Traffic Trace Info
DumpFile: 200910081400.dump
FileSize: 2244.74MB
Id: 200910081400
StartTime: Thu Oct 8 14:00:01 2009
EndTime: Thu Oct 8 14:15:00 2009
TotalTime: 899.28 seconds
TotalCapSize: 1735.60MB CapLen: 96 bytes
# of packets: 33366597 (19485.52MB)
AvgRate: 181.72Mbps stddev:15.14M
IP flow (unique src/dst pair) Information
# of flows: 1424845 (avg. 23.42 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.3% 1.1% 0.9% 0.9% 0.8% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 835664
Top 10 bandwidth usage (bytes/total in %):
24.0% 10.0% 8.1% 3.2% 2.3% 1.9% 1.9% 1.9% 1.5% 1.5%
# of IPv6 addresses: 982
Top 10 bandwidth usage (bytes/total in %):
88.1% 79.1% 9.0% 1.3% 1.2% 1.2% 0.9% 0.8% 0.6% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200910081400.pktlen.png)
detailed numbers
[ 32- 63]: 8226004
[ 64- 127]: 8653199
[ 128- 255]: 1829635
[ 256- 511]: 1059727
[ 512- 1023]: 1122583
[ 1024- 2047]: 12475449
Protocol Breakdown
![[protocol breakdown chart]](200910081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33366597 (100.00%) 20432050651 (100.00%) 612.35
ip 33281071 ( 99.74%) 20389558669 ( 99.79%) 612.65
tcp 23786135 ( 71.29%) 16061099056 ( 78.61%) 675.23
http(s) 7378667 ( 22.11%) 9398217719 ( 46.00%) 1273.70
http(c) 5417527 ( 16.24%) 740241611 ( 3.62%) 136.64
squid 862634 ( 2.59%) 307085141 ( 1.50%) 355.99
smtp 321780 ( 0.96%) 100132879 ( 0.49%) 311.18
nntp 6 ( 0.00%) 360 ( 0.00%) 60.00
ftp 110017 ( 0.33%) 46085288 ( 0.23%) 418.89
pop3 13815 ( 0.04%) 5875173 ( 0.03%) 425.27
imap 6754 ( 0.02%) 5905753 ( 0.03%) 874.41
telnet 5761 ( 0.02%) 432926 ( 0.00%) 75.15
ssh 138727 ( 0.42%) 33793784 ( 0.17%) 243.60
dns 5652 ( 0.02%) 6875365 ( 0.03%) 1216.45
bgp 151 ( 0.00%) 46511 ( 0.00%) 308.02
napster 1306 ( 0.00%) 932976 ( 0.00%) 714.38
realaud 909 ( 0.00%) 108390 ( 0.00%) 119.24
rtsp 473025 ( 1.42%) 83264952 ( 0.41%) 176.03
icecast 17509 ( 0.05%) 12367364 ( 0.06%) 706.34
hotline 4 ( 0.00%) 244 ( 0.00%) 61.00
other 9031828 ( 27.07%) 5319725607 ( 26.04%) 589.00
udp 8848293 ( 26.52%) 4259583884 ( 20.85%) 481.40
dns 1331925 ( 3.99%) 231141800 ( 1.13%) 173.54
realaud 1351 ( 0.00%) 319847 ( 0.00%) 236.75
halflif 247 ( 0.00%) 25765 ( 0.00%) 104.31
starcra 495 ( 0.00%) 85216 ( 0.00%) 172.15
everque 2244 ( 0.01%) 1442684 ( 0.01%) 642.91
unreal 140 ( 0.00%) 25624 ( 0.00%) 183.03
quake 62 ( 0.00%) 10810 ( 0.00%) 174.35
cuseeme 20 ( 0.00%) 2590 ( 0.00%) 129.50
other 7501909 ( 22.48%) 4025543951 ( 19.70%) 536.60
icmp 579244 ( 1.74%) 51857638 ( 0.25%) 89.53
ipip 342 ( 0.00%) 42674 ( 0.00%) 124.78
ipsec 72 ( 0.00%) 11376 ( 0.00%) 158.00
ip6 37775 ( 0.11%) 11682916 ( 0.06%) 309.28
other 29210 ( 0.09%) 5281125 ( 0.03%) 180.80
frag 34376 ( 0.10%) 26096408 ( 0.13%) 759.15
ip6 85526 ( 0.26%) 42491982 ( 0.21%) 496.83
tcp6 70217 ( 0.21%) 39206215 ( 0.19%) 558.36
http(s) 911 ( 0.00%) 1055147 ( 0.01%) 1158.23
http(c) 2998 ( 0.01%) 278873 ( 0.00%) 93.02
smtp 638 ( 0.00%) 286798 ( 0.00%) 449.53
ssh 311 ( 0.00%) 28330 ( 0.00%) 91.09
bgp 125 ( 0.00%) 17390 ( 0.00%) 139.12
other 65234 ( 0.20%) 37539677 ( 0.18%) 575.46
udp6 11754 ( 0.04%) 2835713 ( 0.01%) 241.26
dns 11737 ( 0.04%) 2833843 ( 0.01%) 241.45
other 17 ( 0.00%) 1870 ( 0.00%) 110.00
icmp6 3506 ( 0.01%) 427369 ( 0.00%) 121.90
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 19 ( 0.00%) 18605 ( 0.00%) 979.21
tcpdump file: 200910081400.dump.gz (874.27 MB)