Traffic Trace Info
DumpFile: 201005101400.dump
FileSize: 2704.14MB
Id: 201005101400
StartTime: Mon May 10 14:00:01 2010
EndTime: Mon May 10 14:15:01 2010
TotalTime: 900.03 seconds
TotalCapSize: -1978.55MB CapLen: 96 bytes
# of packets: 38448804 (25824.14MB)
AvgRate: 240.71Mbps stddev:51.11M
IP flow (unique src/dst pair) Information
# of flows: 1050657 (avg. 36.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.1% 6.1% 5.9% 1.5% 1.1% 1.0% 1.0% 1.0% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 590383
Top 10 bandwidth usage (bytes/total in %):
21.9% 12.4% 9.2% 6.2% 6.1% 5.9% 3.8% 3.2% 1.9% 1.8%
# of IPv6 addresses: 1087
Top 10 bandwidth usage (bytes/total in %):
19.2% 15.3% 10.1% 10.0% 8.8% 6.8% 5.4% 5.2% 4.5% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201005101400.pktlen.png)
detailed numbers
[ 32- 63]: 5969715
[ 64- 127]: 9754238
[ 128- 255]: 2766443
[ 256- 511]: 2179597
[ 512- 1023]: 1046286
[ 1024- 2047]: 16732525
Protocol Breakdown
![[protocol breakdown chart]](201005101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38448804 (100.00%) 27078578088 (100.00%) 704.28
ip 38407171 ( 99.89%) 27068783186 ( 99.96%) 704.78
tcp 24152517 ( 62.82%) 19765031621 ( 72.99%) 818.34
http(s) 11025654 ( 28.68%) 14801111621 ( 54.66%) 1342.42
http(c) 6600502 ( 17.17%) 1247082024 ( 4.61%) 188.94
squid 357077 ( 0.93%) 107860019 ( 0.40%) 302.06
smtp 338001 ( 0.88%) 78644151 ( 0.29%) 232.67
nntp 6 ( 0.00%) 368 ( 0.00%) 61.33
ftp 21379 ( 0.06%) 2731301 ( 0.01%) 127.76
pop3 32161 ( 0.08%) 14488660 ( 0.05%) 450.50
imap 2416 ( 0.01%) 448600 ( 0.00%) 185.68
telnet 3749 ( 0.01%) 314385 ( 0.00%) 83.86
ssh 158906 ( 0.41%) 13736736 ( 0.05%) 86.45
dns 20905 ( 0.05%) 1493186 ( 0.01%) 71.43
bgp 143 ( 0.00%) 49693 ( 0.00%) 347.50
napster 17 ( 0.00%) 1978 ( 0.00%) 116.35
realaud 16 ( 0.00%) 1839 ( 0.00%) 114.94
rtsp 20017 ( 0.05%) 15895611 ( 0.06%) 794.11
icecast 70765 ( 0.18%) 59548624 ( 0.22%) 841.50
hotline 17 ( 0.00%) 1256 ( 0.00%) 73.88
other 5500780 ( 14.31%) 3421621209 ( 12.64%) 622.02
udp 9071475 ( 23.59%) 4557822969 ( 16.83%) 502.43
dns 746726 ( 1.94%) 129030537 ( 0.48%) 172.80
realaud 5045 ( 0.01%) 3481525 ( 0.01%) 690.09
halflif 67 ( 0.00%) 7279 ( 0.00%) 108.64
starcra 115 ( 0.00%) 14302 ( 0.00%) 124.37
everque 1199 ( 0.00%) 179539 ( 0.00%) 149.74
unreal 109 ( 0.00%) 19047 ( 0.00%) 174.74
quake 52 ( 0.00%) 7673 ( 0.00%) 147.56
cuseeme 283 ( 0.00%) 50602 ( 0.00%) 178.81
other 8315329 ( 21.63%) 4424719377 ( 16.34%) 532.12
icmp 381691 ( 0.99%) 31559711 ( 0.12%) 82.68
ipip 353 ( 0.00%) 42980 ( 0.00%) 121.76
ipsec 156788 ( 0.41%) 19674952 ( 0.07%) 125.49
ip6 4270108 ( 11.11%) 2507229239 ( 9.26%) 587.16
other 374239 ( 0.97%) 187421714 ( 0.69%) 500.81
frag 6715 ( 0.02%) 5448569 ( 0.02%) 811.40
ip6 41633 ( 0.11%) 9794902 ( 0.04%) 235.27
tcp6 7143 ( 0.02%) 2644928 ( 0.01%) 370.28
http(s) 1317 ( 0.00%) 1774695 ( 0.01%) 1347.53
http(c) 2125 ( 0.01%) 197584 ( 0.00%) 92.98
smtp 183 ( 0.00%) 55643 ( 0.00%) 304.06
imap 442 ( 0.00%) 51707 ( 0.00%) 116.98
ssh 1809 ( 0.00%) 357414 ( 0.00%) 197.58
dns 193 ( 0.00%) 53838 ( 0.00%) 278.95
bgp 91 ( 0.00%) 10941 ( 0.00%) 120.23
other 983 ( 0.00%) 143106 ( 0.00%) 145.58
udp6 30211 ( 0.08%) 6559570 ( 0.02%) 217.13
dns 29859 ( 0.08%) 6516183 ( 0.02%) 218.23
other 352 ( 0.00%) 43387 ( 0.00%) 123.26
icmp6 4156 ( 0.01%) 504818 ( 0.00%) 121.47
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 93 ( 0.00%) 81506 ( 0.00%) 876.41
tcpdump file: 201005101400.dump.gz (976.64 MB)