Traffic Trace Info
DumpFile: 200910281400.dump
FileSize: 2407.91MB
Id: 200910281400
StartTime: Wed Oct 28 14:00:01 2009
EndTime: Wed Oct 28 14:15:00 2009
TotalTime: 899.96 seconds
TotalCapSize: 1878.30MB CapLen: 96 bytes
# of packets: 34707961 (19637.14MB)
AvgRate: 183.06Mbps stddev:18.80M
IP flow (unique src/dst pair) Information
# of flows: 1308403 (avg. 26.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 3.2% 2.1% 1.6% 1.2% 1.1% 1.1% 1.1% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 796164
Top 10 bandwidth usage (bytes/total in %):
20.9% 9.5% 8.2% 3.4% 3.3% 3.3% 2.5% 2.3% 2.1% 1.7%
# of IPv6 addresses: 932
Top 10 bandwidth usage (bytes/total in %):
16.5% 6.9% 6.6% 6.6% 6.6% 6.1% 6.1% 4.9% 4.7% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200910281400.pktlen.png)
detailed numbers
[ 32- 63]: 8503827
[ 64- 127]: 10006798
[ 128- 255]: 1538001
[ 256- 511]: 1157169
[ 512- 1023]: 964787
[ 1024- 2047]: 12537379
Protocol Breakdown
![[protocol breakdown chart]](200910281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34707961 (100.00%) 20591029778 (100.00%) 593.27
ip 34684936 ( 99.93%) 20585779576 ( 99.97%) 593.51
tcp 27248416 ( 78.51%) 17976028525 ( 87.30%) 659.71
http(s) 8581032 ( 24.72%) 10570840147 ( 51.34%) 1231.88
http(c) 8075141 ( 23.27%) 2018129501 ( 9.80%) 249.92
squid 1945365 ( 5.60%) 365059655 ( 1.77%) 187.66
smtp 297935 ( 0.86%) 99352101 ( 0.48%) 333.47
nntp 66 ( 0.00%) 4568 ( 0.00%) 69.21
ftp 48989 ( 0.14%) 57131864 ( 0.28%) 1166.22
pop3 24948 ( 0.07%) 9167400 ( 0.04%) 367.46
imap 6995 ( 0.02%) 1759524 ( 0.01%) 251.54
telnet 3362 ( 0.01%) 254137 ( 0.00%) 75.59
ssh 784309 ( 2.26%) 407400267 ( 1.98%) 519.44
dns 2487 ( 0.01%) 1672835 ( 0.01%) 672.63
bgp 152 ( 0.00%) 51734 ( 0.00%) 340.36
napster 339 ( 0.00%) 158599 ( 0.00%) 467.84
realaud 3699 ( 0.01%) 315490 ( 0.00%) 85.29
rtsp 176762 ( 0.51%) 14296778 ( 0.07%) 80.88
icecast 133662 ( 0.39%) 118589953 ( 0.58%) 887.24
hotline 55 ( 0.00%) 8019 ( 0.00%) 145.80
other 7163087 ( 20.64%) 4311834093 ( 20.94%) 601.95
udp 6323183 ( 18.22%) 2522510855 ( 12.25%) 398.93
dns 1251255 ( 3.61%) 236866101 ( 1.15%) 189.30
realaud 355 ( 0.00%) 141163 ( 0.00%) 397.64
halflif 80 ( 0.00%) 12126 ( 0.00%) 151.57
starcra 259 ( 0.00%) 48912 ( 0.00%) 188.85
everque 539 ( 0.00%) 181931 ( 0.00%) 337.53
unreal 82 ( 0.00%) 14990 ( 0.00%) 182.80
quake 27 ( 0.00%) 4404 ( 0.00%) 163.11
cuseeme 2 ( 0.00%) 191 ( 0.00%) 95.50
other 5068005 ( 14.60%) 2284933274 ( 11.10%) 450.85
icmp 1080300 ( 3.11%) 81836118 ( 0.40%) 75.75
ipip 315 ( 0.00%) 40082 ( 0.00%) 127.24
ipsec 74 ( 0.00%) 11468 ( 0.00%) 154.97
ip6 31375 ( 0.09%) 5146732 ( 0.02%) 164.04
other 1273 ( 0.00%) 205796 ( 0.00%) 161.66
frag 10599 ( 0.03%) 8850862 ( 0.04%) 835.07
ip6 23023 ( 0.07%) 5250082 ( 0.03%) 228.04
tcp6 7509 ( 0.02%) 2171759 ( 0.01%) 289.22
http(s) 650 ( 0.00%) 767464 ( 0.00%) 1180.71
http(c) 2991 ( 0.01%) 271954 ( 0.00%) 90.92
smtp 2417 ( 0.01%) 975949 ( 0.00%) 403.79
ssh 22 ( 0.00%) 1880 ( 0.00%) 85.45
dns 16 ( 0.00%) 3692 ( 0.00%) 230.75
bgp 105 ( 0.00%) 12859 ( 0.00%) 122.47
other 1308 ( 0.00%) 137961 ( 0.00%) 105.47
udp6 11082 ( 0.03%) 2523282 ( 0.01%) 227.69
dns 11061 ( 0.03%) 2521032 ( 0.01%) 227.92
other 21 ( 0.00%) 2250 ( 0.00%) 107.14
icmp6 4346 ( 0.01%) 498017 ( 0.00%) 114.59
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 55 ( 0.00%) 52808 ( 0.00%) 960.15
tcpdump file: 200910281400.dump.gz (879.29 MB)