Traffic Trace Info
DumpFile: 200910061400.dump
FileSize: 2489.61MB
Id: 200910061400
StartTime: Tue Oct 6 14:00:00 2009
EndTime: Tue Oct 6 14:15:01 2009
TotalTime: 900.51 seconds
TotalCapSize: 1929.23MB CapLen: 96 bytes
# of packets: 36724666 (21189.67MB)
AvgRate: 197.38Mbps stddev:17.64M
IP flow (unique src/dst pair) Information
# of flows: 1654036 (avg. 22.20 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 1.3% 1.1% 1.1% 0.7% 0.7% 0.7% 0.6% 0.6% 0.5%
IP address Information
# of IPv4 addresses: 969795
Top 10 bandwidth usage (bytes/total in %):
23.9% 7.3% 5.5% 4.9% 4.4% 4.3% 3.5% 2.9% 2.6% 1.9%
# of IPv6 addresses: 1583
Top 10 bandwidth usage (bytes/total in %):
19.4% 19.4% 18.8% 18.3% 5.5% 4.5% 4.3% 4.3% 4.0% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200910061400.pktlen.png)
detailed numbers
[ 32- 63]: 9266585
[ 64- 127]: 9611670
[ 128- 255]: 1911687
[ 256- 511]: 1185206
[ 512- 1023]: 1341684
[ 1024- 2047]: 13407834
Protocol Breakdown
![[protocol breakdown chart]](200910061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36724666 (100.00%) 22218979763 (100.00%) 605.02
ip 36687613 ( 99.90%) 22210825520 ( 99.96%) 605.40
tcp 27291451 ( 74.31%) 18308864761 ( 82.40%) 670.86
http(s) 7858181 ( 21.40%) 9862327638 ( 44.39%) 1255.04
http(c) 6463996 ( 17.60%) 898400840 ( 4.04%) 138.99
squid 991557 ( 2.70%) 281185159 ( 1.27%) 283.58
smtp 252433 ( 0.69%) 114303307 ( 0.51%) 452.81
nntp 31 ( 0.00%) 3466 ( 0.00%) 111.81
ftp 69796 ( 0.19%) 5131929 ( 0.02%) 73.53
pop3 13512 ( 0.04%) 5293170 ( 0.02%) 391.74
imap 2256 ( 0.01%) 517693 ( 0.00%) 229.47
telnet 15554 ( 0.04%) 1154598 ( 0.01%) 74.23
ssh 56724 ( 0.15%) 9940843 ( 0.04%) 175.25
dns 5606 ( 0.02%) 7117698 ( 0.03%) 1269.66
bgp 152 ( 0.00%) 60739 ( 0.00%) 399.60
napster 2746 ( 0.01%) 899481 ( 0.00%) 327.56
realaud 1693 ( 0.00%) 161674 ( 0.00%) 95.50
rtsp 329764 ( 0.90%) 85547876 ( 0.39%) 259.42
icecast 7128 ( 0.02%) 2295128 ( 0.01%) 321.99
hotline 493 ( 0.00%) 39198 ( 0.00%) 79.51
other 11219742 ( 30.55%) 7034477863 ( 31.66%) 626.97
udp 8499328 ( 23.14%) 3801805856 ( 17.11%) 447.31
dns 1250027 ( 3.40%) 229063637 ( 1.03%) 183.25
rip 1 ( 0.00%) 104 ( 0.00%) 104.00
realaud 2257 ( 0.01%) 143947 ( 0.00%) 63.78
halflif 2598 ( 0.01%) 168465 ( 0.00%) 64.84
starcra 470 ( 0.00%) 91452 ( 0.00%) 194.58
everque 776 ( 0.00%) 127285 ( 0.00%) 164.03
unreal 92 ( 0.00%) 17546 ( 0.00%) 190.72
quake 65 ( 0.00%) 9947 ( 0.00%) 153.03
cuseeme 25 ( 0.00%) 3966 ( 0.00%) 158.64
other 7241256 ( 19.72%) 3571858745 ( 16.08%) 493.27
icmp 810144 ( 2.21%) 67982384 ( 0.31%) 83.91
ipip 337 ( 0.00%) 40854 ( 0.00%) 121.23
ipsec 730 ( 0.00%) 570180 ( 0.00%) 781.07
ip6 31247 ( 0.09%) 6628387 ( 0.03%) 212.13
other 54376 ( 0.15%) 24933098 ( 0.11%) 458.53
frag 7169 ( 0.02%) 5334243 ( 0.02%) 744.07
ip6 37053 ( 0.10%) 8154243 ( 0.04%) 220.07
tcp6 17849 ( 0.05%) 4246766 ( 0.02%) 237.93
http(s) 1303 ( 0.00%) 1753815 ( 0.01%) 1345.98
http(c) 1821 ( 0.00%) 180117 ( 0.00%) 98.91
smtp 455 ( 0.00%) 189746 ( 0.00%) 417.02
ssh 674 ( 0.00%) 349172 ( 0.00%) 518.06
dns 11 ( 0.00%) 1126 ( 0.00%) 102.36
bgp 120 ( 0.00%) 17250 ( 0.00%) 143.75
other 13465 ( 0.04%) 1755540 ( 0.01%) 130.38
udp6 13518 ( 0.04%) 3197220 ( 0.01%) 236.52
dns 12548 ( 0.03%) 3017404 ( 0.01%) 240.47
other 970 ( 0.00%) 179816 ( 0.00%) 185.38
icmp6 5536 ( 0.02%) 637417 ( 0.00%) 115.14
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 120 ( 0.00%) 68760 ( 0.00%) 573.00
tcpdump file: 200910061400.dump.gz (953.62 MB)