Traffic Trace Info
DumpFile: 200910131400.dump
FileSize: 2463.58MB
Id: 200910131400
StartTime: Tue Oct 13 14:00:00 2009
EndTime: Tue Oct 13 14:15:01 2009
TotalTime: 900.44 seconds
TotalCapSize: 1908.30MB CapLen: 96 bytes
# of packets: 36389938 (20479.82MB)
AvgRate: 190.80Mbps stddev:13.77M
IP flow (unique src/dst pair) Information
# of flows: 1519135 (avg. 23.95 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.5% 0.8% 0.8% 0.7% 0.6% 0.6% 0.6% 0.5% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 883156
Top 10 bandwidth usage (bytes/total in %):
17.9% 9.9% 7.8% 6.6% 4.2% 3.8% 3.0% 2.5% 2.1% 1.8%
# of IPv6 addresses: 1521
Top 10 bandwidth usage (bytes/total in %):
42.4% 42.3% 5.2% 4.9% 3.7% 3.6% 3.3% 3.0% 2.8% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200910131400.pktlen.png)
detailed numbers
[ 32- 63]: 9453188
[ 64- 127]: 9497250
[ 128- 255]: 2014225
[ 256- 511]: 1190481
[ 512- 1023]: 1421242
[ 1024- 2047]: 12813552
Protocol Breakdown
![[protocol breakdown chart]](200910131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36389938 (100.00%) 21474649213 (100.00%) 590.13
ip 36326150 ( 99.82%) 21465685363 ( 99.96%) 590.92
tcp 26986226 ( 74.16%) 17643440492 ( 82.16%) 653.79
http(s) 7866046 ( 21.62%) 9121368226 ( 42.48%) 1159.59
http(c) 8043072 ( 22.10%) 2405516770 ( 11.20%) 299.08
squid 1253615 ( 3.44%) 460987186 ( 2.15%) 367.73
smtp 270984 ( 0.74%) 64620106 ( 0.30%) 238.46
nntp 377 ( 0.00%) 35618 ( 0.00%) 94.48
ftp 111231 ( 0.31%) 10302646 ( 0.05%) 92.62
pop3 23494 ( 0.06%) 14108397 ( 0.07%) 600.51
imap 4527 ( 0.01%) 983927 ( 0.00%) 217.35
telnet 8160 ( 0.02%) 627749 ( 0.00%) 76.93
ssh 141643 ( 0.39%) 12206333 ( 0.06%) 86.18
dns 6385 ( 0.02%) 6951140 ( 0.03%) 1088.67
bgp 173 ( 0.00%) 57158 ( 0.00%) 330.39
napster 530 ( 0.00%) 64238 ( 0.00%) 121.20
realaud 3870 ( 0.01%) 299138 ( 0.00%) 77.30
rtsp 302082 ( 0.83%) 125166565 ( 0.58%) 414.35
icecast 23718 ( 0.07%) 6472597 ( 0.03%) 272.90
hotline 12 ( 0.00%) 1705 ( 0.00%) 142.08
other 8926229 ( 24.53%) 5413666313 ( 25.21%) 606.49
udp 8552529 ( 23.50%) 3729993284 ( 17.37%) 436.13
dns 1349583 ( 3.71%) 271045377 ( 1.26%) 200.84
realaud 5170 ( 0.01%) 4327502 ( 0.02%) 837.04
halflif 2224 ( 0.01%) 143565 ( 0.00%) 64.55
starcra 593 ( 0.00%) 112014 ( 0.00%) 188.89
everque 722 ( 0.00%) 101032 ( 0.00%) 139.93
unreal 131 ( 0.00%) 24553 ( 0.00%) 187.43
quake 89 ( 0.00%) 18220 ( 0.00%) 204.72
cuseeme 20 ( 0.00%) 3263 ( 0.00%) 163.15
other 7189568 ( 19.76%) 3453836328 ( 16.08%) 480.40
icmp 725897 ( 1.99%) 72893390 ( 0.34%) 100.42
ipip 349 ( 0.00%) 42872 ( 0.00%) 122.84
ipsec 70 ( 0.00%) 11060 ( 0.00%) 158.00
ip6 41753 ( 0.11%) 8280173 ( 0.04%) 198.31
other 19326 ( 0.05%) 11024092 ( 0.05%) 570.43
frag 15020 ( 0.04%) 11234508 ( 0.05%) 747.97
ip6 63788 ( 0.18%) 8963850 ( 0.04%) 140.53
tcp6 44734 ( 0.12%) 5044295 ( 0.02%) 112.76
http(s) 414 ( 0.00%) 384625 ( 0.00%) 929.05
http(c) 1588 ( 0.00%) 147391 ( 0.00%) 92.82
squid 10 ( 0.00%) 740 ( 0.00%) 74.00
smtp 1018 ( 0.00%) 464325 ( 0.00%) 456.11
ssh 1 ( 0.00%) 74 ( 0.00%) 74.00
dns 1 ( 0.00%) 94 ( 0.00%) 94.00
bgp 122 ( 0.00%) 15512 ( 0.00%) 127.15
icecast 5 ( 0.00%) 370 ( 0.00%) 74.00
other 41575 ( 0.11%) 4031164 ( 0.02%) 96.96
udp6 14703 ( 0.04%) 3372489 ( 0.02%) 229.37
dns 13619 ( 0.04%) 3057339 ( 0.01%) 224.49
realaud 1 ( 0.00%) 108 ( 0.00%) 108.00
halflif 1 ( 0.00%) 117 ( 0.00%) 117.00
other 1082 ( 0.00%) 314925 ( 0.00%) 291.06
icmp6 4289 ( 0.01%) 506254 ( 0.00%) 118.04
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 32 ( 0.00%) 36732 ( 0.00%) 1147.88
tcpdump file: 200910131400.dump.gz (930.68 MB)