Traffic Trace Info
DumpFile: 201005141400.dump
FileSize: 2654.16MB
Id: 201005141400
StartTime: Fri May 14 14:00:01 2010
EndTime: Fri May 14 14:15:01 2010
TotalTime: 899.65 seconds
TotalCapSize: -2009.87MB CapLen: 96 bytes
# of packets: 37225357 (22929.45MB)
AvgRate: 213.78Mbps stddev:23.12M
IP flow (unique src/dst pair) Information
# of flows: 1530960 (avg. 24.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.2% 1.1% 1.1% 1.1% 1.0% 1.0% 0.9% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 814220
Top 10 bandwidth usage (bytes/total in %):
15.4% 9.7% 5.3% 4.5% 4.4% 3.5% 3.1% 2.8% 1.8% 1.5%
# of IPv6 addresses: 1061
Top 10 bandwidth usage (bytes/total in %):
19.6% 10.6% 10.6% 9.8% 6.1% 6.0% 5.7% 3.3% 3.1% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201005141400.pktlen.png)
detailed numbers
[ 32- 63]: 6121818
[ 64- 127]: 10225163
[ 128- 255]: 2708669
[ 256- 511]: 2607715
[ 512- 1023]: 1000809
[ 1024- 2047]: 14561183
Protocol Breakdown
![[protocol breakdown chart]](201005141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37225357 (100.00%) 24043274965 (100.00%) 645.88
ip 37184979 ( 99.89%) 24034452410 ( 99.96%) 646.35
tcp 22594941 ( 60.70%) 16822921180 ( 69.97%) 744.54
http(s) 9739257 ( 26.16%) 13107465501 ( 54.52%) 1345.84
http(c) 7357422 ( 19.76%) 1163747288 ( 4.84%) 158.17
squid 1083448 ( 2.91%) 275955012 ( 1.15%) 254.70
smtp 433611 ( 1.16%) 225002711 ( 0.94%) 518.90
nntp 48 ( 0.00%) 3394 ( 0.00%) 70.71
ftp 68671 ( 0.18%) 6202265 ( 0.03%) 90.32
pop3 26983 ( 0.07%) 18797631 ( 0.08%) 696.65
imap 5087 ( 0.01%) 3238190 ( 0.01%) 636.56
telnet 5835 ( 0.02%) 454588 ( 0.00%) 77.91
ssh 36790 ( 0.10%) 6911442 ( 0.03%) 187.86
dns 21724 ( 0.06%) 1501106 ( 0.01%) 69.10
bgp 195 ( 0.00%) 74543 ( 0.00%) 382.27
napster 169 ( 0.00%) 14638 ( 0.00%) 86.62
realaud 36 ( 0.00%) 5730 ( 0.00%) 159.17
rtsp 86661 ( 0.23%) 10105968 ( 0.04%) 116.61
icecast 36898 ( 0.10%) 23839283 ( 0.10%) 646.09
hotline 92 ( 0.00%) 7561 ( 0.00%) 82.18
other 3692014 ( 9.92%) 1979594329 ( 8.23%) 536.18
udp 9572471 ( 25.71%) 4645438024 ( 19.32%) 485.29
dns 793034 ( 2.13%) 140871227 ( 0.59%) 177.64
rip 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 3245 ( 0.01%) 3373783 ( 0.01%) 1039.69
halflif 69 ( 0.00%) 8765 ( 0.00%) 127.03
starcra 150 ( 0.00%) 20688 ( 0.00%) 137.92
everque 829 ( 0.00%) 139880 ( 0.00%) 168.73
unreal 86 ( 0.00%) 13686 ( 0.00%) 159.14
quake 21 ( 0.00%) 2656 ( 0.00%) 126.48
cuseeme 5 ( 0.00%) 526 ( 0.00%) 105.20
other 8774709 ( 23.57%) 4500803063 ( 18.72%) 512.93
icmp 889557 ( 2.39%) 167302474 ( 0.70%) 188.07
ipip 356 ( 0.00%) 44230 ( 0.00%) 124.24
ipsec 3694 ( 0.01%) 520980 ( 0.00%) 141.03
ip6 4122714 ( 11.08%) 2398041846 ( 9.97%) 581.67
other 1246 ( 0.00%) 183676 ( 0.00%) 147.41
frag 1868 ( 0.01%) 1949785 ( 0.01%) 1043.78
ip6 40378 ( 0.11%) 8822555 ( 0.04%) 218.50
tcp6 8534 ( 0.02%) 1717804 ( 0.01%) 201.29
http(s) 221 ( 0.00%) 229426 ( 0.00%) 1038.13
http(c) 1450 ( 0.00%) 143742 ( 0.00%) 99.13
smtp 523 ( 0.00%) 237626 ( 0.00%) 454.35
ftp 35 ( 0.00%) 3227 ( 0.00%) 92.20
imap 343 ( 0.00%) 40385 ( 0.00%) 117.74
ssh 1504 ( 0.00%) 272048 ( 0.00%) 180.88
dns 216 ( 0.00%) 53526 ( 0.00%) 247.81
bgp 132 ( 0.00%) 23276 ( 0.00%) 176.33
other 4110 ( 0.01%) 714548 ( 0.00%) 173.86
udp6 25893 ( 0.07%) 5657247 ( 0.02%) 218.49
dns 25131 ( 0.07%) 5393450 ( 0.02%) 214.61
other 762 ( 0.00%) 263797 ( 0.00%) 346.19
icmp6 4786 ( 0.01%) 634802 ( 0.00%) 132.64
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1135 ( 0.00%) 808622 ( 0.00%) 712.44
tcpdump file: 201005141400.dump.gz (964.88 MB)