Traffic Trace Info
DumpFile: 200910071400.dump
FileSize: 2386.87MB
Id: 200910071400
StartTime: Wed Oct 7 14:00:01 2009
EndTime: Wed Oct 7 14:15:00 2009
TotalTime: 899.78 seconds
TotalCapSize: 1852.52MB CapLen: 96 bytes
# of packets: 35018458 (18643.61MB)
AvgRate: 173.82Mbps stddev:13.47M
IP flow (unique src/dst pair) Information
# of flows: 1739942 (avg. 20.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.3% 1.2% 1.1% 1.0% 0.8% 0.7% 0.7% 0.7% 0.6% 0.5%
IP address Information
# of IPv4 addresses: 975143
Top 10 bandwidth usage (bytes/total in %):
24.7% 7.8% 5.0% 3.4% 3.0% 2.4% 2.1% 2.0% 1.9% 1.9%
# of IPv6 addresses: 947
Top 10 bandwidth usage (bytes/total in %):
95.5% 95.5% 1.1% 1.1% 0.5% 0.4% 0.4% 0.3% 0.2% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200910071400.pktlen.png)
detailed numbers
[ 32- 63]: 9254019
[ 64- 127]: 9878901
[ 128- 255]: 1971804
[ 256- 511]: 1195367
[ 512- 1023]: 1112828
[ 1024- 2047]: 11605539
Protocol Breakdown
![[protocol breakdown chart]](200910071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35018458 (100.00%) 19549246052 (100.00%) 558.26
ip 34898900 ( 99.66%) 19401758703 ( 99.25%) 555.94
tcp 26185867 ( 74.78%) 16046215074 ( 82.08%) 612.78
http(s) 7753682 ( 22.14%) 9751214220 ( 49.88%) 1257.62
http(c) 7400035 ( 21.13%) 901510944 ( 4.61%) 121.83
squid 923085 ( 2.64%) 239537420 ( 1.23%) 259.50
smtp 336508 ( 0.96%) 108363343 ( 0.55%) 322.02
nntp 34 ( 0.00%) 2705 ( 0.00%) 79.56
ftp 110631 ( 0.32%) 38273150 ( 0.20%) 345.95
pop3 16361 ( 0.05%) 6334663 ( 0.03%) 387.18
imap 2383 ( 0.01%) 323492 ( 0.00%) 135.75
telnet 7612 ( 0.02%) 837606 ( 0.00%) 110.04
ssh 76202 ( 0.22%) 19386966 ( 0.10%) 254.42
dns 6219 ( 0.02%) 6915307 ( 0.04%) 1111.96
bgp 215 ( 0.00%) 107523 ( 0.00%) 500.11
napster 136 ( 0.00%) 13445 ( 0.00%) 98.86
realaud 1630 ( 0.00%) 171024 ( 0.00%) 104.92
rtsp 274284 ( 0.78%) 68485046 ( 0.35%) 249.69
icecast 19863 ( 0.06%) 12865793 ( 0.07%) 647.73
hotline 42 ( 0.00%) 2657 ( 0.00%) 63.26
other 9256742 ( 26.43%) 4891857590 ( 25.02%) 528.46
udp 7987758 ( 22.81%) 3285522000 ( 16.81%) 411.32
dns 1366373 ( 3.90%) 250929621 ( 1.28%) 183.65
realaud 1198 ( 0.00%) 90544 ( 0.00%) 75.58
halflif 129 ( 0.00%) 19180 ( 0.00%) 148.68
starcra 605 ( 0.00%) 120817 ( 0.00%) 199.70
everque 98090 ( 0.28%) 78927042 ( 0.40%) 804.64
unreal 154 ( 0.00%) 27433 ( 0.00%) 178.14
quake 71 ( 0.00%) 9789 ( 0.00%) 137.87
cuseeme 17 ( 0.00%) 2764 ( 0.00%) 162.59
other 6517729 ( 18.61%) 2954313630 ( 15.11%) 453.27
icmp 676473 ( 1.93%) 58987487 ( 0.30%) 87.20
ipip 344 ( 0.00%) 41681 ( 0.00%) 121.17
ipsec 72 ( 0.00%) 11376 ( 0.00%) 158.00
ip6 33323 ( 0.10%) 6442301 ( 0.03%) 193.33
other 15063 ( 0.04%) 4538784 ( 0.02%) 301.32
frag 22674 ( 0.06%) 21667072 ( 0.11%) 955.59
ip6 119558 ( 0.34%) 147487349 ( 0.75%) 1233.61
tcp6 99111 ( 0.28%) 143512369 ( 0.73%) 1448.00
http(s) 94255 ( 0.27%) 142500520 ( 0.73%) 1511.86
http(c) 1825 ( 0.01%) 172843 ( 0.00%) 94.71
smtp 1360 ( 0.00%) 675131 ( 0.00%) 496.42
ssh 1 ( 0.00%) 74 ( 0.00%) 74.00
dns 5 ( 0.00%) 724 ( 0.00%) 144.80
bgp 120 ( 0.00%) 17176 ( 0.00%) 143.13
other 1545 ( 0.00%) 145901 ( 0.00%) 94.43
udp6 14624 ( 0.04%) 3172655 ( 0.02%) 216.95
dns 14602 ( 0.04%) 3170235 ( 0.02%) 217.11
other 22 ( 0.00%) 2420 ( 0.00%) 110.00
icmp6 4088 ( 0.01%) 484019 ( 0.00%) 118.40
ip4 1593 ( 0.00%) 281736 ( 0.00%) 176.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 112 ( 0.00%) 32490 ( 0.00%) 290.09
tcpdump file: 200910071400.dump.gz (906.80 MB)