Traffic Trace Info
DumpFile: 200910021400.dump
FileSize: 2228.07MB
Id: 200910021400
StartTime: Fri Oct 2 14:00:00 2009
EndTime: Fri Oct 2 14:15:00 2009
TotalTime: 900.00 seconds
TotalCapSize: 1729.49MB CapLen: 96 bytes
# of packets: 32674203 (18382.51MB)
AvgRate: 171.34Mbps stddev:19.73M
IP flow (unique src/dst pair) Information
# of flows: 1577314 (avg. 20.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 0.9% 0.8% 0.7% 0.7% 0.6% 0.6% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 915487
Top 10 bandwidth usage (bytes/total in %):
23.4% 7.8% 6.1% 3.0% 2.5% 2.4% 2.3% 2.0% 2.0% 2.0%
# of IPv6 addresses: 932
Top 10 bandwidth usage (bytes/total in %):
12.4% 12.2% 8.3% 8.0% 7.5% 6.1% 6.1% 4.9% 4.2% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200910021400.pktlen.png)
detailed numbers
[ 32- 63]: 8431714
[ 64- 127]: 8883488
[ 128- 255]: 1635513
[ 256- 511]: 1035559
[ 512- 1023]: 1056379
[ 1024- 2047]: 11631550
Protocol Breakdown
![[protocol breakdown chart]](200910021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32674203 (100.00%) 19275454384 (100.00%) 589.93
ip 32646492 ( 99.92%) 19270467246 ( 99.97%) 590.28
tcp 24820906 ( 75.96%) 16174176204 ( 83.91%) 651.64
http(s) 7090839 ( 21.70%) 9069796977 ( 47.05%) 1279.09
http(c) 6360027 ( 19.46%) 820969135 ( 4.26%) 129.08
squid 713305 ( 2.18%) 237569657 ( 1.23%) 333.05
smtp 234728 ( 0.72%) 67258196 ( 0.35%) 286.54
nntp 97 ( 0.00%) 9707 ( 0.00%) 100.07
ftp 33234 ( 0.10%) 4024893 ( 0.02%) 121.11
pop3 15775 ( 0.05%) 3021548 ( 0.02%) 191.54
imap 3056 ( 0.01%) 306189 ( 0.00%) 100.19
telnet 7619 ( 0.02%) 571485 ( 0.00%) 75.01
ssh 444423 ( 1.36%) 92091078 ( 0.48%) 207.21
dns 6231 ( 0.02%) 6930855 ( 0.04%) 1112.32
bgp 203 ( 0.00%) 99852 ( 0.00%) 491.88
napster 63265 ( 0.19%) 54220116 ( 0.28%) 857.03
realaud 1268 ( 0.00%) 174191 ( 0.00%) 137.37
rtsp 329329 ( 1.01%) 89007974 ( 0.46%) 270.27
icecast 24505 ( 0.07%) 13886600 ( 0.07%) 566.68
hotline 26 ( 0.00%) 4978 ( 0.00%) 191.46
other 9492951 ( 29.05%) 5714231273 ( 29.65%) 601.94
udp 6896663 ( 21.11%) 2930024629 ( 15.20%) 424.85
dns 1222823 ( 3.74%) 225934137 ( 1.17%) 184.76
rip 1 ( 0.00%) 107 ( 0.00%) 107.00
realaud 2395 ( 0.01%) 157263 ( 0.00%) 65.66
halflif 2609 ( 0.01%) 169209 ( 0.00%) 64.86
starcra 469 ( 0.00%) 95236 ( 0.00%) 203.06
everque 758 ( 0.00%) 132141 ( 0.00%) 174.33
unreal 171 ( 0.00%) 35291 ( 0.00%) 206.38
quake 71 ( 0.00%) 14439 ( 0.00%) 203.37
cuseeme 24 ( 0.00%) 4782 ( 0.00%) 199.25
other 5653555 ( 17.30%) 2702092993 ( 14.02%) 477.95
icmp 751299 ( 2.30%) 62694215 ( 0.33%) 83.45
ipip 346 ( 0.00%) 42606 ( 0.00%) 123.14
ipsec 90055 ( 0.28%) 70832242 ( 0.37%) 786.54
ip6 41594 ( 0.13%) 11777513 ( 0.06%) 283.15
other 45629 ( 0.14%) 20919837 ( 0.11%) 458.48
frag 42532 ( 0.13%) 33385662 ( 0.17%) 784.95
ip6 27711 ( 0.08%) 4987138 ( 0.03%) 179.97
tcp6 12589 ( 0.04%) 1953567 ( 0.01%) 155.18
http(s) 200 ( 0.00%) 86782 ( 0.00%) 433.91
http(c) 9027 ( 0.03%) 801084 ( 0.00%) 88.74
smtp 1261 ( 0.00%) 617796 ( 0.00%) 489.93
ssh 878 ( 0.00%) 304036 ( 0.00%) 346.28
dns 12 ( 0.00%) 3946 ( 0.00%) 328.83
bgp 109 ( 0.00%) 13664 ( 0.00%) 125.36
other 1102 ( 0.00%) 126259 ( 0.00%) 114.57
udp6 11469 ( 0.04%) 2579140 ( 0.01%) 224.88
dns 11443 ( 0.04%) 2576854 ( 0.01%) 225.19
unreal 1 ( 0.00%) 112 ( 0.00%) 112.00
other 25 ( 0.00%) 2174 ( 0.00%) 86.96
icmp6 3587 ( 0.01%) 420484 ( 0.00%) 117.22
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 36 ( 0.00%) 29867 ( 0.00%) 829.64
tcpdump file: 200910021400.dump.gz (849.31 MB)