Traffic Trace Info
DumpFile: 200910241400.dump
FileSize: 2130.40MB
Id: 200910241400
StartTime: Sat Oct 24 14:00:01 2009
EndTime: Sat Oct 24 14:15:00 2009
TotalTime: 899.16 seconds
TotalCapSize: 1650.20MB CapLen: 96 bytes
# of packets: 31469901 (18112.68MB)
AvgRate: 168.99Mbps stddev:14.78M
IP flow (unique src/dst pair) Information
# of flows: 1359517 (avg. 23.15 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 2.4% 1.4% 1.4% 1.2% 1.1% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 800701
Top 10 bandwidth usage (bytes/total in %):
26.1% 8.6% 4.1% 4.1% 4.0% 4.0% 2.8% 2.4% 2.2% 2.1%
# of IPv6 addresses: 879
Top 10 bandwidth usage (bytes/total in %):
11.8% 11.0% 7.5% 7.2% 6.7% 6.6% 6.6% 4.6% 4.3% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200910241400.pktlen.png)
detailed numbers
[ 32- 63]: 9115112
[ 64- 127]: 7319296
[ 128- 255]: 1593034
[ 256- 511]: 970323
[ 512- 1023]: 868860
[ 1024- 2047]: 11603276
Protocol Breakdown
![[protocol breakdown chart]](200910241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31469901 (100.00%) 18992518673 (100.00%) 603.51
ip 31448625 ( 99.93%) 18988708764 ( 99.98%) 603.80
tcp 24092023 ( 76.56%) 15928465468 ( 83.87%) 661.15
http(s) 7742293 ( 24.60%) 9512652892 ( 50.09%) 1228.66
http(c) 5265248 ( 16.73%) 701163590 ( 3.69%) 133.17
squid 1881790 ( 5.98%) 416080652 ( 2.19%) 221.11
smtp 205517 ( 0.65%) 36787317 ( 0.19%) 179.00
ftp 42476 ( 0.13%) 8805363 ( 0.05%) 207.30
pop3 13076 ( 0.04%) 4948880 ( 0.03%) 378.47
imap 3218 ( 0.01%) 288048 ( 0.00%) 89.51
telnet 14985 ( 0.05%) 1128122 ( 0.01%) 75.28
ssh 205699 ( 0.65%) 61800239 ( 0.33%) 300.44
dns 6021 ( 0.02%) 7139622 ( 0.04%) 1185.79
bgp 151 ( 0.00%) 53033 ( 0.00%) 351.21
napster 372 ( 0.00%) 126177 ( 0.00%) 339.19
realaud 1771 ( 0.01%) 216335 ( 0.00%) 122.15
rtsp 148724 ( 0.47%) 23773632 ( 0.13%) 159.85
icecast 5643 ( 0.02%) 835323 ( 0.00%) 148.03
hotline 38 ( 0.00%) 2948 ( 0.00%) 77.58
other 8554971 ( 27.18%) 5152661495 ( 27.13%) 602.30
udp 6730902 ( 21.39%) 2993237333 ( 15.76%) 444.70
dns 953516 ( 3.03%) 161261853 ( 0.85%) 169.12
realaud 1214 ( 0.00%) 500403 ( 0.00%) 412.19
halflif 1104 ( 0.00%) 78258 ( 0.00%) 70.89
starcra 392 ( 0.00%) 85507 ( 0.00%) 218.13
everque 390 ( 0.00%) 67097 ( 0.00%) 172.04
unreal 174 ( 0.00%) 20503 ( 0.00%) 117.83
quake 70 ( 0.00%) 10198 ( 0.00%) 145.69
cuseeme 16 ( 0.00%) 2805 ( 0.00%) 175.31
other 5771919 ( 18.34%) 2830781099 ( 14.90%) 490.44
icmp 579531 ( 1.84%) 51351772 ( 0.27%) 88.61
ipip 332 ( 0.00%) 40414 ( 0.00%) 121.73
ipsec 64 ( 0.00%) 10112 ( 0.00%) 158.00
ip6 31994 ( 0.10%) 7793671 ( 0.04%) 243.60
other 13779 ( 0.04%) 7809994 ( 0.04%) 566.80
frag 14338 ( 0.05%) 12324037 ( 0.06%) 859.54
ip6 21276 ( 0.07%) 3809909 ( 0.02%) 179.07
tcp6 7128 ( 0.02%) 1242615 ( 0.01%) 174.33
http(s) 202 ( 0.00%) 166656 ( 0.00%) 825.03
http(c) 2726 ( 0.01%) 244393 ( 0.00%) 89.65
smtp 987 ( 0.00%) 471175 ( 0.00%) 477.38
ssh 1 ( 0.00%) 74 ( 0.00%) 74.00
bgp 106 ( 0.00%) 13303 ( 0.00%) 125.50
other 3106 ( 0.01%) 347014 ( 0.00%) 111.72
udp6 8684 ( 0.03%) 1910566 ( 0.01%) 220.01
dns 8658 ( 0.03%) 1905498 ( 0.01%) 220.09
other 26 ( 0.00%) 5068 ( 0.00%) 194.92
icmp6 5406 ( 0.02%) 621602 ( 0.00%) 114.98
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 28 ( 0.00%) 31046 ( 0.00%) 1108.79
tcpdump file: 200910241400.dump.gz (793.43 MB)