%) 755.30
udp 5965150 ( 16.74%) 3002699289 ( 11.86%) 503.37
dns 806660 ( 2.26%) 136783745 ( 0.54%) 169.57
realaud 1799 ( 0.01%) 108555 ( 0.00%) 60.34
halflif 69 ( 0.00%) 6614 ( 0.00%) 95.86
starcra 382 ( 0.00%) 56357 ( 0.00%) 147.53
everque 833 ( 0.00%) 142849 ( 0.00%) 171.49
unreal 118 ( 0.00%) 21164 ( 0.00%) 179.36
quake 22 ( 0.00%) 2057 ( 0.00%) 93.50
cuseeme 2 ( 0.00%) 180 ( 0.00%) 90.00
other 5153000 ( 14.46%) 2865272727 ( 11.31%) 556.04
icmp 703602 ( 1.97%) 108770489 ( 0.43%) 154.59
ipip 362 ( 0.00%) 46712 ( 0.00%) 129.04
ipsec 1651 ( 0.00%) 286882 ( 0.00%) 173.76
ip6 72627 ( 0.20%) 18176610 ( 0.07%) 250.27
other 246169 ( 0.69%) 46496004 ( 0.18%) 188.88
frag 8233 ( 0.02%) 5583600 ( 0.02%) 678.20
ip6 49900 ( 0.14%) 18618316 ( 0.07%) 373.11
tcp6 16375 ( 0.05%) 11727126 ( 0.05%) 716.16
http(s) 263 ( 0.00%) 301286 ( 0.00%) 1145.57
http(c) 1575 ( 0.00%) 146121 ( 0.00%) 92.78
smtp 11885 ( 0.03%) 10955004 ( 0.04%) 921.75
imap 323 ( 0.00%) 38366 ( 0.00%) 118.78
ssh 5 ( 0.00%) 782 ( 0.00%) 156.40
dns 207 ( 0.00%) 50449 ( 0.00%) 243.71
bgp 125 ( 0.00%) 18479 ( 0.00%) 147.83
other 1992 ( 0.01%) 216639 ( 0.00%) 108.75
udp6 29236 ( 0.08%) 6251948 ( 0.02%) 213.84
dns 28925 ( 0.08%) 6197593 ( 0.02%) 214.26
other 311 ( 0.00%) 54355 ( 0.00%) 174.77
icmp6 4109 ( 0.01%) 496394 ( 0.00%) 120.81
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 150 ( 0.00%) 138768 ( 0.00%) 925.12
tcpdump file: 201005071400.dump.gz (860.88 MB)