Traffic Trace Info
DumpFile: 200910291400.dump
FileSize: 2217.65MB
Id: 200910291400
StartTime: Thu Oct 29 14:00:01 2009
EndTime: Thu Oct 29 14:15:01 2009
TotalTime: 899.64 seconds
TotalCapSize: 1719.96MB CapLen: 96 bytes
# of packets: 32615997 (18546.30MB)
AvgRate: 172.95Mbps stddev:14.48M
IP flow (unique src/dst pair) Information
# of flows: 1670926 (avg. 19.52 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.3% 1.1% 1.0% 0.8% 0.8% 0.8% 0.7% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 1041102
Top 10 bandwidth usage (bytes/total in %):
26.7% 9.9% 3.7% 3.2% 2.9% 2.9% 2.9% 2.3% 2.0% 1.9%
# of IPv6 addresses: 899
Top 10 bandwidth usage (bytes/total in %):
19.7% 19.7% 12.8% 9.5% 9.5% 8.6% 4.1% 4.1% 3.9% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200910291400.pktlen.png)
detailed numbers
[ 32- 63]: 9164416
[ 64- 127]: 8092641
[ 128- 255]: 1546980
[ 256- 511]: 983702
[ 512- 1023]: 1180364
[ 1024- 2047]: 11647894
Protocol Breakdown
![[protocol breakdown chart]](200910291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32615997 (100.00%) 19447209757 (100.00%) 596.25
ip 32588405 ( 99.92%) 19439272639 ( 99.96%) 596.51
tcp 24753541 ( 75.89%) 16235755238 ( 83.49%) 655.90
http(s) 7091252 ( 21.74%) 8983213912 ( 46.19%) 1266.80
http(c) 6314731 ( 19.36%) 901417452 ( 4.64%) 142.75
squid 990927 ( 3.04%) 276507907 ( 1.42%) 279.04
smtp 247972 ( 0.76%) 62232140 ( 0.32%) 250.96
nntp 36985 ( 0.11%) 45382116 ( 0.23%) 1227.04
ftp 30873 ( 0.09%) 5610278 ( 0.03%) 181.72
pop3 40896 ( 0.13%) 8978409 ( 0.05%) 219.54
imap 6941 ( 0.02%) 727096 ( 0.00%) 104.75
telnet 3082 ( 0.01%) 281098 ( 0.00%) 91.21
ssh 62465 ( 0.19%) 9641205 ( 0.05%) 154.35
dns 1917 ( 0.01%) 571465 ( 0.00%) 298.10
bgp 154 ( 0.00%) 59628 ( 0.00%) 387.19
napster 2415 ( 0.01%) 290764 ( 0.00%) 120.40
realaud 10282 ( 0.03%) 7620668 ( 0.04%) 741.17
rtsp 122339 ( 0.38%) 8210993 ( 0.04%) 67.12
icecast 25797 ( 0.08%) 14824047 ( 0.08%) 574.64
other 9763786 ( 29.94%) 5910139188 ( 30.39%) 605.31
udp 6981072 ( 21.40%) 3100124037 ( 15.94%) 444.08
dns 1641010 ( 5.03%) 291821842 ( 1.50%) 177.83
realaud 98 ( 0.00%) 15197 ( 0.00%) 155.07
halflif 95 ( 0.00%) 12371 ( 0.00%) 130.22
starcra 370 ( 0.00%) 75860 ( 0.00%) 205.03
everque 1154 ( 0.00%) 393739 ( 0.00%) 341.19
unreal 107 ( 0.00%) 19109 ( 0.00%) 178.59
quake 283 ( 0.00%) 37490 ( 0.00%) 132.47
cuseeme 11 ( 0.00%) 2224 ( 0.00%) 202.18
other 5337438 ( 16.36%) 2807508317 ( 14.44%) 526.00
icmp 804156 ( 2.47%) 83135295 ( 0.43%) 103.38
ipip 354 ( 0.00%) 43476 ( 0.00%) 122.81
ipsec 7516 ( 0.02%) 8426384 ( 0.04%) 1121.13
ip6 35281 ( 0.11%) 10459090 ( 0.05%) 296.45
other 6485 ( 0.02%) 1329119 ( 0.01%) 204.95
frag 8713 ( 0.03%) 7699121 ( 0.04%) 883.64
ip6 27590 ( 0.08%) 7936998 ( 0.04%) 287.68
tcp6 10951 ( 0.03%) 4389018 ( 0.02%) 400.79
http(s) 943 ( 0.00%) 1142727 ( 0.01%) 1211.80
http(c) 3214 ( 0.01%) 320999 ( 0.00%) 99.88
smtp 2045 ( 0.01%) 1066619 ( 0.01%) 521.57
ssh 1896 ( 0.01%) 1577300 ( 0.01%) 831.91
dns 6 ( 0.00%) 2656 ( 0.00%) 442.67
bgp 112 ( 0.00%) 14311 ( 0.00%) 127.78
other 2735 ( 0.01%) 264406 ( 0.00%) 96.67
udp6 12763 ( 0.04%) 3069641 ( 0.02%) 240.51
dns 12751 ( 0.04%) 3068311 ( 0.02%) 240.63
realaud 1 ( 0.00%) 117 ( 0.00%) 117.00
halflif 1 ( 0.00%) 113 ( 0.00%) 113.00
other 10 ( 0.00%) 1100 ( 0.00%) 110.00
icmp6 3820 ( 0.01%) 447926 ( 0.00%) 117.26
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 26 ( 0.00%) 26333 ( 0.00%) 1012.81
tcpdump file: 200910291400.dump.gz (834.94 MB)