Traffic Trace Info
DumpFile: 200910041400.dump
FileSize: 1798.45MB
Id: 200910041400
StartTime: Sun Oct 4 14:00:01 2009
EndTime: Sun Oct 4 14:15:00 2009
TotalTime: 899.67 seconds
TotalCapSize: 1385.10MB CapLen: 96 bytes
# of packets: 27088914 (15400.62MB)
AvgRate: 143.60Mbps stddev:13.62M
IP flow (unique src/dst pair) Information
# of flows: 1496757 (avg. 18.10 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 3.1% 2.1% 1.7% 1.3% 1.0% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 904902
Top 10 bandwidth usage (bytes/total in %):
25.1% 11.5% 6.7% 4.1% 3.8% 3.4% 3.1% 2.8% 2.1% 1.7%
# of IPv6 addresses: 803
Top 10 bandwidth usage (bytes/total in %):
19.8% 11.2% 8.8% 7.3% 5.0% 4.5% 4.4% 4.4% 4.0% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200910041400.pktlen.png)
detailed numbers
[ 32- 63]: 7583736
[ 64- 127]: 6290606
[ 128- 255]: 1377961
[ 256- 511]: 896493
[ 512- 1023]: 1182650
[ 1024- 2047]: 9757468
Protocol Breakdown
![[protocol breakdown chart]](200910041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27088914 (100.00%) 16148716925 (100.00%) 596.14
ip 27073627 ( 99.94%) 16145855312 ( 99.98%) 596.37
tcp 18138648 ( 66.96%) 12924498885 ( 80.03%) 712.54
http(s) 5507875 ( 20.33%) 6951239440 ( 43.05%) 1262.05
http(c) 3017347 ( 11.14%) 357128243 ( 2.21%) 118.36
squid 1201601 ( 4.44%) 372924901 ( 2.31%) 310.36
smtp 187469 ( 0.69%) 39526820 ( 0.24%) 210.84
nntp 87 ( 0.00%) 10414 ( 0.00%) 119.70
ftp 98049 ( 0.36%) 8808185 ( 0.05%) 89.83
pop3 6238 ( 0.02%) 4319299 ( 0.03%) 692.42
imap 754 ( 0.00%) 138626 ( 0.00%) 183.85
telnet 15218 ( 0.06%) 1126919 ( 0.01%) 74.05
ssh 96157 ( 0.35%) 17015094 ( 0.11%) 176.95
dns 5490 ( 0.02%) 6995974 ( 0.04%) 1274.31
bgp 235 ( 0.00%) 114952 ( 0.00%) 489.16
napster 594 ( 0.00%) 296555 ( 0.00%) 499.25
realaud 2393 ( 0.01%) 528945 ( 0.00%) 221.04
rtsp 21133 ( 0.08%) 27662455 ( 0.17%) 1308.97
icecast 6471 ( 0.02%) 1216483 ( 0.01%) 187.99
hotline 66 ( 0.00%) 4136 ( 0.00%) 62.67
other 7971445 ( 29.43%) 5135439884 ( 31.80%) 644.23
udp 8122417 ( 29.98%) 3093582306 ( 19.16%) 380.87
dns 965209 ( 3.56%) 161607970 ( 1.00%) 167.43
realaud 1063 ( 0.00%) 76958 ( 0.00%) 72.40
halflif 120 ( 0.00%) 21080 ( 0.00%) 175.67
starcra 4947 ( 0.02%) 400124 ( 0.00%) 80.88
everque 3081 ( 0.01%) 2058321 ( 0.01%) 668.07
unreal 1158 ( 0.00%) 81818 ( 0.00%) 70.65
quake 66 ( 0.00%) 11056 ( 0.00%) 167.52
cuseeme 15 ( 0.00%) 2251 ( 0.00%) 150.07
other 7145131 ( 26.38%) 2929017365 ( 18.14%) 409.93
icmp 721749 ( 2.66%) 60252910 ( 0.37%) 83.48
ipip 346 ( 0.00%) 43250 ( 0.00%) 125.00
ipsec 74 ( 0.00%) 11692 ( 0.00%) 158.00
ip6 43493 ( 0.16%) 21733428 ( 0.13%) 499.70
other 46900 ( 0.17%) 45732841 ( 0.28%) 975.11
frag 13274 ( 0.05%) 11818679 ( 0.07%) 890.36
ip6 15287 ( 0.06%) 2861613 ( 0.02%) 187.19
tcp6 4759 ( 0.02%) 939404 ( 0.01%) 197.40
http(s) 34 ( 0.00%) 16596 ( 0.00%) 488.12
http(c) 1537 ( 0.01%) 141063 ( 0.00%) 91.78
smtp 1107 ( 0.00%) 581803 ( 0.00%) 525.57
ftp 5 ( 0.00%) 458 ( 0.00%) 91.60
ssh 686 ( 0.00%) 65340 ( 0.00%) 95.25
dns 13 ( 0.00%) 5732 ( 0.00%) 440.92
bgp 135 ( 0.00%) 16067 ( 0.00%) 119.01
other 1242 ( 0.00%) 112345 ( 0.00%) 90.45
udp6 7299 ( 0.03%) 1521118 ( 0.01%) 208.40
dns 7285 ( 0.03%) 1519578 ( 0.01%) 208.59
other 14 ( 0.00%) 1540 ( 0.00%) 110.00
icmp6 3177 ( 0.01%) 378172 ( 0.00%) 119.03
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 22 ( 0.00%) 18839 ( 0.00%) 856.32
tcpdump file: 200910041400.dump.gz (672.01 MB)