Traffic Trace Info
DumpFile: 201005081400.dump
FileSize: 2855.71MB
Id: 201005081400
StartTime: Sat May 8 14:00:01 2010
EndTime: Sat May 8 14:15:00 2010
TotalTime: 899.39 seconds
TotalCapSize: -1846.87MB CapLen: 96 bytes
# of packets: 39752555 (25367.51MB)
AvgRate: 236.56Mbps stddev:23.75M
IP flow (unique src/dst pair) Information
# of flows: 831862 (avg. 47.79 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.8% 3.7% 2.9% 2.4% 2.1% 1.9% 1.8% 1.2% 1.2% 1.0%
IP address Information
# of IPv4 addresses: 477213
Top 10 bandwidth usage (bytes/total in %):
15.3% 13.3% 13.3% 12.1% 6.5% 5.2% 3.8% 3.8% 3.0% 2.5%
# of IPv6 addresses: 1128
Top 10 bandwidth usage (bytes/total in %):
29.2% 9.2% 6.4% 5.9% 5.4% 5.1% 5.1% 3.9% 3.6% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201005081400.pktlen.png)
detailed numbers
[ 32- 63]: 4771968
[ 64- 127]: 13151460
[ 128- 255]: 2512830
[ 256- 511]: 1909419
[ 512- 1023]: 979189
[ 1024- 2047]: 16427689
Protocol Breakdown
![[protocol breakdown chart]](201005081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39752555 (100.00%) 26599761637 (100.00%) 669.13
ip 39717725 ( 99.91%) 26593341357 ( 99.98%) 669.56
tcp 26041586 ( 65.51%) 19924817193 ( 74.91%) 765.12
http(s) 8259306 ( 20.78%) 11404412871 ( 42.87%) 1380.80
http(c) 5789410 ( 14.56%) 630129860 ( 2.37%) 108.84
squid 689280 ( 1.73%) 317528926 ( 1.19%) 460.67
smtp 226325 ( 0.57%) 53536736 ( 0.20%) 236.55
ftp 1067443 ( 2.69%) 1015601141 ( 3.82%) 951.43
pop3 16209 ( 0.04%) 13409091 ( 0.05%) 827.26
imap 2799 ( 0.01%) 1015775 ( 0.00%) 362.91
telnet 7804 ( 0.02%) 594926 ( 0.00%) 76.23
ssh 1367993 ( 3.44%) 207801352 ( 0.78%) 151.90
dns 23602 ( 0.06%) 1638330 ( 0.01%) 69.41
bgp 221 ( 0.00%) 113078 ( 0.00%) 511.67
napster 83 ( 0.00%) 13761 ( 0.00%) 165.80
realaud 25 ( 0.00%) 4099 ( 0.00%) 163.96
rtsp 251027 ( 0.63%) 130751376 ( 0.49%) 520.87
icecast 21064 ( 0.05%) 12718059 ( 0.05%) 603.78
hotline 1 ( 0.00%) 66 ( 0.00%) 66.00
other 8318984 ( 20.93%) 6135547146 ( 23.07%) 737.54
udp 9769147 ( 24.57%) 4863608910 ( 18.28%) 497.85
dns 615412 ( 1.55%) 118313382 ( 0.44%) 192.25
rip 1 ( 0.00%) 66 ( 0.00%) 66.00
realaud 2323 ( 0.01%) 589016 ( 0.00%) 253.56
halflif 159 ( 0.00%) 11913 ( 0.00%) 74.92
starcra 525 ( 0.00%) 74773 ( 0.00%) 142.42
everque 3014 ( 0.01%) 2356601 ( 0.01%) 781.88
unreal 91 ( 0.00%) 18188 ( 0.00%) 199.87
quake 44 ( 0.00%) 10418 ( 0.00%) 236.77
cuseeme 1 ( 0.00%) 73 ( 0.00%) 73.00
other 9147206 ( 23.01%) 4742009560 ( 17.83%) 518.41
icmp 454110 ( 1.14%) 38080986 ( 0.14%) 83.86
ipip 388 ( 0.00%) 49164 ( 0.00%) 126.71
ipsec 155286 ( 0.39%) 19488052 ( 0.07%) 125.50
ip6 3282607 ( 8.26%) 1743958253 ( 6.56%) 531.27
other 14601 ( 0.04%) 3338799 ( 0.01%) 228.67
frag 1886 ( 0.00%) 1908611 ( 0.01%) 1011.99
ip6 34830 ( 0.09%) 6420280 ( 0.02%) 184.33
tcp6 6321 ( 0.02%) 940749 ( 0.00%) 148.83
http(s) 47 ( 0.00%) 24962 ( 0.00%) 531.11
http(c) 1361 ( 0.00%) 134531 ( 0.00%) 98.85
smtp 193 ( 0.00%) 49993 ( 0.00%) 259.03
imap 376 ( 0.00%) 44981 ( 0.00%) 119.63
ssh 1808 ( 0.00%) 328608 ( 0.00%) 181.75
dns 120 ( 0.00%) 41618 ( 0.00%) 346.82
bgp 108 ( 0.00%) 15575 ( 0.00%) 144.21
other 2308 ( 0.01%) 300481 ( 0.00%) 130.19
udp6 24006 ( 0.06%) 4825416 ( 0.02%) 201.01
dns 23129 ( 0.06%) 4697493 ( 0.02%) 203.10
realaud 1 ( 0.00%) 168 ( 0.00%) 168.00
other 876 ( 0.00%) 127755 ( 0.00%) 145.84
icmp6 4362 ( 0.01%) 537024 ( 0.00%) 123.11
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 110 ( 0.00%) 112875 ( 0.00%) 1026.14
tcpdump file: 201005081400.dump.gz (1014.40 MB)