Traffic Trace Info
DumpFile: 200910141400.dump
FileSize: 2657.49MB
Id: 200910141400
StartTime: Wed Oct 14 14:00:01 2009
EndTime: Wed Oct 14 14:15:01 2009
TotalTime: 899.81 seconds
TotalCapSize: -2030.47MB CapLen: 96 bytes
# of packets: 38794499 (23091.33MB)
AvgRate: 215.28Mbps stddev:19.26M
IP flow (unique src/dst pair) Information
# of flows: 1447890 (avg. 26.79 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.7% 1.7% 1.4% 1.4% 1.4% 1.4% 1.0% 0.8% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 834592
Top 10 bandwidth usage (bytes/total in %):
19.0% 9.5% 6.3% 6.1% 5.8% 3.2% 2.3% 1.9% 1.7% 1.7%
# of IPv6 addresses: 943
Top 10 bandwidth usage (bytes/total in %):
79.4% 73.5% 5.8% 2.5% 1.6% 1.5% 1.2% 1.1% 1.1% 1.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200910141400.pktlen.png)
detailed numbers
[ 32- 63]: 10116033
[ 64- 127]: 9744286
[ 128- 255]: 1647952
[ 256- 511]: 1268108
[ 512- 1023]: 1263608
[ 1024- 2047]: 14754512
Protocol Breakdown
![[protocol breakdown chart]](200910141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38794499 (100.00%) 24213015648 (100.00%) 624.14
ip 38744343 ( 99.87%) 24188396451 ( 99.90%) 624.31
tcp 30505875 ( 78.63%) 21060822091 ( 86.98%) 690.39
http(s) 10804241 ( 27.85%) 13509165464 ( 55.79%) 1250.36
http(c) 9303748 ( 23.98%) 2359458060 ( 9.74%) 253.60
squid 1044757 ( 2.69%) 239990549 ( 0.99%) 229.71
smtp 307203 ( 0.79%) 80146530 ( 0.33%) 260.89
nntp 36 ( 0.00%) 2740 ( 0.00%) 76.11
ftp 48341 ( 0.12%) 22874817 ( 0.09%) 473.20
pop3 71727 ( 0.18%) 18382602 ( 0.08%) 256.29
imap 14168 ( 0.04%) 1665120 ( 0.01%) 117.53
telnet 16630 ( 0.04%) 1341473 ( 0.01%) 80.67
ssh 95896 ( 0.25%) 11839757 ( 0.05%) 123.46
dns 6530 ( 0.02%) 6952262 ( 0.03%) 1064.66
bgp 142 ( 0.00%) 48364 ( 0.00%) 340.59
napster 7722 ( 0.02%) 5312814 ( 0.02%) 688.01
realaud 1387 ( 0.00%) 199606 ( 0.00%) 143.91
rtsp 187978 ( 0.48%) 98035165 ( 0.40%) 521.52
icecast 115682 ( 0.30%) 102268267 ( 0.42%) 884.05
other 8479577 ( 21.86%) 4603131901 ( 19.01%) 542.85
udp 7398981 ( 19.07%) 3021692944 ( 12.48%) 408.39
dns 1309569 ( 3.38%) 266015223 ( 1.10%) 203.13
realaud 1938 ( 0.00%) 125557 ( 0.00%) 64.79
halflif 1613 ( 0.00%) 106948 ( 0.00%) 66.30
starcra 396 ( 0.00%) 81120 ( 0.00%) 204.85
everque 576 ( 0.00%) 104891 ( 0.00%) 182.10
unreal 120 ( 0.00%) 21433 ( 0.00%) 178.61
quake 67 ( 0.00%) 12267 ( 0.00%) 183.09
cuseeme 28 ( 0.00%) 4260 ( 0.00%) 152.14
other 6080959 ( 15.67%) 2754777703 ( 11.38%) 453.02
icmp 682219 ( 1.76%) 76896673 ( 0.32%) 112.72
ipip 335 ( 0.00%) 40944 ( 0.00%) 122.22
ipsec 86 ( 0.00%) 13252 ( 0.00%) 154.09
ip6 33609 ( 0.09%) 12180900 ( 0.05%) 362.43
other 123238 ( 0.32%) 16749647 ( 0.07%) 135.91
frag 19552 ( 0.05%) 15600219 ( 0.06%) 797.88
ip6 50156 ( 0.13%) 24619197 ( 0.10%) 490.85
tcp6 31377 ( 0.08%) 20767341 ( 0.09%) 661.87
http(s) 552 ( 0.00%) 442769 ( 0.00%) 802.12
http(c) 1965 ( 0.01%) 208666 ( 0.00%) 106.19
smtp 836 ( 0.00%) 377250 ( 0.00%) 451.26
ssh 1 ( 0.00%) 86 ( 0.00%) 86.00
dns 10 ( 0.00%) 3712 ( 0.00%) 371.20
bgp 96 ( 0.00%) 11434 ( 0.00%) 119.10
other 27917 ( 0.07%) 19723424 ( 0.08%) 706.50
udp6 12587 ( 0.03%) 2986360 ( 0.01%) 237.26
dns 12553 ( 0.03%) 2982703 ( 0.01%) 237.61
other 34 ( 0.00%) 3657 ( 0.00%) 107.56
icmp6 6072 ( 0.02%) 774052 ( 0.00%) 127.48
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 90 ( 0.00%) 87364 ( 0.00%) 970.71
tcpdump file: 200910141400.dump.gz (981.34 MB)