Traffic Trace Info
DumpFile: 201005251400.dump
FileSize: 2424.61MB
Id: 201005251400
StartTime: Tue May 25 14:00:01 2010
EndTime: Tue May 25 14:15:01 2010
TotalTime: 900.43 seconds
TotalCapSize: 1897.31MB CapLen: 96 bytes
# of packets: 34554620 (22236.08MB)
AvgRate: 207.15Mbps stddev:16.80M
IP flow (unique src/dst pair) Information
# of flows: 907748 (avg. 38.07 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 1.7% 1.6% 1.6% 1.1% 1.1% 1.1% 1.0% 1.0% 0.8%
IP address Information
# of IPv4 addresses: 497085
Top 10 bandwidth usage (bytes/total in %):
12.0% 9.3% 5.6% 4.7% 4.4% 4.1% 3.7% 3.1% 2.4% 2.3%
# of IPv6 addresses: 1013
Top 10 bandwidth usage (bytes/total in %):
15.7% 11.2% 10.3% 7.5% 6.4% 4.4% 4.2% 4.1% 3.5% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201005251400.pktlen.png)
detailed numbers
[ 32- 63]: 5820309
[ 64- 127]: 9267058
[ 128- 255]: 2305943
[ 256- 511]: 1792076
[ 512- 1023]: 1003774
[ 1024- 2047]: 14365460
Protocol Breakdown
![[protocol breakdown chart]](201005251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34554620 (100.00%) 23316215893 (100.00%) 674.76
ip 34528181 ( 99.92%) 23310369696 ( 99.97%) 675.11
tcp 20376188 ( 58.97%) 16188642784 ( 69.43%) 794.49
http(s) 7804957 ( 22.59%) 10372328951 ( 44.49%) 1328.94
http(c) 5776967 ( 16.72%) 1041081578 ( 4.47%) 180.21
squid 267449 ( 0.77%) 116185637 ( 0.50%) 434.42
smtp 305058 ( 0.88%) 72457974 ( 0.31%) 237.52
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 19742 ( 0.06%) 8454009 ( 0.04%) 428.22
pop3 21167 ( 0.06%) 13518867 ( 0.06%) 638.68
imap 3450 ( 0.01%) 2070062 ( 0.01%) 600.02
telnet 29026 ( 0.08%) 2144945 ( 0.01%) 73.90
ssh 220576 ( 0.64%) 30633907 ( 0.13%) 138.88
dns 19411 ( 0.06%) 1386328 ( 0.01%) 71.42
bgp 171 ( 0.00%) 76162 ( 0.00%) 445.39
napster 83 ( 0.00%) 5913 ( 0.00%) 71.24
realaud 5 ( 0.00%) 355 ( 0.00%) 71.00
rtsp 59248 ( 0.17%) 81602222 ( 0.35%) 1377.30
icecast 306654 ( 0.89%) 408277954 ( 1.75%) 1331.40
hotline 77 ( 0.00%) 5500 ( 0.00%) 71.43
other 5542143 ( 16.04%) 4038412180 ( 17.32%) 728.67
udp 9597329 ( 27.77%) 4862258058 ( 20.85%) 506.63
dns 678297 ( 1.96%) 131423960 ( 0.56%) 193.76
realaud 1849 ( 0.01%) 115499 ( 0.00%) 62.47
halflif 213 ( 0.00%) 37295 ( 0.00%) 175.09
starcra 67 ( 0.00%) 10269 ( 0.00%) 153.27
everque 739 ( 0.00%) 124996 ( 0.00%) 169.14
unreal 56 ( 0.00%) 10670 ( 0.00%) 190.54
quake 19 ( 0.00%) 1876 ( 0.00%) 98.74
cuseeme 5 ( 0.00%) 719 ( 0.00%) 143.80
other 8914803 ( 25.80%) 4730360207 ( 20.29%) 530.62
icmp 800600 ( 2.32%) 67993893 ( 0.29%) 84.93
ipip 327 ( 0.00%) 38084 ( 0.00%) 116.46
ipsec 452 ( 0.00%) 84424 ( 0.00%) 186.78
ip6 3700519 ( 10.71%) 2181302721 ( 9.36%) 589.46
other 52766 ( 0.15%) 10049732 ( 0.04%) 190.46
frag 7183 ( 0.02%) 5405931 ( 0.02%) 752.60
ip6 26439 ( 0.08%) 5846197 ( 0.03%) 221.12
tcp6 7620 ( 0.02%) 905802 ( 0.00%) 118.87
http(s) 58 ( 0.00%) 33243 ( 0.00%) 573.16
http(c) 2559 ( 0.01%) 245000 ( 0.00%) 95.74
smtp 96 ( 0.00%) 32146 ( 0.00%) 334.85
imap 324 ( 0.00%) 38461 ( 0.00%) 118.71
ssh 66 ( 0.00%) 15668 ( 0.00%) 237.39
dns 421 ( 0.00%) 66764 ( 0.00%) 158.58
bgp 118 ( 0.00%) 17446 ( 0.00%) 147.85
icecast 9 ( 0.00%) 1037 ( 0.00%) 115.22
other 3969 ( 0.01%) 456037 ( 0.00%) 114.90
udp6 12756 ( 0.04%) 4010270 ( 0.02%) 314.38
dns 12543 ( 0.04%) 3975765 ( 0.02%) 316.97
other 213 ( 0.00%) 34505 ( 0.00%) 162.00
icmp6 5883 ( 0.02%) 796003 ( 0.00%) 135.31
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 149 ( 0.00%) 129906 ( 0.00%) 871.85
tcpdump file: 201005251400.dump.gz (888.27 MB)