Traffic Trace Info
DumpFile: 201005161400.dump
FileSize: 2054.78MB
Id: 201005161400
StartTime: Sun May 16 14:00:00 2010
EndTime: Sun May 16 14:15:01 2010
TotalTime: 900.45 seconds
TotalCapSize: 1605.00MB CapLen: 96 bytes
# of packets: 29476349 (18536.60MB)
AvgRate: 172.66Mbps stddev:12.31M
IP flow (unique src/dst pair) Information
# of flows: 962326 (avg. 30.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 3.4% 2.6% 1.2% 1.1% 1.1% 1.1% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 516594
Top 10 bandwidth usage (bytes/total in %):
16.9% 9.8% 7.0% 5.6% 4.1% 4.1% 3.9% 3.5% 3.3% 2.6%
# of IPv6 addresses: 944
Top 10 bandwidth usage (bytes/total in %):
39.2% 6.4% 4.9% 4.9% 4.6% 4.4% 4.4% 4.4% 4.4% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201005161400.pktlen.png)
detailed numbers
[ 32- 63]: 4401425
[ 64- 127]: 7977368
[ 128- 255]: 2147834
[ 256- 511]: 2349659
[ 512- 1023]: 814832
[ 1024- 2047]: 11785231
Protocol Breakdown
![[protocol breakdown chart]](201005161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29476349 (100.00%) 19437033247 (100.00%) 659.41
ip 29439829 ( 99.88%) 19430295278 ( 99.97%) 660.00
tcp 15216202 ( 51.62%) 11996017757 ( 61.72%) 788.37
http(s) 6293464 ( 21.35%) 8653790542 ( 44.52%) 1375.04
http(c) 4069015 ( 13.80%) 906744020 ( 4.67%) 222.84
squid 433412 ( 1.47%) 172940718 ( 0.89%) 399.02
smtp 165230 ( 0.56%) 27558134 ( 0.14%) 166.79
ftp 22192 ( 0.08%) 7146519 ( 0.04%) 322.03
pop3 7918 ( 0.03%) 5035612 ( 0.03%) 635.97
imap 953 ( 0.00%) 435639 ( 0.00%) 457.12
telnet 13078 ( 0.04%) 987777 ( 0.01%) 75.53
ssh 244946 ( 0.83%) 33433694 ( 0.17%) 136.49
dns 21658 ( 0.07%) 1470992 ( 0.01%) 67.92
bgp 138 ( 0.00%) 46026 ( 0.00%) 333.52
napster 87 ( 0.00%) 7455 ( 0.00%) 85.69
realaud 10 ( 0.00%) 1005 ( 0.00%) 100.50
rtsp 56959 ( 0.19%) 10907709 ( 0.06%) 191.50
icecast 12390 ( 0.04%) 822155 ( 0.00%) 66.36
hotline 8 ( 0.00%) 1078 ( 0.00%) 134.75
other 3874740 ( 13.15%) 2174688442 ( 11.19%) 561.25
udp 9724946 ( 32.99%) 5336827033 ( 27.46%) 548.78
dns 559142 ( 1.90%) 101579592 ( 0.52%) 181.67
realaud 5890 ( 0.02%) 5352581 ( 0.03%) 908.76
halflif 61 ( 0.00%) 8088 ( 0.00%) 132.59
starcra 185 ( 0.00%) 31353 ( 0.00%) 169.48
everque 834 ( 0.00%) 161614 ( 0.00%) 193.78
unreal 74 ( 0.00%) 12364 ( 0.00%) 167.08
quake 23 ( 0.00%) 2255 ( 0.00%) 98.04
cuseeme 1 ( 0.00%) 105 ( 0.00%) 105.00
other 9158409 ( 31.07%) 5229512406 ( 26.90%) 571.01
icmp 714974 ( 2.43%) 121098041 ( 0.62%) 169.37
ipip 351 ( 0.00%) 41682 ( 0.00%) 118.75
ipsec 1161 ( 0.00%) 200214 ( 0.00%) 172.45
ip6 3506737 ( 11.90%) 1947628041 ( 10.02%) 555.40
other 275458 ( 0.93%) 28482510 ( 0.15%) 103.40
frag 1766 ( 0.01%) 1737705 ( 0.01%) 983.98
ip6 36520 ( 0.12%) 6737969 ( 0.03%) 184.50
tcp6 7957 ( 0.03%) 1188688 ( 0.01%) 149.39
http(s) 45 ( 0.00%) 15228 ( 0.00%) 338.40
http(c) 1359 ( 0.00%) 131593 ( 0.00%) 96.83
smtp 240 ( 0.00%) 71881 ( 0.00%) 299.50
imap 348 ( 0.00%) 41036 ( 0.00%) 117.92
ssh 1813 ( 0.01%) 329262 ( 0.00%) 181.61
dns 200 ( 0.00%) 27321 ( 0.00%) 136.60
bgp 130 ( 0.00%) 20599 ( 0.00%) 158.45
other 3822 ( 0.01%) 551768 ( 0.00%) 144.37
udp6 23746 ( 0.08%) 4864284 ( 0.03%) 204.85
dns 23188 ( 0.08%) 4721965 ( 0.02%) 203.64
other 558 ( 0.00%) 142319 ( 0.00%) 255.05
icmp6 4762 ( 0.02%) 656691 ( 0.00%) 137.90
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 25 ( 0.00%) 24226 ( 0.00%) 969.04
tcpdump file: 201005161400.dump.gz (752.18 MB)