Traffic Trace Info
DumpFile: 201005291400.dump
FileSize: 1953.33MB
Id: 201005291400
StartTime: Sat May 29 14:00:00 2010
EndTime: Sat May 29 14:15:00 2010
TotalTime: 899.78 seconds
TotalCapSize: 1533.41MB CapLen: 96 bytes
# of packets: 27519535 (17557.94MB)
AvgRate: 163.69Mbps stddev:14.69M
IP flow (unique src/dst pair) Information
# of flows: 693655 (avg. 39.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.0% 3.0% 2.8% 2.6% 1.6% 1.4% 1.2% 1.0% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 416784
Top 10 bandwidth usage (bytes/total in %):
12.8% 10.0% 9.9% 7.1% 4.9% 4.7% 3.8% 3.2% 3.0% 2.9%
# of IPv6 addresses: 1061
Top 10 bandwidth usage (bytes/total in %):
12.8% 12.6% 9.6% 9.3% 9.1% 5.5% 5.3% 5.1% 4.2% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201005291400.pktlen.png)
detailed numbers
[ 32- 63]: 4216856
[ 64- 127]: 7355221
[ 128- 255]: 2244956
[ 256- 511]: 1519747
[ 512- 1023]: 1233261
[ 1024- 2047]: 10949494
Protocol Breakdown
![[protocol breakdown chart]](201005291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27519535 (100.00%) 18410838639 (100.00%) 669.01
ip 27488214 ( 99.89%) 18404678141 ( 99.97%) 669.55
tcp 16168001 ( 58.75%) 12933415866 ( 70.25%) 799.94
http(s) 5037070 ( 18.30%) 6510641759 ( 35.36%) 1292.55
http(c) 3310195 ( 12.03%) 568193949 ( 3.09%) 171.65
squid 404655 ( 1.47%) 251502341 ( 1.37%) 621.52
smtp 264025 ( 0.96%) 106590221 ( 0.58%) 403.71
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 99050 ( 0.36%) 14770586 ( 0.08%) 149.12
pop3 28612 ( 0.10%) 5030702 ( 0.03%) 175.82
imap 9156 ( 0.03%) 9932547 ( 0.05%) 1084.81
telnet 3549 ( 0.01%) 260561 ( 0.00%) 73.42
ssh 36365 ( 0.13%) 4094422 ( 0.02%) 112.59
dns 12134 ( 0.04%) 877718 ( 0.00%) 72.34
bgp 135 ( 0.00%) 51856 ( 0.00%) 384.12
napster 177 ( 0.00%) 44267 ( 0.00%) 250.10
realaud 45 ( 0.00%) 6436 ( 0.00%) 143.02
rtsp 119988 ( 0.44%) 88322164 ( 0.48%) 736.09
icecast 26726 ( 0.10%) 23126874 ( 0.13%) 865.33
hotline 8 ( 0.00%) 1044 ( 0.00%) 130.50
other 6816104 ( 24.77%) 5349967997 ( 29.06%) 784.90
udp 7273175 ( 26.43%) 3571081960 ( 19.40%) 490.99
dns 692778 ( 2.52%) 153870762 ( 0.84%) 222.11
realaud 609 ( 0.00%) 49687 ( 0.00%) 81.59
halflif 60 ( 0.00%) 5236 ( 0.00%) 87.27
starcra 69 ( 0.00%) 8555 ( 0.00%) 123.99
everque 472 ( 0.00%) 88879 ( 0.00%) 188.30
unreal 30 ( 0.00%) 4600 ( 0.00%) 153.33
quake 27 ( 0.00%) 2337 ( 0.00%) 86.56
cuseeme 3 ( 0.00%) 284 ( 0.00%) 94.67
other 6578462 ( 23.90%) 3416888365 ( 18.56%) 519.41
icmp 248441 ( 0.90%) 20598626 ( 0.11%) 82.91
ipip 329 ( 0.00%) 40934 ( 0.00%) 124.42
ipsec 590 ( 0.00%) 120308 ( 0.00%) 203.91
ip6 3479834 ( 12.64%) 1836804774 ( 9.98%) 527.84
other 317844 ( 1.15%) 42615673 ( 0.23%) 134.08
frag 2173 ( 0.01%) 2025072 ( 0.01%) 931.92
ip6 31321 ( 0.11%) 6160498 ( 0.03%) 196.69
tcp6 14910 ( 0.05%) 2308891 ( 0.01%) 154.86
http(s) 101 ( 0.00%) 49428 ( 0.00%) 489.39
http(c) 5902 ( 0.02%) 1160680 ( 0.01%) 196.66
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 92 ( 0.00%) 34457 ( 0.00%) 374.53
imap 1660 ( 0.01%) 186360 ( 0.00%) 112.27
ssh 1058 ( 0.00%) 113900 ( 0.00%) 107.66
dns 274 ( 0.00%) 45932 ( 0.00%) 167.64
bgp 98 ( 0.00%) 13952 ( 0.00%) 142.37
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 5722 ( 0.02%) 703960 ( 0.00%) 123.03
udp6 9929 ( 0.04%) 2848242 ( 0.02%) 286.86
dns 9203 ( 0.03%) 2721890 ( 0.01%) 295.76
other 726 ( 0.00%) 126352 ( 0.00%) 174.04
icmp6 6397 ( 0.02%) 949851 ( 0.01%) 148.48
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 55 ( 0.00%) 49434 ( 0.00%) 898.80
tcpdump file: 201005291400.dump.gz (716.72 MB)