Traffic Trace Info
DumpFile: 201005311400.dump
FileSize: 2352.32MB
Id: 201005311400
StartTime: Mon May 31 14:00:01 2010
EndTime: Mon May 31 14:15:00 2010
TotalTime: 899.45 seconds
TotalCapSize: 1853.85MB CapLen: 96 bytes
# of packets: 32666630 (20799.43MB)
AvgRate: 193.99Mbps stddev:19.25M
IP flow (unique src/dst pair) Information
# of flows: 851666 (avg. 38.36 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.8% 1.0% 1.0% 0.9% 0.9% 0.9% 0.8% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 495491
Top 10 bandwidth usage (bytes/total in %):
12.1% 12.0% 4.4% 3.1% 3.0% 3.0% 3.0% 2.7% 2.6% 2.5%
# of IPv6 addresses: 1095
Top 10 bandwidth usage (bytes/total in %):
25.7% 13.8% 9.2% 6.3% 5.7% 5.5% 5.5% 3.7% 3.6% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201005311400.pktlen.png)
detailed numbers
[ 32- 63]: 5531102
[ 64- 127]: 9253157
[ 128- 255]: 2047162
[ 256- 511]: 1611026
[ 512- 1023]: 925407
[ 1024- 2047]: 13298776
Protocol Breakdown
![[protocol breakdown chart]](201005311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32666630 (100.00%) 21809782165 (100.00%) 667.65
ip 32606402 ( 99.82%) 21799676514 ( 99.95%) 668.57
tcp 20910145 ( 64.01%) 15766406336 ( 72.29%) 754.01
http(s) 8470280 ( 25.93%) 11183772578 ( 51.28%) 1320.35
http(c) 6660258 ( 20.39%) 867651110 ( 3.98%) 130.27
squid 192320 ( 0.59%) 40924890 ( 0.19%) 212.80
smtp 268044 ( 0.82%) 85081415 ( 0.39%) 317.42
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 31635 ( 0.10%) 8964033 ( 0.04%) 283.36
pop3 18951 ( 0.06%) 10634288 ( 0.05%) 561.15
imap 4515 ( 0.01%) 1312970 ( 0.01%) 290.80
telnet 709 ( 0.00%) 53307 ( 0.00%) 75.19
ssh 148383 ( 0.45%) 88587811 ( 0.41%) 597.02
dns 15043 ( 0.05%) 1143289 ( 0.01%) 76.00
bgp 142 ( 0.00%) 46571 ( 0.00%) 327.96
napster 10 ( 0.00%) 1327 ( 0.00%) 132.70
realaud 17 ( 0.00%) 2410 ( 0.00%) 141.76
rtsp 46213 ( 0.14%) 2877182 ( 0.01%) 62.26
icecast 109091 ( 0.33%) 82633124 ( 0.38%) 757.47
hotline 29 ( 0.00%) 2111 ( 0.00%) 72.79
other 4944497 ( 15.14%) 3392717438 ( 15.56%) 686.16
udp 6991560 ( 21.40%) 3344419964 ( 15.33%) 478.35
dns 581560 ( 1.78%) 101774808 ( 0.47%) 175.00
realaud 1929 ( 0.01%) 127714 ( 0.00%) 66.21
halflif 37984 ( 0.12%) 11135390 ( 0.05%) 293.16
starcra 93 ( 0.00%) 11504 ( 0.00%) 123.70
everque 759 ( 0.00%) 164196 ( 0.00%) 216.33
unreal 2849 ( 0.01%) 2621315 ( 0.01%) 920.08
quake 32 ( 0.00%) 2652 ( 0.00%) 82.88
cuseeme 5 ( 0.00%) 770 ( 0.00%) 154.00
other 6365714 ( 19.49%) 3228430696 ( 14.80%) 507.16
icmp 270999 ( 0.83%) 22148678 ( 0.10%) 81.73
ipip 372 ( 0.00%) 41968 ( 0.00%) 112.82
ipsec 514 ( 0.00%) 97036 ( 0.00%) 188.79
ip6 4363672 ( 13.36%) 2656843847 ( 12.18%) 608.86
other 69140 ( 0.21%) 9718685 ( 0.04%) 140.57
frag 2112 ( 0.01%) 1747145 ( 0.01%) 827.25
ip6 60228 ( 0.18%) 10105651 ( 0.05%) 167.79
tcp6 33586 ( 0.10%) 4308490 ( 0.02%) 128.28
http(s) 122 ( 0.00%) 73279 ( 0.00%) 600.65
http(c) 21633 ( 0.07%) 2859783 ( 0.01%) 132.20
smtp 255 ( 0.00%) 92330 ( 0.00%) 362.08
imap 375 ( 0.00%) 45887 ( 0.00%) 122.37
ssh 3167 ( 0.01%) 305452 ( 0.00%) 96.45
dns 219 ( 0.00%) 43781 ( 0.00%) 199.91
bgp 119 ( 0.00%) 15649 ( 0.00%) 131.50
other 7696 ( 0.02%) 872329 ( 0.00%) 113.35
udp6 15125 ( 0.05%) 4156856 ( 0.02%) 274.83
dns 14784 ( 0.05%) 4108103 ( 0.02%) 277.87
other 341 ( 0.00%) 48753 ( 0.00%) 142.97
icmp6 11376 ( 0.03%) 1540856 ( 0.01%) 135.45
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 111 ( 0.00%) 95369 ( 0.00%) 859.18
tcpdump file: 201005311400.dump.gz (884.39 MB)