Traffic Trace Info
DumpFile: 201009031400.dump
FileSize: 2417.80MB
Id: 201009031400
StartTime: Fri Sep 3 14:00:01 2010
EndTime: Fri Sep 3 14:15:01 2010
TotalTime: 900.55 seconds
TotalCapSize: 1902.47MB CapLen: 96 bytes
# of packets: 33771949 (24348.43MB)
AvgRate: 226.82Mbps stddev:21.75M
IP flow (unique src/dst pair) Information
# of flows: 799993 (avg. 42.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 3.4% 2.1% 2.0% 1.6% 1.5% 1.4% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 427708
Top 10 bandwidth usage (bytes/total in %):
10.6% 8.5% 8.4% 7.6% 5.3% 4.7% 4.7% 3.5% 3.5% 2.2%
# of IPv6 addresses: 2252
Top 10 bandwidth usage (bytes/total in %):
35.4% 8.2% 7.5% 7.5% 7.2% 3.2% 3.1% 3.1% 3.1% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201009031400.pktlen.png)
detailed numbers
[ 32- 63]: 5158235
[ 64- 127]: 8788105
[ 128- 255]: 1472803
[ 256- 511]: 1398164
[ 512- 1023]: 815033
[ 1024- 2047]: 16139609
Protocol Breakdown
![[protocol breakdown chart]](201009031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33771949 (100.00%) 25531177612 (100.00%) 755.99
ip 33705551 ( 99.80%) 25513561595 ( 99.93%) 756.95
tcp 22439860 ( 66.45%) 19224897070 ( 75.30%) 856.73
http(s) 10847999 ( 32.12%) 14782890019 ( 57.90%) 1362.73
http(c) 6339989 ( 18.77%) 834820904 ( 3.27%) 131.68
squid 191457 ( 0.57%) 92128508 ( 0.36%) 481.20
smtp 259274 ( 0.77%) 144556484 ( 0.57%) 557.54
ftp 18097 ( 0.05%) 1522984 ( 0.01%) 84.16
pop3 11694 ( 0.03%) 4495888 ( 0.02%) 384.46
imap 6302 ( 0.02%) 1923000 ( 0.01%) 305.14
telnet 690 ( 0.00%) 44755 ( 0.00%) 64.86
ssh 52747 ( 0.16%) 36722370 ( 0.14%) 696.20
dns 4280 ( 0.01%) 420147 ( 0.00%) 98.17
bgp 177 ( 0.00%) 102195 ( 0.00%) 577.37
napster 28 ( 0.00%) 3946 ( 0.00%) 140.93
realaud 146 ( 0.00%) 21709 ( 0.00%) 148.69
rtsp 18013 ( 0.05%) 16170416 ( 0.06%) 897.71
icecast 31300 ( 0.09%) 2183923 ( 0.01%) 69.77
hotline 6 ( 0.00%) 931 ( 0.00%) 155.17
other 4657658 ( 13.79%) 3306888695 ( 12.95%) 709.99
udp 7795202 ( 23.08%) 4073057568 ( 15.95%) 522.51
dns 1256945 ( 3.72%) 193165475 ( 0.76%) 153.68
rip 2 ( 0.00%) 120 ( 0.00%) 60.00
realaud 1833 ( 0.01%) 111427 ( 0.00%) 60.79
halflif 163 ( 0.00%) 13746 ( 0.00%) 84.33
starcra 33 ( 0.00%) 4069 ( 0.00%) 123.30
everque 7074 ( 0.02%) 844263 ( 0.00%) 119.35
unreal 67 ( 0.00%) 5957 ( 0.00%) 88.91
quake 172 ( 0.00%) 81119 ( 0.00%) 471.62
cuseeme 5 ( 0.00%) 432 ( 0.00%) 86.40
other 6528808 ( 19.33%) 3878762182 ( 15.19%) 594.10
icmp 322751 ( 0.96%) 26216667 ( 0.10%) 81.23
ipip 179 ( 0.00%) 21662 ( 0.00%) 121.02
ipsec 10276 ( 0.03%) 1457400 ( 0.01%) 141.83
ip6 3136817 ( 9.29%) 2187854592 ( 8.57%) 697.48
other 466 ( 0.00%) 56636 ( 0.00%) 121.54
frag 622 ( 0.00%) 640124 ( 0.00%) 1029.14
ip6 66398 ( 0.20%) 17616017 ( 0.07%) 265.31
tcp6 14670 ( 0.04%) 4204141 ( 0.02%) 286.58
http(s) 575 ( 0.00%) 543739 ( 0.00%) 945.63
http(c) 1644 ( 0.00%) 239463 ( 0.00%) 145.66
smtp 600 ( 0.00%) 499130 ( 0.00%) 831.88
dns 45 ( 0.00%) 10441 ( 0.00%) 232.02
bgp 89 ( 0.00%) 11906 ( 0.00%) 133.78
other 11717 ( 0.03%) 2899462 ( 0.01%) 247.46
udp6 43256 ( 0.13%) 11039375 ( 0.04%) 255.21
dns 37796 ( 0.11%) 10220984 ( 0.04%) 270.43
unreal 3 ( 0.00%) 504 ( 0.00%) 168.00
quake 11 ( 0.00%) 942 ( 0.00%) 85.64
other 5446 ( 0.02%) 816945 ( 0.00%) 150.01
icmp6 6649 ( 0.02%) 1073414 ( 0.00%) 161.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1793 ( 0.01%) 1295007 ( 0.01%) 722.26
tcpdump file: 201009031400.dump.gz (835.13 MB)