Traffic Trace Info
DumpFile: 200910031400.dump
FileSize: 1821.75MB
Id: 200910031400
StartTime: Sat Oct 3 14:00:01 2009
EndTime: Sat Oct 3 14:15:01 2009
TotalTime: 900.02 seconds
TotalCapSize: 1406.44MB CapLen: 96 bytes
# of packets: 27216539 (16154.37MB)
AvgRate: 150.56Mbps stddev:19.26M
IP flow (unique src/dst pair) Information
# of flows: 1540474 (avg. 17.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 2.8% 1.5% 1.2% 0.9% 0.9% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 907160
Top 10 bandwidth usage (bytes/total in %):
25.2% 7.2% 6.2% 4.8% 4.7% 3.7% 3.3% 2.9% 2.9% 2.8%
# of IPv6 addresses: 838
Top 10 bandwidth usage (bytes/total in %):
26.8% 26.3% 10.3% 8.4% 5.4% 3.9% 3.4% 3.4% 3.2% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200910031400.pktlen.png)
detailed numbers
[ 32- 63]: 6879107
[ 64- 127]: 6835697
[ 128- 255]: 1494588
[ 256- 511]: 897318
[ 512- 1023]: 739649
[ 1024- 2047]: 10370180
Protocol Breakdown
![[protocol breakdown chart]](200910031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27216539 (100.00%) 16939085418 (100.00%) 622.38
ip 27199712 ( 99.94%) 16934960575 ( 99.98%) 622.62
tcp 19713119 ( 72.43%) 14166324477 ( 83.63%) 718.62
http(s) 7013665 ( 25.77%) 8917920772 ( 52.65%) 1271.51
http(c) 5159083 ( 18.96%) 1290230565 ( 7.62%) 250.09
squid 614895 ( 2.26%) 186859536 ( 1.10%) 303.89
smtp 237905 ( 0.87%) 35638016 ( 0.21%) 149.80
nntp 16 ( 0.00%) 2980 ( 0.00%) 186.25
ftp 40278 ( 0.15%) 25055866 ( 0.15%) 622.07
pop3 12708 ( 0.05%) 12321472 ( 0.07%) 969.58
imap 1453 ( 0.01%) 291649 ( 0.00%) 200.72
telnet 25004 ( 0.09%) 1883454 ( 0.01%) 75.33
ssh 129257 ( 0.47%) 22753328 ( 0.13%) 176.03
dns 5446 ( 0.02%) 6867998 ( 0.04%) 1261.11
bgp 163 ( 0.00%) 87819 ( 0.00%) 538.77
napster 56 ( 0.00%) 28340 ( 0.00%) 506.07
realaud 1195 ( 0.00%) 133125 ( 0.00%) 111.40
rtsp 110059 ( 0.40%) 14199764 ( 0.08%) 129.02
icecast 17600 ( 0.06%) 4802990 ( 0.03%) 272.90
hotline 10 ( 0.00%) 2032 ( 0.00%) 203.20
other 6344018 ( 23.31%) 3647222937 ( 21.53%) 574.91
udp 6726339 ( 24.71%) 2700431435 ( 15.94%) 401.47
dns 1064117 ( 3.91%) 182499595 ( 1.08%) 171.50
realaud 227 ( 0.00%) 26687 ( 0.00%) 117.56
halflif 1675 ( 0.01%) 113562 ( 0.00%) 67.80
starcra 429 ( 0.00%) 88585 ( 0.00%) 206.49
everque 8411 ( 0.03%) 7521924 ( 0.04%) 894.30
unreal 107 ( 0.00%) 20630 ( 0.00%) 192.80
quake 52 ( 0.00%) 9452 ( 0.00%) 181.77
cuseeme 28 ( 0.00%) 5467 ( 0.00%) 195.25
other 5648877 ( 20.76%) 2509673412 ( 14.82%) 444.28
icmp 715269 ( 2.63%) 58545442 ( 0.35%) 81.85
ipip 341 ( 0.00%) 41878 ( 0.00%) 122.81
ipsec 387 ( 0.00%) 75306 ( 0.00%) 194.59
ip6 31966 ( 0.12%) 6442048 ( 0.04%) 201.53
other 12291 ( 0.05%) 3099989 ( 0.02%) 252.22
frag 17783 ( 0.07%) 14996098 ( 0.09%) 843.28
ip6 16827 ( 0.06%) 4124843 ( 0.02%) 245.13
tcp6 4674 ( 0.02%) 1876382 ( 0.01%) 401.45
http(s) 1031 ( 0.00%) 1105607 ( 0.01%) 1072.36
http(c) 1780 ( 0.01%) 180948 ( 0.00%) 101.66
smtp 902 ( 0.00%) 457637 ( 0.00%) 507.36
ssh 139 ( 0.00%) 48222 ( 0.00%) 346.92
dns 1 ( 0.00%) 94 ( 0.00%) 94.00
bgp 116 ( 0.00%) 15498 ( 0.00%) 133.60
other 705 ( 0.00%) 68376 ( 0.00%) 96.99
udp6 8649 ( 0.03%) 1805637 ( 0.01%) 208.77
dns 8640 ( 0.03%) 1804647 ( 0.01%) 208.87
other 9 ( 0.00%) 990 ( 0.00%) 110.00
icmp6 3442 ( 0.01%) 407109 ( 0.00%) 118.28
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 32 ( 0.00%) 31635 ( 0.00%) 988.59
tcpdump file: 200910031400.dump.gz (682.44 MB)