Traffic Trace Info
DumpFile: 200910211400.dump
FileSize: 2879.54MB
Id: 200910211400
StartTime: Wed Oct 21 14:00:01 2009
EndTime: Wed Oct 21 14:15:01 2009
TotalTime: 899.72 seconds
TotalCapSize: -1865.61MB CapLen: 96 bytes
# of packets: 42534260 (25308.81MB)
AvgRate: 235.96Mbps stddev:17.69M
IP flow (unique src/dst pair) Information
# of flows: 1529123 (avg. 27.82 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.5% 1.1% 0.8% 0.8% 0.7% 0.7% 0.7% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 892641
Top 10 bandwidth usage (bytes/total in %):
21.6% 5.7% 3.9% 3.7% 3.6% 3.5% 3.0% 2.6% 2.4% 2.0%
# of IPv6 addresses: 1003
Top 10 bandwidth usage (bytes/total in %):
18.8% 8.9% 8.8% 6.0% 5.9% 5.6% 5.4% 5.1% 5.1% 4.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200910211400.pktlen.png)
detailed numbers
[ 32- 63]: 9898599
[ 64- 127]: 11762358
[ 128- 255]: 2070829
[ 256- 511]: 1102924
[ 512- 1023]: 1277019
[ 1024- 2047]: 16422531
Protocol Breakdown
![[protocol breakdown chart]](200910211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42534260 (100.00%) 26538208593 (100.00%) 623.93
ip 42506484 ( 99.93%) 26530946129 ( 99.97%) 624.16
tcp 30537360 ( 71.79%) 20298832575 ( 76.49%) 664.72
http(s) 10063425 ( 23.66%) 13050823447 ( 49.18%) 1296.86
http(c) 8758845 ( 20.59%) 1173939137 ( 4.42%) 134.03
squid 1028233 ( 2.42%) 348839255 ( 1.31%) 339.26
smtp 313107 ( 0.74%) 105341640 ( 0.40%) 336.44
nntp 34 ( 0.00%) 2617 ( 0.00%) 76.97
ftp 23023 ( 0.05%) 2292449 ( 0.01%) 99.57
pop3 29045 ( 0.07%) 9544009 ( 0.04%) 328.59
imap 5385 ( 0.01%) 575547 ( 0.00%) 106.88
telnet 17235 ( 0.04%) 1444255 ( 0.01%) 83.80
ssh 154328 ( 0.36%) 15670415 ( 0.06%) 101.54
dns 39872 ( 0.09%) 28016264 ( 0.11%) 702.66
bgp 144 ( 0.00%) 51174 ( 0.00%) 355.38
napster 255 ( 0.00%) 27633 ( 0.00%) 108.36
realaud 2293 ( 0.01%) 254117 ( 0.00%) 110.82
rtsp 234583 ( 0.55%) 121073113 ( 0.46%) 516.12
icecast 105637 ( 0.25%) 97582815 ( 0.37%) 923.76
other 9761908 ( 22.95%) 5343354208 ( 20.13%) 547.37
udp 11086018 ( 26.06%) 6044285220 ( 22.78%) 545.22
dns 1257282 ( 2.96%) 217366551 ( 0.82%) 172.89
rip 2 ( 0.00%) 199 ( 0.00%) 99.50
realaud 1065 ( 0.00%) 77519 ( 0.00%) 72.79
halflif 3778 ( 0.01%) 234323 ( 0.00%) 62.02
starcra 517 ( 0.00%) 103666 ( 0.00%) 200.51
everque 759 ( 0.00%) 181272 ( 0.00%) 238.83
unreal 73 ( 0.00%) 12749 ( 0.00%) 174.64
quake 178 ( 0.00%) 44478 ( 0.00%) 249.88
cuseeme 33 ( 0.00%) 3715 ( 0.00%) 112.58
other 9820213 ( 23.09%) 5825802903 ( 21.95%) 593.25
icmp 648414 ( 1.52%) 66370925 ( 0.25%) 102.36
ipip 286 ( 0.00%) 33580 ( 0.00%) 117.41
ipsec 66 ( 0.00%) 10428 ( 0.00%) 158.00
ip6 196885 ( 0.46%) 116981395 ( 0.44%) 594.16
other 37455 ( 0.09%) 4432006 ( 0.02%) 118.33
frag 21608 ( 0.05%) 17280849 ( 0.07%) 799.74
ip6 27776 ( 0.07%) 7262464 ( 0.03%) 261.47
tcp6 9722 ( 0.02%) 3465952 ( 0.01%) 356.51
http(s) 1123 ( 0.00%) 1435296 ( 0.01%) 1278.09
http(c) 1615 ( 0.00%) 151004 ( 0.00%) 93.50
smtp 2626 ( 0.01%) 1373443 ( 0.01%) 523.02
ssh 140 ( 0.00%) 97564 ( 0.00%) 696.89
dns 4 ( 0.00%) 456 ( 0.00%) 114.00
bgp 105 ( 0.00%) 12937 ( 0.00%) 123.21
other 4109 ( 0.01%) 395252 ( 0.00%) 96.19
udp6 12787 ( 0.03%) 3112871 ( 0.01%) 243.44
dns 12720 ( 0.03%) 3096061 ( 0.01%) 243.40
other 67 ( 0.00%) 16810 ( 0.00%) 250.90
icmp6 5211 ( 0.01%) 654599 ( 0.00%) 125.62
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 26 ( 0.00%) 24962 ( 0.00%) 960.08
tcpdump file: 200910211400.dump.gz (1068.23 MB)