Traffic Trace Info
DumpFile: 201005131400.dump
FileSize: 2610.64MB
Id: 201005131400
StartTime: Thu May 13 14:00:01 2010
EndTime: Thu May 13 14:15:01 2010
TotalTime: 899.88 seconds
TotalCapSize: 2047.71MB CapLen: 96 bytes
# of packets: 36891915 (22785.64MB)
AvgRate: 212.41Mbps stddev:19.11M
IP flow (unique src/dst pair) Information
# of flows: 970308 (avg. 38.02 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 3.3% 1.8% 1.3% 1.2% 1.1% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 503583
Top 10 bandwidth usage (bytes/total in %):
12.3% 9.8% 9.1% 4.5% 3.9% 3.7% 3.4% 3.4% 2.8% 2.3%
# of IPv6 addresses: 1065
Top 10 bandwidth usage (bytes/total in %):
20.0% 14.5% 14.3% 7.8% 5.7% 5.0% 4.5% 4.3% 4.1% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201005131400.pktlen.png)
detailed numbers
[ 32- 63]: 6668329
[ 64- 127]: 9796928
[ 128- 255]: 2584003
[ 256- 511]: 2316569
[ 512- 1023]: 1011820
[ 1024- 2047]: 14514266
Protocol Breakdown
![[protocol breakdown chart]](201005131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36891915 (100.00%) 23892471662 (100.00%) 647.63
ip 36845152 ( 99.87%) 23882345751 ( 99.96%) 648.18
tcp 23187253 ( 62.85%) 17239770176 ( 72.16%) 743.50
http(s) 8683423 ( 23.54%) 11564726901 ( 48.40%) 1331.82
http(c) 7622815 ( 20.66%) 1582591665 ( 6.62%) 207.61
squid 843418 ( 2.29%) 200311178 ( 0.84%) 237.50
smtp 348705 ( 0.95%) 123888630 ( 0.52%) 355.28
nntp 11 ( 0.00%) 703 ( 0.00%) 63.91
ftp 37897 ( 0.10%) 3474484 ( 0.01%) 91.68
pop3 18824 ( 0.05%) 8181475 ( 0.03%) 434.63
imap 5714 ( 0.02%) 2950277 ( 0.01%) 516.32
telnet 11920 ( 0.03%) 912879 ( 0.00%) 76.58
ssh 93618 ( 0.25%) 16518243 ( 0.07%) 176.44
dns 22871 ( 0.06%) 1624406 ( 0.01%) 71.02
bgp 166 ( 0.00%) 60441 ( 0.00%) 364.10
napster 145 ( 0.00%) 45803 ( 0.00%) 315.88
realaud 3 ( 0.00%) 186 ( 0.00%) 62.00
rtsp 214677 ( 0.58%) 13580415 ( 0.06%) 63.26
icecast 53493 ( 0.14%) 39882171 ( 0.17%) 745.56
hotline 18 ( 0.00%) 2183 ( 0.00%) 121.28
other 5229521 ( 14.18%) 3681016196 ( 15.41%) 703.89
udp 8915217 ( 24.17%) 4150572305 ( 17.37%) 465.56
dns 807767 ( 2.19%) 140522324 ( 0.59%) 173.96
realaud 14431 ( 0.04%) 15208600 ( 0.06%) 1053.88
halflif 67 ( 0.00%) 6798 ( 0.00%) 101.46
starcra 121 ( 0.00%) 16115 ( 0.00%) 133.18
everque 588 ( 0.00%) 107039 ( 0.00%) 182.04
unreal 1586 ( 0.00%) 246229 ( 0.00%) 155.25
quake 25 ( 0.00%) 3295 ( 0.00%) 131.80
cuseeme 349 ( 0.00%) 71031 ( 0.00%) 203.53
other 8089592 ( 21.93%) 3994170356 ( 16.72%) 493.74
icmp 568031 ( 1.54%) 79117696 ( 0.33%) 139.28
ipip 351 ( 0.00%) 42878 ( 0.00%) 122.16
ipsec 154356 ( 0.42%) 19383688 ( 0.08%) 125.58
ip6 3990636 ( 10.82%) 2366027286 ( 9.90%) 592.89
other 29308 ( 0.08%) 27431722 ( 0.11%) 935.98
frag 5211 ( 0.01%) 3631328 ( 0.02%) 696.86
ip6 46763 ( 0.13%) 10125911 ( 0.04%) 216.54
tcp6 10988 ( 0.03%) 3213884 ( 0.01%) 292.49
http(s) 1365 ( 0.00%) 1821902 ( 0.01%) 1334.73
http(c) 1415 ( 0.00%) 140269 ( 0.00%) 99.13
smtp 256 ( 0.00%) 71373 ( 0.00%) 278.80
imap 455 ( 0.00%) 53510 ( 0.00%) 117.60
ssh 1848 ( 0.01%) 333872 ( 0.00%) 180.67
dns 96 ( 0.00%) 30103 ( 0.00%) 313.57
bgp 127 ( 0.00%) 19517 ( 0.00%) 153.68
other 5426 ( 0.01%) 743338 ( 0.00%) 137.00
udp6 30654 ( 0.08%) 6112917 ( 0.03%) 199.42
dns 29984 ( 0.08%) 5987802 ( 0.03%) 199.70
cuseeme 1 ( 0.00%) 112 ( 0.00%) 112.00
other 669 ( 0.00%) 125003 ( 0.00%) 186.85
icmp6 4949 ( 0.01%) 652450 ( 0.00%) 131.83
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 142 ( 0.00%) 142580 ( 0.00%) 1004.08
tcpdump file: 201005131400.dump.gz (946.63 MB)