Traffic Trace Info
DumpFile: 201005271400.dump
FileSize: 2759.75MB
Id: 201005271400
StartTime: Thu May 27 14:00:01 2010
EndTime: Thu May 27 14:15:01 2010
TotalTime: 900.16 seconds
TotalCapSize: -1921.13MB CapLen: 96 bytes
# of packets: 38330352 (24648.15MB)
AvgRate: 229.67Mbps stddev:21.23M
IP flow (unique src/dst pair) Information
# of flows: 906147 (avg. 42.30 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 1.9% 1.6% 1.5% 1.0% 0.8% 0.8% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 493090
Top 10 bandwidth usage (bytes/total in %):
10.5% 8.9% 7.6% 6.1% 5.6% 4.2% 3.6% 3.3% 2.3% 2.3%
# of IPv6 addresses: 1094
Top 10 bandwidth usage (bytes/total in %):
14.3% 7.0% 6.5% 5.4% 5.0% 4.2% 3.9% 3.4% 3.3% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201005271400.pktlen.png)
detailed numbers
[ 32- 63]: 5637269
[ 64- 127]: 11794014
[ 128- 255]: 2315110
[ 256- 511]: 1602142
[ 512- 1023]: 1115711
[ 1024- 2047]: 15866106
Protocol Breakdown
![[protocol breakdown chart]](201005271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38330352 (100.00%) 25845454933 (100.00%) 674.28
ip 38303631 ( 99.93%) 25840008432 ( 99.98%) 674.61
tcp 26257976 ( 68.50%) 19678101182 ( 76.14%) 749.41
http(s) 9843025 ( 25.68%) 13301532300 ( 51.47%) 1351.37
http(c) 8263889 ( 21.56%) 973852902 ( 3.77%) 117.84
squid 308673 ( 0.81%) 86916654 ( 0.34%) 281.58
smtp 254386 ( 0.66%) 93631574 ( 0.36%) 368.07
nntp 3 ( 0.00%) 194 ( 0.00%) 64.67
ftp 54369 ( 0.14%) 4818796 ( 0.02%) 88.63
pop3 16860 ( 0.04%) 7418802 ( 0.03%) 440.02
imap 71871 ( 0.19%) 9073686 ( 0.04%) 126.25
telnet 11513 ( 0.03%) 861429 ( 0.00%) 74.82
ssh 161358 ( 0.42%) 127843277 ( 0.49%) 792.30
dns 14969 ( 0.04%) 1051820 ( 0.00%) 70.27
bgp 143 ( 0.00%) 59032 ( 0.00%) 412.81
napster 440 ( 0.00%) 367861 ( 0.00%) 836.05
realaud 22 ( 0.00%) 2979 ( 0.00%) 135.41
rtsp 27817 ( 0.07%) 26742839 ( 0.10%) 961.38
icecast 7284 ( 0.02%) 499030 ( 0.00%) 68.51
hotline 23 ( 0.00%) 1494 ( 0.00%) 64.96
other 7221327 ( 18.84%) 5043426273 ( 19.51%) 698.41
udp 7651410 ( 19.96%) 3787147570 ( 14.65%) 494.96
dns 827021 ( 2.16%) 176333741 ( 0.68%) 213.22
realaud 1845 ( 0.00%) 118118 ( 0.00%) 64.02
halflif 89129 ( 0.23%) 19048134 ( 0.07%) 213.71
starcra 28 ( 0.00%) 3959 ( 0.00%) 141.39
everque 516 ( 0.00%) 105418 ( 0.00%) 204.30
unreal 34 ( 0.00%) 5597 ( 0.00%) 164.62
quake 30 ( 0.00%) 4126 ( 0.00%) 137.53
cuseeme 10 ( 0.00%) 869 ( 0.00%) 86.90
other 6731824 ( 17.56%) 3591338983 ( 13.90%) 533.49
icmp 315107 ( 0.82%) 28268789 ( 0.11%) 89.71
ipip 322 ( 0.00%) 37112 ( 0.00%) 115.25
ipsec 441 ( 0.00%) 82422 ( 0.00%) 186.90
ip6 3843611 ( 10.03%) 2320330599 ( 8.98%) 603.69
other 234764 ( 0.61%) 26040758 ( 0.10%) 110.92
frag 5208 ( 0.01%) 4177592 ( 0.02%) 802.15
ip6 26719 ( 0.07%) 5446381 ( 0.02%) 203.84
tcp6 7460 ( 0.02%) 1013661 ( 0.00%) 135.88
http(s) 144 ( 0.00%) 176767 ( 0.00%) 1227.55
http(c) 3215 ( 0.01%) 333914 ( 0.00%) 103.86
smtp 253 ( 0.00%) 86206 ( 0.00%) 340.74
imap 404 ( 0.00%) 47279 ( 0.00%) 117.03
ssh 7 ( 0.00%) 954 ( 0.00%) 136.29
dns 222 ( 0.00%) 34151 ( 0.00%) 153.83
bgp 103 ( 0.00%) 12925 ( 0.00%) 125.49
other 3112 ( 0.01%) 321465 ( 0.00%) 103.30
udp6 12586 ( 0.03%) 3406265 ( 0.01%) 270.64
dns 11958 ( 0.03%) 3305587 ( 0.01%) 276.43
other 628 ( 0.00%) 100678 ( 0.00%) 160.32
icmp6 6596 ( 0.02%) 978903 ( 0.00%) 148.41
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 46 ( 0.00%) 43336 ( 0.00%) 942.09
tcpdump file: 201005271400.dump.gz (979.86 MB)