Traffic Trace Info
DumpFile: 201005091400.dump
FileSize: 1996.28MB
Id: 201005091400
StartTime: Sun May 9 14:00:01 2010
EndTime: Sun May 9 14:15:01 2010
TotalTime: 899.94 seconds
TotalCapSize: 1567.68MB CapLen: 96 bytes
# of packets: 28088147 (16322.57MB)
AvgRate: 152.13Mbps stddev:13.25M
IP flow (unique src/dst pair) Information
# of flows: 739022 (avg. 38.01 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 1.8% 1.2% 1.1% 1.1% 0.7% 0.7% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 425719
Top 10 bandwidth usage (bytes/total in %):
17.7% 13.1% 4.0% 3.8% 3.1% 2.9% 2.5% 2.2% 2.1% 2.1%
# of IPv6 addresses: 1043
Top 10 bandwidth usage (bytes/total in %):
33.9% 11.2% 7.8% 7.4% 6.0% 6.0% 5.7% 4.9% 4.8% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201005091400.pktlen.png)
detailed numbers
[ 32- 63]: 3928031
[ 64- 127]: 9153509
[ 128- 255]: 2205414
[ 256- 511]: 1760510
[ 512- 1023]: 792299
[ 1024- 2047]: 10248384
Protocol Breakdown
![[protocol breakdown chart]](201005091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28088147 (100.00%) 17115453146 (100.00%) 609.35
ip 28056339 ( 99.89%) 17109911623 ( 99.97%) 609.84
tcp 15450752 ( 55.01%) 10883265651 ( 63.59%) 704.38
http(s) 5781148 ( 20.58%) 7772362783 ( 45.41%) 1344.43
http(c) 4584128 ( 16.32%) 493336438 ( 2.88%) 107.62
squid 330406 ( 1.18%) 78268962 ( 0.46%) 236.89
smtp 198619 ( 0.71%) 32666550 ( 0.19%) 164.47
nntp 6 ( 0.00%) 396 ( 0.00%) 66.00
ftp 16474 ( 0.06%) 1929678 ( 0.01%) 117.13
pop3 13126 ( 0.05%) 9951277 ( 0.06%) 758.13
imap 1245 ( 0.00%) 216749 ( 0.00%) 174.10
telnet 6512 ( 0.02%) 527914 ( 0.00%) 81.07
ssh 428627 ( 1.53%) 64476735 ( 0.38%) 150.43
dns 20715 ( 0.07%) 1468193 ( 0.01%) 70.88
bgp 133 ( 0.00%) 48430 ( 0.00%) 364.14
napster 311 ( 0.00%) 59291 ( 0.00%) 190.65
realaud 20 ( 0.00%) 1222 ( 0.00%) 61.10
rtsp 5733 ( 0.02%) 4278053 ( 0.02%) 746.22
icecast 18372 ( 0.07%) 8425777 ( 0.05%) 458.62
other 4045171 ( 14.40%) 2415246843 ( 14.11%) 597.07
udp 8136728 ( 28.97%) 3868740888 ( 22.60%) 475.47
dns 490937 ( 1.75%) 86686036 ( 0.51%) 176.57
realaud 3848 ( 0.01%) 2349532 ( 0.01%) 610.59
halflif 53 ( 0.00%) 6819 ( 0.00%) 128.66
starcra 110 ( 0.00%) 16828 ( 0.00%) 152.98
everque 6040 ( 0.02%) 511509 ( 0.00%) 84.69
unreal 37 ( 0.00%) 6450 ( 0.00%) 174.32
quake 51 ( 0.00%) 12202 ( 0.00%) 239.25
cuseeme 1 ( 0.00%) 97 ( 0.00%) 97.00
other 7635362 ( 27.18%) 3778971478 ( 22.08%) 494.93
icmp 336037 ( 1.20%) 27733103 ( 0.16%) 82.53
ipip 348 ( 0.00%) 42158 ( 0.00%) 121.14
ipsec 211105 ( 0.75%) 59194894 ( 0.35%) 280.40
ip6 3905879 ( 13.91%) 2252408361 ( 13.16%) 576.67
other 15490 ( 0.06%) 18526568 ( 0.11%) 1196.03
frag 8465 ( 0.03%) 6664250 ( 0.04%) 787.27
ip6 31808 ( 0.11%) 5541523 ( 0.03%) 174.22
tcp6 5024 ( 0.02%) 736127 ( 0.00%) 146.52
http(s) 65 ( 0.00%) 29258 ( 0.00%) 450.12
http(c) 1258 ( 0.00%) 131250 ( 0.00%) 104.33
smtp 70 ( 0.00%) 8773 ( 0.00%) 125.33
imap 355 ( 0.00%) 42739 ( 0.00%) 120.39
ssh 1844 ( 0.01%) 333560 ( 0.00%) 180.89
dns 78 ( 0.00%) 21807 ( 0.00%) 279.58
bgp 118 ( 0.00%) 15838 ( 0.00%) 134.22
other 1236 ( 0.00%) 152902 ( 0.00%) 123.71
udp6 22561 ( 0.08%) 4258290 ( 0.02%) 188.75
dns 22283 ( 0.08%) 4202619 ( 0.02%) 188.60
other 278 ( 0.00%) 55671 ( 0.00%) 200.26
icmp6 4136 ( 0.01%) 495266 ( 0.00%) 119.75
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 57 ( 0.00%) 47760 ( 0.00%) 837.89
tcpdump file: 201005091400.dump.gz (733.66 MB)