Traffic Trace Info
DumpFile: 200910051400.dump
FileSize: 2324.63MB
Id: 200910051400
StartTime: Mon Oct 5 14:00:01 2009
EndTime: Mon Oct 5 14:15:01 2009
TotalTime: 900.34 seconds
TotalCapSize: 1798.36MB CapLen: 96 bytes
# of packets: 34488776 (19016.27MB)
AvgRate: 177.18Mbps stddev:18.40M
IP flow (unique src/dst pair) Information
# of flows: 1676861 (avg. 20.57 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.2% 1.1% 1.0% 0.9% 0.9% 0.8% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 981423
Top 10 bandwidth usage (bytes/total in %):
21.7% 10.0% 4.6% 2.7% 2.0% 2.0% 1.9% 1.8% 1.7% 1.4%
# of IPv6 addresses: 904
Top 10 bandwidth usage (bytes/total in %):
21.0% 20.9% 10.9% 10.8% 5.3% 5.2% 5.2% 4.6% 4.1% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200910051400.pktlen.png)
detailed numbers
[ 32- 63]: 9010904
[ 64- 127]: 9179767
[ 128- 255]: 1953429
[ 256- 511]: 1153258
[ 512- 1023]: 1155701
[ 1024- 2047]: 12035717
Protocol Breakdown
![[protocol breakdown chart]](200910051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34488776 (100.00%) 19940008710 (100.00%) 578.16
ip 34449280 ( 99.89%) 19931634713 ( 99.96%) 578.58
tcp 24934213 ( 72.30%) 16283237303 ( 81.66%) 653.05
http(s) 7568551 ( 21.94%) 9598365626 ( 48.14%) 1268.19
http(c) 5900803 ( 17.11%) 777604969 ( 3.90%) 131.78
squid 1121266 ( 3.25%) 355199975 ( 1.78%) 316.78
smtp 323124 ( 0.94%) 209289575 ( 1.05%) 647.71
nntp 38 ( 0.00%) 4172 ( 0.00%) 109.79
ftp 92550 ( 0.27%) 29798474 ( 0.15%) 321.97
pop3 18751 ( 0.05%) 5166773 ( 0.03%) 275.55
imap 3611 ( 0.01%) 911071 ( 0.00%) 252.30
telnet 7411 ( 0.02%) 552450 ( 0.00%) 74.54
ssh 167365 ( 0.49%) 28695172 ( 0.14%) 171.45
dns 6194 ( 0.02%) 6912412 ( 0.03%) 1115.99
bgp 184 ( 0.00%) 101158 ( 0.00%) 549.77
napster 690 ( 0.00%) 98612 ( 0.00%) 142.92
realaud 933 ( 0.00%) 113836 ( 0.00%) 122.01
rtsp 66169 ( 0.19%) 30454610 ( 0.15%) 460.25
icecast 28121 ( 0.08%) 12976314 ( 0.07%) 461.45
hotline 38 ( 0.00%) 3268 ( 0.00%) 86.00
other 9628394 ( 27.92%) 5226987636 ( 26.21%) 542.87
udp 8608738 ( 24.96%) 3541105324 ( 17.76%) 411.34
dns 1350835 ( 3.92%) 239829389 ( 1.20%) 177.54
rip 2 ( 0.00%) 463 ( 0.00%) 231.50
realaud 1967 ( 0.01%) 127582 ( 0.00%) 64.86
halflif 161 ( 0.00%) 20040 ( 0.00%) 124.47
starcra 600 ( 0.00%) 115879 ( 0.00%) 193.13
everque 815 ( 0.00%) 155381 ( 0.00%) 190.65
unreal 116 ( 0.00%) 22291 ( 0.00%) 192.16
quake 76 ( 0.00%) 13035 ( 0.00%) 171.51
cuseeme 27 ( 0.00%) 4458 ( 0.00%) 165.11
other 7252938 ( 21.03%) 3300611141 ( 16.55%) 455.07
icmp 807530 ( 2.34%) 66969222 ( 0.34%) 82.93
ipip 332 ( 0.00%) 42748 ( 0.00%) 128.76
ipsec 5206 ( 0.02%) 1936612 ( 0.01%) 372.00
ip6 46041 ( 0.13%) 21385871 ( 0.11%) 464.50
other 47220 ( 0.14%) 16957633 ( 0.09%) 359.12
frag 12820 ( 0.04%) 10175218 ( 0.05%) 793.70
ip6 39496 ( 0.11%) 8373997 ( 0.04%) 212.02
tcp6 22310 ( 0.06%) 5019706 ( 0.03%) 225.00
http(s) 1503 ( 0.00%) 1953647 ( 0.01%) 1299.83
http(c) 4073 ( 0.01%) 402587 ( 0.00%) 98.84
smtp 768 ( 0.00%) 345055 ( 0.00%) 449.29
ssh 694 ( 0.00%) 441476 ( 0.00%) 636.13
dns 10 ( 0.00%) 2970 ( 0.00%) 297.00
bgp 114 ( 0.00%) 14329 ( 0.00%) 125.69
other 15148 ( 0.04%) 1859642 ( 0.01%) 122.76
udp6 11907 ( 0.03%) 2713664 ( 0.01%) 227.90
dns 11881 ( 0.03%) 2710810 ( 0.01%) 228.16
unreal 1 ( 0.00%) 104 ( 0.00%) 104.00
other 25 ( 0.00%) 2750 ( 0.00%) 110.00
icmp6 5225 ( 0.02%) 617329 ( 0.00%) 118.15
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 23 ( 0.00%) 19082 ( 0.00%) 829.65
tcpdump file: 200910051400.dump.gz (895.31 MB)