Traffic Trace Info
DumpFile: 201009041400.dump
FileSize: 2260.96MB
Id: 201009041400
StartTime: Sat Sep 4 14:00:00 2010
EndTime: Sat Sep 4 14:15:01 2010
TotalTime: 900.84 seconds
TotalCapSize: 1773.30MB CapLen: 96 bytes
# of packets: 31958588 (23640.36MB)
AvgRate: 220.12Mbps stddev:25.85M
IP flow (unique src/dst pair) Information
# of flows: 809347 (avg. 39.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 3.0% 2.8% 2.7% 2.5% 2.5% 1.9% 1.7% 1.5% 1.3%
IP address Information
# of IPv4 addresses: 439870
Top 10 bandwidth usage (bytes/total in %):
21.4% 11.8% 10.6% 6.2% 3.2% 3.1% 3.0% 3.0% 2.7% 2.6%
# of IPv6 addresses: 2075
Top 10 bandwidth usage (bytes/total in %):
42.6% 42.6% 17.0% 12.1% 12.1% 6.0% 5.5% 2.3% 2.3% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201009041400.pktlen.png)
detailed numbers
[ 32- 63]: 3752170
[ 64- 127]: 8802347
[ 128- 255]: 1440855
[ 256- 511]: 1285936
[ 512- 1023]: 786632
[ 1024- 2047]: 15890648
Protocol Breakdown
![[protocol breakdown chart]](201009041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31958588 (100.00%) 24788713869 (100.00%) 775.65
ip 31874345 ( 99.74%) 24752006028 ( 99.85%) 776.55
tcp 19257669 ( 60.26%) 17808765113 ( 71.84%) 924.76
http(s) 10829393 ( 33.89%) 14863100411 ( 59.96%) 1372.48
http(c) 4742195 ( 14.84%) 630120997 ( 2.54%) 132.88
squid 119440 ( 0.37%) 51077359 ( 0.21%) 427.64
smtp 170220 ( 0.53%) 38126151 ( 0.15%) 223.98
ftp 85466 ( 0.27%) 53461824 ( 0.22%) 625.53
pop3 6383 ( 0.02%) 1816331 ( 0.01%) 284.56
imap 207537 ( 0.65%) 193284833 ( 0.78%) 931.33
telnet 442 ( 0.00%) 32848 ( 0.00%) 74.32
ssh 16012 ( 0.05%) 2699058 ( 0.01%) 168.56
dns 4440 ( 0.01%) 397225 ( 0.00%) 89.47
bgp 129 ( 0.00%) 46124 ( 0.00%) 357.55
napster 89 ( 0.00%) 6476 ( 0.00%) 72.76
realaud 50 ( 0.00%) 8321 ( 0.00%) 166.42
rtsp 33087 ( 0.10%) 43516249 ( 0.18%) 1315.21
icecast 13540 ( 0.04%) 3565240 ( 0.01%) 263.31
hotline 21 ( 0.00%) 1529 ( 0.00%) 72.81
other 3029224 ( 9.48%) 1927504077 ( 7.78%) 636.30
udp 9700931 ( 30.35%) 5343536345 ( 21.56%) 550.83
dns 1197440 ( 3.75%) 181003797 ( 0.73%) 151.16
realaud 14 ( 0.00%) 1532 ( 0.00%) 109.43
halflif 150 ( 0.00%) 13956 ( 0.00%) 93.04
starcra 673 ( 0.00%) 46025 ( 0.00%) 68.39
everque 380 ( 0.00%) 87083 ( 0.00%) 229.17
unreal 37 ( 0.00%) 4070 ( 0.00%) 110.00
quake 20 ( 0.00%) 2146 ( 0.00%) 107.30
cuseeme 2 ( 0.00%) 260 ( 0.00%) 130.00
other 8502117 ( 26.60%) 5162305757 ( 20.83%) 607.18
icmp 381488 ( 1.19%) 63137424 ( 0.25%) 165.50
ipip 163 ( 0.00%) 19026 ( 0.00%) 116.72
ipsec 9736 ( 0.03%) 1337240 ( 0.01%) 137.35
ip6 2523970 ( 7.90%) 1535164310 ( 6.19%) 608.23
other 388 ( 0.00%) 46570 ( 0.00%) 120.03
frag 622 ( 0.00%) 653626 ( 0.00%) 1050.85
ip6 84243 ( 0.26%) 36707841 ( 0.15%) 435.74
tcp6 38187 ( 0.12%) 25470683 ( 0.10%) 667.00
http(s) 389 ( 0.00%) 346620 ( 0.00%) 891.05
http(c) 1099 ( 0.00%) 182471 ( 0.00%) 166.03
smtp 186 ( 0.00%) 54738 ( 0.00%) 294.29
dns 39 ( 0.00%) 21945 ( 0.00%) 562.69
bgp 86 ( 0.00%) 11455 ( 0.00%) 133.20
other 36388 ( 0.11%) 24853454 ( 0.10%) 683.01
udp6 37411 ( 0.12%) 9825105 ( 0.04%) 262.63
dns 34231 ( 0.11%) 9164793 ( 0.04%) 267.73
other 3180 ( 0.01%) 660312 ( 0.00%) 207.65
icmp6 8485 ( 0.03%) 1285326 ( 0.01%) 151.48
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 130 ( 0.00%) 122647 ( 0.00%) 943.44
tcpdump file: 201009041400.dump.gz (792.53 MB)