Traffic Trace Info
DumpFile: 201005221400.dump
FileSize: 1743.46MB
Id: 201005221400
StartTime: Sat May 22 14:00:01 2010
EndTime: Sat May 22 14:15:00 2010
TotalTime: 899.81 seconds
TotalCapSize: 1369.23MB CapLen: 96 bytes
# of packets: 24522736 (15055.91MB)
AvgRate: 140.36Mbps stddev:23.00M
IP flow (unique src/dst pair) Information
# of flows: 776975 (avg. 31.56 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 2.0% 1.8% 1.5% 1.5% 1.0% 1.0% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 482692
Top 10 bandwidth usage (bytes/total in %):
18.7% 11.5% 4.0% 3.9% 3.5% 3.4% 3.4% 3.3% 3.1% 2.0%
# of IPv6 addresses: 915
Top 10 bandwidth usage (bytes/total in %):
17.2% 17.2% 14.5% 13.4% 10.4% 4.4% 3.4% 3.2% 2.7% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201005221400.pktlen.png)
detailed numbers
[ 32- 63]: 3469510
[ 64- 127]: 7288268
[ 128- 255]: 2008876
[ 256- 511]: 1478495
[ 512- 1023]: 668265
[ 1024- 2047]: 9609322
Protocol Breakdown
![[protocol breakdown chart]](201005221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24522736 (100.00%) 15787263018 (100.00%) 643.78
ip 24497329 ( 99.90%) 15782185653 ( 99.97%) 644.24
tcp 13579020 ( 55.37%) 10207291820 ( 64.66%) 751.70
http(s) 5561782 ( 22.68%) 7255806373 ( 45.96%) 1304.58
http(c) 3869658 ( 15.78%) 567557678 ( 3.60%) 146.67
squid 322302 ( 1.31%) 124803011 ( 0.79%) 387.22
smtp 186536 ( 0.76%) 59766815 ( 0.38%) 320.40
ftp 21172 ( 0.09%) 7275738 ( 0.05%) 343.65
pop3 9280 ( 0.04%) 6393732 ( 0.04%) 688.98
imap 2297 ( 0.01%) 396876 ( 0.00%) 172.78
telnet 1330 ( 0.01%) 98680 ( 0.00%) 74.20
ssh 15007 ( 0.06%) 1801852 ( 0.01%) 120.07
dns 504960 ( 2.06%) 487331242 ( 3.09%) 965.09
bgp 155 ( 0.00%) 67696 ( 0.00%) 436.75
napster 51 ( 0.00%) 34772 ( 0.00%) 681.80
rtsp 1813 ( 0.01%) 798189 ( 0.01%) 440.26
icecast 41745 ( 0.17%) 24127195 ( 0.15%) 577.97
hotline 6 ( 0.00%) 721 ( 0.00%) 120.17
other 3040919 ( 12.40%) 1671030830 ( 10.58%) 549.52
udp 7221810 ( 29.45%) 3724117653 ( 23.59%) 515.68
dns 497109 ( 2.03%) 90345971 ( 0.57%) 181.74
realaud 1450 ( 0.01%) 1478318 ( 0.01%) 1019.53
halflif 63 ( 0.00%) 5198 ( 0.00%) 82.51
starcra 57 ( 0.00%) 7059 ( 0.00%) 123.84
everque 369 ( 0.00%) 65009 ( 0.00%) 176.18
unreal 76 ( 0.00%) 12218 ( 0.00%) 160.76
quake 50 ( 0.00%) 3949 ( 0.00%) 78.98
cuseeme 4 ( 0.00%) 486 ( 0.00%) 121.50
other 6722364 ( 27.41%) 3632065819 ( 23.01%) 540.30
icmp 243827 ( 0.99%) 20152769 ( 0.13%) 82.65
ipip 344 ( 0.00%) 43010 ( 0.00%) 125.03
ipsec 857 ( 0.00%) 177438 ( 0.00%) 207.05
ip6 3440138 ( 14.03%) 1828383013 ( 11.58%) 531.49
other 11333 ( 0.05%) 2019950 ( 0.01%) 178.24
frag 3307 ( 0.01%) 2905476 ( 0.02%) 878.58
ip6 25407 ( 0.10%) 5077365 ( 0.03%) 199.84
tcp6 5636 ( 0.02%) 670956 ( 0.00%) 119.05
http(s) 41 ( 0.00%) 25276 ( 0.00%) 616.49
http(c) 1872 ( 0.01%) 198448 ( 0.00%) 106.01
smtp 124 ( 0.00%) 47944 ( 0.00%) 386.65
imap 338 ( 0.00%) 41174 ( 0.00%) 121.82
ssh 13 ( 0.00%) 1758 ( 0.00%) 135.23
dns 316 ( 0.00%) 59752 ( 0.00%) 189.09
bgp 113 ( 0.00%) 14048 ( 0.00%) 124.32
other 2819 ( 0.01%) 282556 ( 0.00%) 100.23
udp6 12340 ( 0.05%) 3390320 ( 0.02%) 274.74
dns 12208 ( 0.05%) 3365468 ( 0.02%) 275.68
other 132 ( 0.00%) 24852 ( 0.00%) 188.27
icmp6 7331 ( 0.03%) 956536 ( 0.01%) 130.48
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 70 ( 0.00%) 55473 ( 0.00%) 792.47
tcpdump file: 201005221400.dump.gz (636.70 MB)