Traffic Trace Info
DumpFile: 201005231400.dump
FileSize: 1615.98MB
Id: 201005231400
StartTime: Sun May 23 14:00:01 2010
EndTime: Sun May 23 14:15:01 2010
TotalTime: 899.53 seconds
TotalCapSize: 1265.25MB CapLen: 96 bytes
# of packets: 22983951 (15763.97MB)
AvgRate: 147.01Mbps stddev:27.75M
IP flow (unique src/dst pair) Information
# of flows: 566625 (avg. 40.56 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 3.1% 1.8% 1.6% 1.3% 1.2% 1.1% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 343247
Top 10 bandwidth usage (bytes/total in %):
16.6% 9.7% 9.6% 7.0% 6.5% 4.8% 4.2% 3.4% 3.1% 3.0%
# of IPv6 addresses: 881
Top 10 bandwidth usage (bytes/total in %):
17.1% 17.1% 12.3% 11.0% 8.8% 6.6% 6.6% 6.6% 4.3% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201005231400.pktlen.png)
detailed numbers
[ 32- 63]: 3378879
[ 64- 127]: 5768754
[ 128- 255]: 1653365
[ 256- 511]: 1344579
[ 512- 1023]: 628278
[ 1024- 2047]: 10210096
Protocol Breakdown
![[protocol breakdown chart]](201005231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22983951 (100.00%) 16529720238 (100.00%) 719.19
ip 22957472 ( 99.88%) 16524609896 ( 99.97%) 719.79
tcp 13191553 ( 57.39%) 11542627559 ( 69.83%) 875.00
http(s) 6161697 ( 26.81%) 8565627996 ( 51.82%) 1390.14
http(c) 3088610 ( 13.44%) 356148747 ( 2.15%) 115.31
squid 292536 ( 1.27%) 129921954 ( 0.79%) 444.12
smtp 176782 ( 0.77%) 62145660 ( 0.38%) 351.54
nntp 8 ( 0.00%) 490 ( 0.00%) 61.25
ftp 13104 ( 0.06%) 6099669 ( 0.04%) 465.48
pop3 7722 ( 0.03%) 3114153 ( 0.02%) 403.28
imap 4615 ( 0.02%) 4688914 ( 0.03%) 1016.02
telnet 2252 ( 0.01%) 164478 ( 0.00%) 73.04
ssh 33804 ( 0.15%) 5351540 ( 0.03%) 158.31
dns 512373 ( 2.23%) 489567851 ( 2.96%) 955.49
bgp 167 ( 0.00%) 68404 ( 0.00%) 409.60
realaud 200 ( 0.00%) 42953 ( 0.00%) 214.76
rtsp 1015 ( 0.00%) 100836 ( 0.00%) 99.35
icecast 10721 ( 0.05%) 767186 ( 0.00%) 71.56
other 2885938 ( 12.56%) 1918816188 ( 11.61%) 664.88
udp 6545943 ( 28.48%) 3361200942 ( 20.33%) 513.48
dns 446125 ( 1.94%) 81083550 ( 0.49%) 181.75
realaud 817 ( 0.00%) 57637 ( 0.00%) 70.55
halflif 280 ( 0.00%) 17675 ( 0.00%) 63.12
starcra 56 ( 0.00%) 6808 ( 0.00%) 121.57
everque 253 ( 0.00%) 51239 ( 0.00%) 202.53
unreal 15 ( 0.00%) 2380 ( 0.00%) 158.67
quake 14 ( 0.00%) 1371 ( 0.00%) 97.93
cuseeme 4 ( 0.00%) 360 ( 0.00%) 90.00
other 6098131 ( 26.53%) 3279826972 ( 19.84%) 537.84
icmp 227672 ( 0.99%) 18880226 ( 0.11%) 82.93
ipip 325 ( 0.00%) 40610 ( 0.00%) 124.95
ipsec 563 ( 0.00%) 101682 ( 0.00%) 180.61
ip6 2988913 ( 13.00%) 1601393291 ( 9.69%) 535.78
other 2503 ( 0.01%) 365586 ( 0.00%) 146.06
frag 1558 ( 0.01%) 1546303 ( 0.01%) 992.49
ip6 26479 ( 0.12%) 5110342 ( 0.03%) 193.00
tcp6 7507 ( 0.03%) 1034907 ( 0.01%) 137.86
http(s) 40 ( 0.00%) 21804 ( 0.00%) 545.10
http(c) 2446 ( 0.01%) 237168 ( 0.00%) 96.96
smtp 63 ( 0.00%) 8853 ( 0.00%) 140.52
imap 345 ( 0.00%) 40687 ( 0.00%) 117.93
ssh 13 ( 0.00%) 1758 ( 0.00%) 135.23
dns 310 ( 0.00%) 48107 ( 0.00%) 155.18
bgp 88 ( 0.00%) 10568 ( 0.00%) 120.09
other 4202 ( 0.02%) 665962 ( 0.00%) 158.49
udp6 12457 ( 0.05%) 3170545 ( 0.02%) 254.52
dns 12341 ( 0.05%) 3155795 ( 0.02%) 255.72
other 116 ( 0.00%) 14750 ( 0.00%) 127.16
icmp6 6425 ( 0.03%) 846310 ( 0.01%) 131.72
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 60 ( 0.00%) 54500 ( 0.00%) 908.33
tcpdump file: 201005231400.dump.gz (579.17 MB)