Traffic Trace Info
DumpFile: 201009011400.dump
FileSize: 2556.10MB
Id: 201009011400
StartTime: Wed Sep 1 14:00:01 2010
EndTime: Wed Sep 1 14:15:00 2010
TotalTime: 899.56 seconds
TotalCapSize: 2009.33MB CapLen: 96 bytes
# of packets: 35832718 (25058.51MB)
AvgRate: 233.67Mbps stddev:23.15M
IP flow (unique src/dst pair) Information
# of flows: 994447 (avg. 36.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 4.3% 1.7% 1.5% 1.3% 1.1% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 495489
Top 10 bandwidth usage (bytes/total in %):
11.3% 10.4% 7.5% 7.2% 6.3% 6.3% 4.4% 4.2% 2.7% 2.1%
# of IPv6 addresses: 2229
Top 10 bandwidth usage (bytes/total in %):
28.9% 17.2% 17.2% 16.2% 13.9% 7.6% 6.5% 6.1% 5.5% 5.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201009011400.pktlen.png)
detailed numbers
[ 32- 63]: 6447350
[ 64- 127]: 8949037
[ 128- 255]: 1618390
[ 256- 511]: 1417153
[ 512- 1023]: 896941
[ 1024- 2047]: 16503847
Protocol Breakdown
![[protocol breakdown chart]](201009011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35832718 (100.00%) 26275752811 (100.00%) 733.29
ip 35730468 ( 99.71%) 26224090190 ( 99.80%) 733.94
tcp 25149938 ( 70.19%) 20349652997 ( 77.45%) 809.13
http(s) 11105701 ( 30.99%) 14998968187 ( 57.08%) 1350.56
http(c) 6754752 ( 18.85%) 998372786 ( 3.80%) 147.80
squid 264176 ( 0.74%) 162367546 ( 0.62%) 614.62
smtp 235675 ( 0.66%) 71046312 ( 0.27%) 301.46
ftp 97991 ( 0.27%) 57538323 ( 0.22%) 587.18
pop3 13105 ( 0.04%) 5936017 ( 0.02%) 452.96
imap 9646 ( 0.03%) 3400949 ( 0.01%) 352.58
telnet 70014 ( 0.20%) 5574898 ( 0.02%) 79.63
ssh 40690 ( 0.11%) 7001006 ( 0.03%) 172.06
dns 3261 ( 0.01%) 351982 ( 0.00%) 107.94
bgp 146 ( 0.00%) 63683 ( 0.00%) 436.18
napster 735 ( 0.00%) 394839 ( 0.00%) 537.20
realaud 204 ( 0.00%) 21823 ( 0.00%) 106.98
rtsp 6576 ( 0.02%) 7682055 ( 0.03%) 1168.20
icecast 86743 ( 0.24%) 67835415 ( 0.26%) 782.03
hotline 21 ( 0.00%) 2534 ( 0.00%) 120.67
other 6460451 ( 18.03%) 3963091582 ( 15.08%) 613.44
udp 7192399 ( 20.07%) 3855311907 ( 14.67%) 536.03
dns 970619 ( 2.71%) 157887470 ( 0.60%) 162.67
realaud 20 ( 0.00%) 2178 ( 0.00%) 108.90
halflif 45 ( 0.00%) 4475 ( 0.00%) 99.44
starcra 65 ( 0.00%) 7240 ( 0.00%) 111.38
everque 758 ( 0.00%) 114157 ( 0.00%) 150.60
unreal 114 ( 0.00%) 10353 ( 0.00%) 90.82
quake 74 ( 0.00%) 9580 ( 0.00%) 129.46
cuseeme 5 ( 0.00%) 472 ( 0.00%) 94.40
other 6220567 ( 17.36%) 3697188656 ( 14.07%) 594.35
icmp 454920 ( 1.27%) 36035133 ( 0.14%) 79.21
ipip 169 ( 0.00%) 20198 ( 0.00%) 119.51
ipsec 9338 ( 0.03%) 1271524 ( 0.00%) 136.17
ip6 2922326 ( 8.16%) 1981387333 ( 7.54%) 678.02
other 1378 ( 0.00%) 411098 ( 0.00%) 298.33
frag 1165 ( 0.00%) 1149387 ( 0.00%) 986.60
ip6 102250 ( 0.29%) 51662621 ( 0.20%) 505.26
tcp6 49562 ( 0.14%) 37935028 ( 0.14%) 765.41
http(s) 547 ( 0.00%) 550547 ( 0.00%) 1006.48
http(c) 1053 ( 0.00%) 121937 ( 0.00%) 115.80
squid 5 ( 0.00%) 450 ( 0.00%) 90.00
smtp 168 ( 0.00%) 42030 ( 0.00%) 250.18
ftp 2 ( 0.00%) 160 ( 0.00%) 80.00
pop3 35 ( 0.00%) 3214 ( 0.00%) 91.83
imap 326 ( 0.00%) 38839 ( 0.00%) 119.14
ssh 69 ( 0.00%) 17054 ( 0.00%) 247.16
dns 130 ( 0.00%) 31896 ( 0.00%) 245.35
bgp 89 ( 0.00%) 11136 ( 0.00%) 125.12
other 47138 ( 0.13%) 37117765 ( 0.14%) 787.43
udp6 44252 ( 0.12%) 12218912 ( 0.05%) 276.12
dns 40536 ( 0.11%) 11401426 ( 0.04%) 281.27
starcra 11 ( 0.00%) 1541 ( 0.00%) 140.09
other 3705 ( 0.01%) 815945 ( 0.00%) 220.23
icmp6 8182 ( 0.02%) 1300584 ( 0.00%) 158.96
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 224 ( 0.00%) 204017 ( 0.00%) 910.79
tcpdump file: 201009011400.dump.gz (906.47 MB)