Traffic Trace Info
DumpFile: 201005121400.dump
FileSize: 2514.24MB
Id: 201005121400
StartTime: Wed May 12 14:00:01 2010
EndTime: Wed May 12 14:15:00 2010
TotalTime: 899.55 seconds
TotalCapSize: 1958.68MB CapLen: 96 bytes
# of packets: 36408357 (21624.86MB)
AvgRate: 201.63Mbps stddev:16.60M
IP flow (unique src/dst pair) Information
# of flows: 911675 (avg. 39.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.0% 2.5% 1.6% 1.5% 1.4% 1.1% 0.9% 0.9% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 514231
Top 10 bandwidth usage (bytes/total in %):
17.7% 9.1% 6.1% 6.1% 3.4% 3.1% 3.0% 2.5% 2.5% 2.4%
# of IPv6 addresses: 1054
Top 10 bandwidth usage (bytes/total in %):
14.2% 9.1% 9.0% 8.9% 8.6% 6.8% 6.8% 6.5% 6.4% 5.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201005121400.pktlen.png)
detailed numbers
[ 32- 63]: 7155620
[ 64- 127]: 9445244
[ 128- 255]: 2744056
[ 256- 511]: 2270660
[ 512- 1023]: 1151726
[ 1024- 2047]: 13641051
Protocol Breakdown
![[protocol breakdown chart]](201005121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36408357 (100.00%) 22675304557 (100.00%) 622.80
ip 36363675 ( 99.88%) 22663750214 ( 99.95%) 623.25
tcp 20749316 ( 56.99%) 14287259101 ( 63.01%) 688.57
http(s) 7044932 ( 19.35%) 9096932611 ( 40.12%) 1291.27
http(c) 6290052 ( 17.28%) 1184752540 ( 5.22%) 188.35
squid 816761 ( 2.24%) 256389701 ( 1.13%) 313.91
smtp 459305 ( 1.26%) 228833802 ( 1.01%) 498.22
ftp 1436802 ( 3.95%) 1388948994 ( 6.13%) 966.69
pop3 25721 ( 0.07%) 13829395 ( 0.06%) 537.67
imap 7055 ( 0.02%) 3082889 ( 0.01%) 436.98
telnet 2834 ( 0.01%) 239862 ( 0.00%) 84.64
ssh 22921 ( 0.06%) 3506936 ( 0.02%) 153.00
dns 16787 ( 0.05%) 1274451 ( 0.01%) 75.92
bgp 162 ( 0.00%) 70773 ( 0.00%) 436.87
napster 50 ( 0.00%) 5311 ( 0.00%) 106.22
realaud 2159 ( 0.01%) 131240 ( 0.00%) 60.79
rtsp 102883 ( 0.28%) 29691655 ( 0.13%) 288.60
icecast 26336 ( 0.07%) 10713777 ( 0.05%) 406.81
hotline 6 ( 0.00%) 730 ( 0.00%) 121.67
other 4494547 ( 12.34%) 2068854254 ( 9.12%) 460.30
udp 11244936 ( 30.89%) 6177590368 ( 27.24%) 549.37
dns 843317 ( 2.32%) 148905757 ( 0.66%) 176.57
realaud 4106 ( 0.01%) 4500888 ( 0.02%) 1096.17
halflif 61 ( 0.00%) 6587 ( 0.00%) 107.98
starcra 104 ( 0.00%) 13409 ( 0.00%) 128.93
everque 1251 ( 0.00%) 207931 ( 0.00%) 166.21
unreal 14 ( 0.00%) 2047 ( 0.00%) 146.21
quake 28 ( 0.00%) 3283 ( 0.00%) 117.25
cuseeme 346 ( 0.00%) 64750 ( 0.00%) 187.14
other 10394863 ( 28.55%) 6023578852 ( 26.56%) 579.48
icmp 429640 ( 1.18%) 36592348 ( 0.16%) 85.17
ipip 326 ( 0.00%) 39744 ( 0.00%) 121.91
ipsec 154294 ( 0.42%) 19417136 ( 0.09%) 125.85
ip6 3597121 ( 9.88%) 2082354709 ( 9.18%) 578.89
other 188042 ( 0.52%) 60496808 ( 0.27%) 321.72
frag 3491 ( 0.01%) 2739604 ( 0.01%) 784.76
ip6 44682 ( 0.12%) 11554343 ( 0.05%) 258.59
tcp6 10210 ( 0.03%) 4481703 ( 0.02%) 438.95
http(s) 1235 ( 0.00%) 1600276 ( 0.01%) 1295.77
http(c) 1621 ( 0.00%) 182639 ( 0.00%) 112.67
smtp 299 ( 0.00%) 147571 ( 0.00%) 493.55
imap 405 ( 0.00%) 48624 ( 0.00%) 120.06
ssh 1910 ( 0.01%) 348692 ( 0.00%) 182.56
dns 183 ( 0.00%) 44181 ( 0.00%) 241.43
bgp 126 ( 0.00%) 20285 ( 0.00%) 160.99
other 4431 ( 0.01%) 2089435 ( 0.01%) 471.55
udp6 29196 ( 0.08%) 6284333 ( 0.03%) 215.25
dns 28231 ( 0.08%) 6132732 ( 0.03%) 217.23
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 964 ( 0.00%) 151497 ( 0.00%) 157.15
icmp6 5121 ( 0.01%) 666176 ( 0.00%) 130.09
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 124 ( 0.00%) 117915 ( 0.00%) 950.93
tcpdump file: 201005121400.dump.gz (908.33 MB)