Traffic Trace Info
DumpFile: 201009021400.dump
FileSize: 2266.09MB
Id: 201009021400
StartTime: Thu Sep 2 14:00:01 2010
EndTime: Thu Sep 2 14:15:01 2010
TotalTime: 899.96 seconds
TotalCapSize: 1781.38MB CapLen: 96 bytes
# of packets: 31765011 (21062.18MB)
AvgRate: 196.33Mbps stddev:17.53M
IP flow (unique src/dst pair) Information
# of flows: 970524 (avg. 32.73 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 2.0% 1.4% 1.1% 0.9% 0.9% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 503444
Top 10 bandwidth usage (bytes/total in %):
12.1% 11.2% 7.7% 6.9% 3.1% 3.1% 2.4% 2.3% 2.2% 2.2%
# of IPv6 addresses: 2181
Top 10 bandwidth usage (bytes/total in %):
62.2% 62.2% 8.7% 7.0% 7.0% 6.7% 6.7% 2.0% 2.0% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201009021400.pktlen.png)
detailed numbers
[ 32- 63]: 5134695
[ 64- 127]: 9293715
[ 128- 255]: 1469969
[ 256- 511]: 1303360
[ 512- 1023]: 852461
[ 1024- 2047]: 13710811
Protocol Breakdown
![[protocol breakdown chart]](201009021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31765011 (100.00%) 22085295796 (100.00%) 695.27
ip 31643324 ( 99.62%) 22002358153 ( 99.62%) 695.32
tcp 20000374 ( 62.96%) 15896536758 ( 71.98%) 794.81
http(s) 9209952 ( 28.99%) 12404203156 ( 56.16%) 1346.83
http(c) 5510876 ( 17.35%) 853447155 ( 3.86%) 154.87
squid 167866 ( 0.53%) 76708906 ( 0.35%) 456.97
smtp 228917 ( 0.72%) 79103159 ( 0.36%) 345.55
ftp 83958 ( 0.26%) 52690662 ( 0.24%) 627.58
pop3 17781 ( 0.06%) 10424880 ( 0.05%) 586.29
imap 3849 ( 0.01%) 791606 ( 0.00%) 205.67
telnet 19758 ( 0.06%) 1446156 ( 0.01%) 73.19
ssh 66541 ( 0.21%) 40224389 ( 0.18%) 604.51
dns 3728 ( 0.01%) 349845 ( 0.00%) 93.84
bgp 182 ( 0.00%) 98415 ( 0.00%) 540.74
napster 36 ( 0.00%) 5555 ( 0.00%) 154.31
realaud 121 ( 0.00%) 14391 ( 0.00%) 118.93
rtsp 6562 ( 0.02%) 7690607 ( 0.03%) 1171.99
icecast 30789 ( 0.10%) 8393662 ( 0.04%) 272.62
hotline 15 ( 0.00%) 1294 ( 0.00%) 86.27
other 4649443 ( 14.64%) 2360942920 ( 10.69%) 507.79
udp 8438959 ( 26.57%) 4368528485 ( 19.78%) 517.66
dns 1250590 ( 3.94%) 196925101 ( 0.89%) 157.47
realaud 9715 ( 0.03%) 8045364 ( 0.04%) 828.14
halflif 54 ( 0.00%) 5466 ( 0.00%) 101.22
starcra 105 ( 0.00%) 17357 ( 0.00%) 165.30
everque 7038 ( 0.02%) 829061 ( 0.00%) 117.80
unreal 129 ( 0.00%) 17079 ( 0.00%) 132.40
quake 42 ( 0.00%) 3366 ( 0.00%) 80.14
cuseeme 1 ( 0.00%) 86 ( 0.00%) 86.00
other 7171155 ( 22.58%) 4162597506 ( 18.85%) 580.46
icmp 391913 ( 1.23%) 31282030 ( 0.14%) 79.82
ipip 177 ( 0.00%) 20986 ( 0.00%) 118.56
ipsec 14789 ( 0.05%) 4545926 ( 0.02%) 307.39
ip6 2795673 ( 8.80%) 1701201783 ( 7.70%) 608.51
other 1439 ( 0.00%) 242185 ( 0.00%) 168.30
frag 768 ( 0.00%) 782318 ( 0.00%) 1018.64
ip6 121687 ( 0.38%) 82937643 ( 0.38%) 681.57
tcp6 62169 ( 0.20%) 63890068 ( 0.29%) 1027.68
http(s) 618 ( 0.00%) 637998 ( 0.00%) 1032.36
http(c) 1104 ( 0.00%) 119557 ( 0.00%) 108.29
squid 76 ( 0.00%) 8902 ( 0.00%) 117.13
smtp 201 ( 0.00%) 46927 ( 0.00%) 233.47
ftp 2 ( 0.00%) 160 ( 0.00%) 80.00
imap 363 ( 0.00%) 44670 ( 0.00%) 123.06
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 87 ( 0.00%) 18828 ( 0.00%) 216.41
bgp 86 ( 0.00%) 11691 ( 0.00%) 135.94
other 59630 ( 0.19%) 63001163 ( 0.29%) 1056.53
udp6 45880 ( 0.14%) 13665428 ( 0.06%) 297.85
dns 40218 ( 0.13%) 11285377 ( 0.05%) 280.61
starcra 23 ( 0.00%) 3770 ( 0.00%) 163.91
other 5639 ( 0.02%) 2376281 ( 0.01%) 421.40
icmp6 7714 ( 0.02%) 1216662 ( 0.01%) 157.72
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5894 ( 0.02%) 4161405 ( 0.02%) 706.04
tcpdump file: 201009021400.dump.gz (807.71 MB)