Traffic Trace Info
DumpFile: 201005171400.dump
FileSize: 2640.13MB
Id: 201005171400
StartTime: Mon May 17 14:00:01 2010
EndTime: Mon May 17 14:15:01 2010
TotalTime: 899.93 seconds
TotalCapSize: -2024.67MB CapLen: 96 bytes
# of packets: 37276355 (23073.89MB)
AvgRate: 215.09Mbps stddev:23.17M
IP flow (unique src/dst pair) Information
# of flows: 1380445 (avg. 27.00 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 2.2% 1.9% 1.3% 1.2% 1.0% 1.0% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 754118
Top 10 bandwidth usage (bytes/total in %):
14.6% 9.6% 8.9% 6.4% 4.8% 4.6% 4.4% 3.0% 3.0% 2.2%
# of IPv6 addresses: 1121
Top 10 bandwidth usage (bytes/total in %):
27.7% 15.3% 12.7% 6.9% 6.6% 4.4% 3.6% 3.3% 3.1% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201005171400.pktlen.png)
detailed numbers
[ 32- 63]: 7022864
[ 64- 127]: 9734208
[ 128- 255]: 2394510
[ 256- 511]: 2414473
[ 512- 1023]: 964239
[ 1024- 2047]: 14746061
Protocol Breakdown
![[protocol breakdown chart]](201005171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37276355 (100.00%) 24194728753 (100.00%) 649.06
ip 37225045 ( 99.86%) 24182072628 ( 99.95%) 649.62
tcp 23612390 ( 63.34%) 17223815641 ( 71.19%) 729.44
http(s) 9857402 ( 26.44%) 13173244932 ( 54.45%) 1336.38
http(c) 7066887 ( 18.96%) 850272831 ( 3.51%) 120.32
squid 506779 ( 1.36%) 164898411 ( 0.68%) 325.39
smtp 349563 ( 0.94%) 136803456 ( 0.57%) 391.36
ftp 22531 ( 0.06%) 4945547 ( 0.02%) 219.50
pop3 47779 ( 0.13%) 39024425 ( 0.16%) 816.77
imap 2106 ( 0.01%) 620061 ( 0.00%) 294.43
telnet 5990 ( 0.02%) 469264 ( 0.00%) 78.34
ssh 17920 ( 0.05%) 2687675 ( 0.01%) 149.98
dns 22916 ( 0.06%) 1588364 ( 0.01%) 69.31
bgp 197 ( 0.00%) 78985 ( 0.00%) 400.94
napster 25 ( 0.00%) 3769 ( 0.00%) 150.76
realaud 38 ( 0.00%) 8131 ( 0.00%) 213.97
rtsp 283484 ( 0.76%) 144498350 ( 0.60%) 509.72
icecast 13651 ( 0.04%) 951681 ( 0.00%) 69.72
hotline 5 ( 0.00%) 1320 ( 0.00%) 264.00
other 5415114 ( 14.53%) 2703718259 ( 11.17%) 499.29
udp 8936666 ( 23.97%) 4569231630 ( 18.89%) 511.29
dns 765943 ( 2.05%) 131947102 ( 0.55%) 172.27
realaud 3221 ( 0.01%) 3371926 ( 0.01%) 1046.86
halflif 61 ( 0.00%) 7331 ( 0.00%) 120.18
starcra 197 ( 0.00%) 27324 ( 0.00%) 138.70
everque 10368 ( 0.03%) 1139101 ( 0.00%) 109.87
unreal 89 ( 0.00%) 15258 ( 0.00%) 171.44
quake 20 ( 0.00%) 2232 ( 0.00%) 111.60
cuseeme 9 ( 0.00%) 874 ( 0.00%) 97.11
other 8156508 ( 21.88%) 4432589382 ( 18.32%) 543.44
icmp 796118 ( 2.14%) 136797368 ( 0.57%) 171.83
ipip 339 ( 0.00%) 42198 ( 0.00%) 124.48
ipsec 8001 ( 0.02%) 1363022 ( 0.01%) 170.36
ip6 3747812 ( 10.05%) 2154612133 ( 8.91%) 574.90
other 123719 ( 0.33%) 96210636 ( 0.40%) 777.65
frag 1531 ( 0.00%) 1473398 ( 0.01%) 962.38
ip6 51310 ( 0.14%) 12656125 ( 0.05%) 246.66
tcp6 9060 ( 0.02%) 3559454 ( 0.01%) 392.88
http(s) 2049 ( 0.01%) 2529878 ( 0.01%) 1234.69
http(c) 1736 ( 0.00%) 169659 ( 0.00%) 97.73
smtp 168 ( 0.00%) 69925 ( 0.00%) 416.22
ftp 1 ( 0.00%) 74 ( 0.00%) 74.00
imap 324 ( 0.00%) 38461 ( 0.00%) 118.71
ssh 850 ( 0.00%) 205560 ( 0.00%) 241.84
dns 314 ( 0.00%) 63719 ( 0.00%) 202.93
bgp 136 ( 0.00%) 20574 ( 0.00%) 151.28
other 3482 ( 0.01%) 461604 ( 0.00%) 132.57
udp6 36706 ( 0.10%) 8192412 ( 0.03%) 223.19
dns 36188 ( 0.10%) 8099451 ( 0.03%) 223.82
other 518 ( 0.00%) 92961 ( 0.00%) 179.46
icmp6 5404 ( 0.01%) 800530 ( 0.00%) 148.14
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 110 ( 0.00%) 99649 ( 0.00%) 905.90
tcpdump file: 201005171400.dump.gz (946.64 MB)