Traffic Trace Info
DumpFile: 200910111400.dump
FileSize: 1694.23MB
Id: 200910111400
StartTime: Sun Oct 11 14:00:00 2009
EndTime: Sun Oct 11 14:15:01 2009
TotalTime: 900.45 seconds
TotalCapSize: 1302.77MB CapLen: 96 bytes
# of packets: 25633497 (15337.35MB)
AvgRate: 142.89Mbps stddev:15.29M
IP flow (unique src/dst pair) Information
# of flows: 1245145 (avg. 20.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.7% 1.5% 1.1% 0.9% 0.9% 0.8% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 763533
Top 10 bandwidth usage (bytes/total in %):
30.3% 8.4% 6.7% 4.9% 4.5% 1.8% 1.8% 1.7% 1.7% 1.7%
# of IPv6 addresses: 838
Top 10 bandwidth usage (bytes/total in %):
12.3% 7.9% 7.8% 6.4% 6.3% 5.6% 5.6% 5.1% 4.7% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200910111400.pktlen.png)
detailed numbers
[ 32- 63]: 6162337
[ 64- 127]: 6186907
[ 128- 255]: 1554364
[ 256- 511]: 828729
[ 512- 1023]: 955584
[ 1024- 2047]: 9945576
Protocol Breakdown
![[protocol breakdown chart]](200910111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25633497 (100.00%) 16082373358 (100.00%) 627.40
ip 25615481 ( 99.93%) 16079476132 ( 99.98%) 627.72
tcp 16852834 ( 65.75%) 12425457085 ( 77.26%) 737.29
http(s) 5061872 ( 19.75%) 6634219853 ( 41.25%) 1310.63
http(c) 2854862 ( 11.14%) 423653349 ( 2.63%) 148.40
squid 766152 ( 2.99%) 300297026 ( 1.87%) 391.95
smtp 235185 ( 0.92%) 41166038 ( 0.26%) 175.04
nntp 6 ( 0.00%) 372 ( 0.00%) 62.00
ftp 63974 ( 0.25%) 14438030 ( 0.09%) 225.69
pop3 5889 ( 0.02%) 3160894 ( 0.02%) 536.75
imap 1684 ( 0.01%) 521301 ( 0.00%) 309.56
telnet 3497 ( 0.01%) 311000 ( 0.00%) 88.93
ssh 26509 ( 0.10%) 10773342 ( 0.07%) 406.40
dns 5431 ( 0.02%) 6878675 ( 0.04%) 1266.56
bgp 164 ( 0.00%) 55887 ( 0.00%) 340.77
napster 541 ( 0.00%) 372203 ( 0.00%) 687.99
realaud 655 ( 0.00%) 76572 ( 0.00%) 116.90
rtsp 7408 ( 0.03%) 5488951 ( 0.03%) 740.95
icecast 9933 ( 0.04%) 4154931 ( 0.03%) 418.30
hotline 14 ( 0.00%) 1667 ( 0.00%) 119.07
other 7809042 ( 30.46%) 4979886034 ( 30.96%) 637.71
udp 8207261 ( 32.02%) 3601456374 ( 22.39%) 438.81
dns 936994 ( 3.66%) 165449827 ( 1.03%) 176.58
realaud 1934 ( 0.01%) 122909 ( 0.00%) 63.55
halflif 2245 ( 0.01%) 192581 ( 0.00%) 85.78
starcra 407 ( 0.00%) 78222 ( 0.00%) 192.19
everque 434 ( 0.00%) 82750 ( 0.00%) 190.67
unreal 148 ( 0.00%) 27145 ( 0.00%) 183.41
quake 43 ( 0.00%) 8473 ( 0.00%) 197.05
cuseeme 15 ( 0.00%) 2948 ( 0.00%) 196.53
other 7263186 ( 28.33%) 3435133971 ( 21.36%) 472.95
icmp 525142 ( 2.05%) 46219920 ( 0.29%) 88.01
ipip 330 ( 0.00%) 38760 ( 0.00%) 117.45
ipsec 70 ( 0.00%) 11060 ( 0.00%) 158.00
ip6 29004 ( 0.11%) 6199188 ( 0.04%) 213.74
other 840 ( 0.00%) 93745 ( 0.00%) 111.60
frag 13847 ( 0.05%) 10145460 ( 0.06%) 732.68
ip6 18016 ( 0.07%) 2897226 ( 0.02%) 160.81
tcp6 5059 ( 0.02%) 646606 ( 0.00%) 127.81
http(s) 30 ( 0.00%) 12412 ( 0.00%) 413.73
http(c) 3017 ( 0.01%) 276416 ( 0.00%) 91.62
smtp 540 ( 0.00%) 207773 ( 0.00%) 384.76
ssh 77 ( 0.00%) 14466 ( 0.00%) 187.87
dns 3 ( 0.00%) 254 ( 0.00%) 84.67
bgp 122 ( 0.00%) 17891 ( 0.00%) 146.65
other 1270 ( 0.00%) 117394 ( 0.00%) 92.44
udp6 8577 ( 0.03%) 1658788 ( 0.01%) 193.40
dns 8462 ( 0.03%) 1642746 ( 0.01%) 194.13
other 115 ( 0.00%) 16042 ( 0.00%) 139.50
icmp6 4328 ( 0.02%) 566699 ( 0.00%) 130.94
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 22 ( 0.00%) 21053 ( 0.00%) 956.95
tcpdump file: 200910111400.dump.gz (641.56 MB)