Traffic Trace Info
DumpFile: 201005301400.dump
FileSize: 2117.79MB
Id: 201005301400
StartTime: Sun May 30 14:00:00 2010
EndTime: Sun May 30 14:15:01 2010
TotalTime: 900.43 seconds
TotalCapSize: 1652.82MB CapLen: 96 bytes
# of packets: 30471693 (20339.59MB)
AvgRate: 189.48Mbps stddev:16.27M
IP flow (unique src/dst pair) Information
# of flows: 717055 (avg. 42.50 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.5% 2.5% 2.3% 2.0% 1.2% 1.0% 1.0% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 451236
Top 10 bandwidth usage (bytes/total in %):
11.0% 10.8% 9.9% 6.1% 5.2% 4.3% 3.6% 2.8% 2.7% 2.7%
# of IPv6 addresses: 1016
Top 10 bandwidth usage (bytes/total in %):
66.2% 66.1% 9.3% 4.3% 3.9% 2.5% 2.3% 2.3% 1.3% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201005301400.pktlen.png)
detailed numbers
[ 32- 63]: 5098115
[ 64- 127]: 7666564
[ 128- 255]: 1856424
[ 256- 511]: 1504247
[ 512- 1023]: 1292774
[ 1024- 2047]: 13053569
Protocol Breakdown
![[protocol breakdown chart]](201005301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30471693 (100.00%) 21327609010 (100.00%) 699.92
ip 30421083 ( 99.83%) 21308111840 ( 99.91%) 700.44
tcp 17210020 ( 56.48%) 14277140140 ( 66.94%) 829.58
http(s) 8173383 ( 26.82%) 11366399377 ( 53.29%) 1390.66
http(c) 5169183 ( 16.96%) 571520999 ( 2.68%) 110.56
squid 345257 ( 1.13%) 113725662 ( 0.53%) 329.39
smtp 159723 ( 0.52%) 28750322 ( 0.13%) 180.00
nntp 2 ( 0.00%) 122 ( 0.00%) 61.00
ftp 27829 ( 0.09%) 2468442 ( 0.01%) 88.70
pop3 4433 ( 0.01%) 1780508 ( 0.01%) 401.65
imap 3675 ( 0.01%) 2486531 ( 0.01%) 676.61
telnet 2373 ( 0.01%) 169978 ( 0.00%) 71.63
ssh 59894 ( 0.20%) 48372105 ( 0.23%) 807.63
dns 13684 ( 0.04%) 1017162 ( 0.00%) 74.33
bgp 197 ( 0.00%) 93388 ( 0.00%) 474.05
napster 17 ( 0.00%) 1501 ( 0.00%) 88.29
realaud 11 ( 0.00%) 670 ( 0.00%) 60.91
rtsp 1989 ( 0.01%) 195938 ( 0.00%) 98.51
icecast 12664 ( 0.04%) 13424544 ( 0.06%) 1060.06
hotline 4 ( 0.00%) 256 ( 0.00%) 64.00
other 3235698 ( 10.62%) 2126732395 ( 9.97%) 657.27
udp 9287268 ( 30.48%) 4870442674 ( 22.84%) 524.42
dns 657285 ( 2.16%) 145247262 ( 0.68%) 220.98
realaud 1849 ( 0.01%) 113522 ( 0.00%) 61.40
halflif 125505 ( 0.41%) 29031114 ( 0.14%) 231.31
starcra 63 ( 0.00%) 9187 ( 0.00%) 145.83
everque 578 ( 0.00%) 121090 ( 0.00%) 209.50
unreal 48 ( 0.00%) 12084 ( 0.00%) 251.75
quake 56 ( 0.00%) 6204 ( 0.00%) 110.79
cuseeme 1 ( 0.00%) 140 ( 0.00%) 140.00
other 8501677 ( 27.90%) 4695806099 ( 22.02%) 552.34
icmp 246804 ( 0.81%) 21082910 ( 0.10%) 85.42
ipip 318 ( 0.00%) 37006 ( 0.00%) 116.37
ipsec 614 ( 0.00%) 112396 ( 0.00%) 183.06
ip6 3664672 ( 12.03%) 2129110330 ( 9.98%) 580.98
other 11387 ( 0.04%) 10186384 ( 0.05%) 894.56
frag 1188 ( 0.00%) 1160555 ( 0.01%) 976.90
ip6 50610 ( 0.17%) 19497170 ( 0.09%) 385.24
tcp6 36286 ( 0.12%) 16264009 ( 0.08%) 448.22
http(s) 10700 ( 0.04%) 12932855 ( 0.06%) 1208.68
http(c) 12056 ( 0.04%) 1854204 ( 0.01%) 153.80
smtp 121 ( 0.00%) 41474 ( 0.00%) 342.76
imap 2922 ( 0.01%) 304860 ( 0.00%) 104.33
ssh 2325 ( 0.01%) 202430 ( 0.00%) 87.07
dns 303 ( 0.00%) 54763 ( 0.00%) 180.74
bgp 106 ( 0.00%) 14006 ( 0.00%) 132.13
other 7753 ( 0.03%) 859417 ( 0.00%) 110.85
udp6 8246 ( 0.03%) 2290187 ( 0.01%) 277.73
dns 8071 ( 0.03%) 2258694 ( 0.01%) 279.85
other 175 ( 0.00%) 31493 ( 0.00%) 179.96
icmp6 5999 ( 0.02%) 901165 ( 0.00%) 150.22
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 48 ( 0.00%) 37593 ( 0.00%) 783.19
tcpdump file: 201005301400.dump.gz (763.73 MB)