Traffic Trace Info
DumpFile: 201005281400.dump
FileSize: 2341.78MB
Id: 201005281400
StartTime: Fri May 28 14:00:01 2010
EndTime: Fri May 28 14:15:01 2010
TotalTime: 900.01 seconds
TotalCapSize: 1837.91MB CapLen: 96 bytes
# of packets: 33021410 (20846.34MB)
AvgRate: 194.30Mbps stddev:13.89M
IP flow (unique src/dst pair) Information
# of flows: 886341 (avg. 37.26 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.9% 1.3% 1.0% 0.9% 0.8% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 534146
Top 10 bandwidth usage (bytes/total in %):
12.4% 11.7% 7.1% 6.2% 5.5% 5.1% 3.2% 3.0% 2.8% 2.5%
# of IPv6 addresses: 1080
Top 10 bandwidth usage (bytes/total in %):
25.7% 24.5% 22.7% 20.5% 7.6% 7.6% 5.6% 5.2% 3.6% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201005281400.pktlen.png)
detailed numbers
[ 32- 63]: 5604675
[ 64- 127]: 8708456
[ 128- 255]: 2464003
[ 256- 511]: 1740954
[ 512- 1023]: 1095849
[ 1024- 2047]: 13407473
Protocol Breakdown
![[protocol breakdown chart]](201005281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33021410 (100.00%) 21858975863 (100.00%) 661.96
ip 32982186 ( 99.88%) 21844838310 ( 99.94%) 662.32
tcp 19410368 ( 58.78%) 14444272027 ( 66.08%) 744.15
http(s) 7022805 ( 21.27%) 9189674185 ( 42.04%) 1308.55
http(c) 5410758 ( 16.39%) 606378261 ( 2.77%) 112.07
squid 325604 ( 0.99%) 66326385 ( 0.30%) 203.70
smtp 292985 ( 0.89%) 117324439 ( 0.54%) 400.45
nntp 10 ( 0.00%) 608 ( 0.00%) 60.80
ftp 70542 ( 0.21%) 12033777 ( 0.06%) 170.59
pop3 18828 ( 0.06%) 6062696 ( 0.03%) 322.00
imap 3658 ( 0.01%) 1431461 ( 0.01%) 391.32
telnet 4316 ( 0.01%) 324166 ( 0.00%) 75.11
ssh 67988 ( 0.21%) 65597987 ( 0.30%) 964.85
dns 12062 ( 0.04%) 900868 ( 0.00%) 74.69
bgp 166 ( 0.00%) 64490 ( 0.00%) 388.49
napster 113 ( 0.00%) 9862 ( 0.00%) 87.27
realaud 65 ( 0.00%) 10636 ( 0.00%) 163.63
rtsp 31120 ( 0.09%) 45501321 ( 0.21%) 1462.12
icecast 31512 ( 0.10%) 23516630 ( 0.11%) 746.28
hotline 22 ( 0.00%) 4908 ( 0.00%) 223.09
other 6117808 ( 18.53%) 4309108987 ( 19.71%) 704.36
udp 8908407 ( 26.98%) 4792182216 ( 21.92%) 537.94
dns 802753 ( 2.43%) 169401799 ( 0.77%) 211.03
realaud 333 ( 0.00%) 64234 ( 0.00%) 192.89
halflif 139 ( 0.00%) 20990 ( 0.00%) 151.01
starcra 66 ( 0.00%) 10191 ( 0.00%) 154.41
everque 762 ( 0.00%) 138535 ( 0.00%) 181.80
unreal 30 ( 0.00%) 5491 ( 0.00%) 183.03
quake 34 ( 0.00%) 4870 ( 0.00%) 143.24
cuseeme 6 ( 0.00%) 616 ( 0.00%) 102.67
other 8085705 ( 24.49%) 4621338068 ( 21.14%) 571.54
icmp 366283 ( 1.11%) 43946766 ( 0.20%) 119.98
ipip 308 ( 0.00%) 36102 ( 0.00%) 117.21
ipsec 1228 ( 0.00%) 730724 ( 0.00%) 595.05
ip6 4293530 ( 13.00%) 2563375707 ( 11.73%) 597.03
other 2062 ( 0.01%) 294768 ( 0.00%) 142.95
frag 56983 ( 0.17%) 42770752 ( 0.20%) 750.59
ip6 39222 ( 0.12%) 14137433 ( 0.06%) 360.45
tcp6 20866 ( 0.06%) 9963164 ( 0.05%) 477.48
http(s) 3926 ( 0.01%) 4934246 ( 0.02%) 1256.81
http(c) 9676 ( 0.03%) 4031308 ( 0.02%) 416.63
smtp 351 ( 0.00%) 163783 ( 0.00%) 466.62
imap 1314 ( 0.00%) 153069 ( 0.00%) 116.49
ssh 1722 ( 0.01%) 185992 ( 0.00%) 108.01
dns 301 ( 0.00%) 52771 ( 0.00%) 175.32
bgp 101 ( 0.00%) 13284 ( 0.00%) 131.52
other 3475 ( 0.01%) 428711 ( 0.00%) 123.37
udp6 11506 ( 0.03%) 3107394 ( 0.01%) 270.07
dns 11228 ( 0.03%) 3058911 ( 0.01%) 272.44
other 278 ( 0.00%) 48483 ( 0.00%) 174.40
icmp6 6753 ( 0.02%) 1004057 ( 0.00%) 148.68
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 67 ( 0.00%) 58738 ( 0.00%) 876.69
tcpdump file: 201005281400.dump.gz (858.15 MB)