Traffic Trace Info
DumpFile: 201005261400.dump
FileSize: 2404.69MB
Id: 201005261400
StartTime: Wed May 26 14:00:01 2010
EndTime: Wed May 26 14:15:01 2010
TotalTime: 900.18 seconds
TotalCapSize: 1887.88MB CapLen: 96 bytes
# of packets: 33867004 (22405.70MB)
AvgRate: 208.83Mbps stddev:19.41M
IP flow (unique src/dst pair) Information
# of flows: 863217 (avg. 39.23 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.1% 5.0% 1.8% 1.6% 1.4% 1.4% 0.9% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 489769
Top 10 bandwidth usage (bytes/total in %):
14.8% 8.9% 8.0% 7.3% 6.0% 5.4% 5.1% 5.1% 3.9% 2.0%
# of IPv6 addresses: 1018
Top 10 bandwidth usage (bytes/total in %):
29.7% 29.7% 9.0% 8.2% 6.1% 5.2% 5.2% 4.8% 3.5% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201005261400.pktlen.png)
detailed numbers
[ 32- 63]: 5510217
[ 64- 127]: 8511628
[ 128- 255]: 2616429
[ 256- 511]: 1730720
[ 512- 1023]: 1053353
[ 1024- 2047]: 14444657
Protocol Breakdown
![[protocol breakdown chart]](201005261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33867004 (100.00%) 23494079683 (100.00%) 693.72
ip 33836024 ( 99.91%) 23484591796 ( 99.96%) 694.07
tcp 21347279 ( 63.03%) 16768185103 ( 71.37%) 785.50
http(s) 7363458 ( 21.74%) 9676975617 ( 41.19%) 1314.19
http(c) 5747234 ( 16.97%) 864799817 ( 3.68%) 150.47
squid 348734 ( 1.03%) 114035920 ( 0.49%) 327.00
smtp 398115 ( 1.18%) 175128863 ( 0.75%) 439.90
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 49070 ( 0.14%) 9597574 ( 0.04%) 195.59
pop3 19831 ( 0.06%) 9198553 ( 0.04%) 463.85
imap 9203 ( 0.03%) 4048121 ( 0.02%) 439.87
telnet 15773 ( 0.05%) 1170887 ( 0.00%) 74.23
ssh 44234 ( 0.13%) 33676668 ( 0.14%) 761.33
dns 18864 ( 0.06%) 1376599 ( 0.01%) 72.97
bgp 157 ( 0.00%) 63554 ( 0.00%) 404.80
napster 102 ( 0.00%) 18223 ( 0.00%) 178.66
realaud 3763 ( 0.01%) 234165 ( 0.00%) 62.23
rtsp 12508 ( 0.04%) 8933173 ( 0.04%) 714.20
icecast 53809 ( 0.16%) 32549143 ( 0.14%) 604.90
hotline 25 ( 0.00%) 3176 ( 0.00%) 127.04
other 7262377 ( 21.44%) 5836373730 ( 24.84%) 803.65
udp 8493827 ( 25.08%) 4585734271 ( 19.52%) 539.89
dns 810337 ( 2.39%) 175200759 ( 0.75%) 216.21
realaud 2386 ( 0.01%) 161470 ( 0.00%) 67.67
halflif 293 ( 0.00%) 60557 ( 0.00%) 206.68
starcra 55 ( 0.00%) 6655 ( 0.00%) 121.00
everque 2190 ( 0.01%) 304056 ( 0.00%) 138.84
unreal 66 ( 0.00%) 12450 ( 0.00%) 188.64
quake 16 ( 0.00%) 1967 ( 0.00%) 122.94
cuseeme 10 ( 0.00%) 1541 ( 0.00%) 154.10
other 7676717 ( 22.67%) 4409777094 ( 18.77%) 574.44
icmp 245879 ( 0.73%) 20281544 ( 0.09%) 82.49
ipip 338 ( 0.00%) 39210 ( 0.00%) 116.01
ipsec 4743 ( 0.01%) 636426 ( 0.00%) 134.18
ip6 3668022 ( 10.83%) 2097838697 ( 8.93%) 571.93
other 75936 ( 0.22%) 11876545 ( 0.05%) 156.40
frag 6257 ( 0.02%) 4870631 ( 0.02%) 778.43
ip6 30980 ( 0.09%) 9487887 ( 0.04%) 306.26
tcp6 10506 ( 0.03%) 4462363 ( 0.02%) 424.74
http(s) 327 ( 0.00%) 407606 ( 0.00%) 1246.50
http(c) 1987 ( 0.01%) 246706 ( 0.00%) 124.16
smtp 187 ( 0.00%) 51971 ( 0.00%) 277.92
imap 328 ( 0.00%) 40345 ( 0.00%) 123.00
ssh 1851 ( 0.01%) 495938 ( 0.00%) 267.93
dns 423 ( 0.00%) 67503 ( 0.00%) 159.58
bgp 107 ( 0.00%) 13967 ( 0.00%) 130.53
other 5296 ( 0.02%) 3138327 ( 0.01%) 592.58
udp6 13226 ( 0.04%) 3790978 ( 0.02%) 286.63
dns 12991 ( 0.04%) 3752238 ( 0.02%) 288.83
other 235 ( 0.00%) 38740 ( 0.00%) 164.85
icmp6 7040 ( 0.02%) 1052153 ( 0.00%) 149.45
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 178 ( 0.00%) 178313 ( 0.00%) 1001.76
tcpdump file: 201005261400.dump.gz (870.97 MB)