Traffic Trace Info
DumpFile: 201009051400.dump
FileSize: 2040.68MB
Id: 201009051400
StartTime: Sun Sep 5 14:00:01 2010
EndTime: Sun Sep 5 14:15:00 2010
TotalTime: 899.27 seconds
TotalCapSize: 1603.28MB CapLen: 96 bytes
# of packets: 28664658 (20179.40MB)
AvgRate: 188.25Mbps stddev:21.59M
IP flow (unique src/dst pair) Information
# of flows: 803857 (avg. 35.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 2.1% 2.0% 1.9% 1.6% 1.4% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 475570
Top 10 bandwidth usage (bytes/total in %):
13.6% 11.9% 11.1% 8.1% 5.2% 3.3% 2.7% 2.3% 2.2% 2.1%
# of IPv6 addresses: 2300
Top 10 bandwidth usage (bytes/total in %):
35.7% 7.7% 4.1% 3.8% 3.5% 3.3% 3.3% 3.2% 3.1% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201009051400.pktlen.png)
detailed numbers
[ 32- 63]: 4255620
[ 64- 127]: 7696524
[ 128- 255]: 1410090
[ 256- 511]: 1271114
[ 512- 1023]: 756572
[ 1024- 2047]: 13274738
Protocol Breakdown
![[protocol breakdown chart]](201009051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28664658 (100.00%) 21159637313 (100.00%) 738.18
ip 28569945 ( 99.67%) 21142146822 ( 99.92%) 740.01
tcp 18282737 ( 63.78%) 15611096039 ( 73.78%) 853.87
http(s) 9724569 ( 33.93%) 12971362302 ( 61.30%) 1333.88
http(c) 4636973 ( 16.18%) 507887262 ( 2.40%) 109.53
squid 174314 ( 0.61%) 71750520 ( 0.34%) 411.62
smtp 149101 ( 0.52%) 38512354 ( 0.18%) 258.30
ftp 72959 ( 0.25%) 50290816 ( 0.24%) 689.30
pop3 5660 ( 0.02%) 1741756 ( 0.01%) 307.73
imap 1963 ( 0.01%) 383054 ( 0.00%) 195.14
telnet 4264 ( 0.01%) 273604 ( 0.00%) 64.17
ssh 44455 ( 0.16%) 6964955 ( 0.03%) 156.67
dns 4281 ( 0.01%) 378045 ( 0.00%) 88.31
bgp 125 ( 0.00%) 35868 ( 0.00%) 286.94
napster 23 ( 0.00%) 2268 ( 0.00%) 98.61
realaud 72 ( 0.00%) 8788 ( 0.00%) 122.06
rtsp 6647 ( 0.02%) 7719143 ( 0.04%) 1161.30
icecast 25339 ( 0.09%) 1824985 ( 0.01%) 72.02
hotline 8 ( 0.00%) 2048 ( 0.00%) 256.00
other 3431984 ( 11.97%) 1951958271 ( 9.22%) 568.76
udp 7303580 ( 25.48%) 3702503839 ( 17.50%) 506.94
dns 1137641 ( 3.97%) 168511637 ( 0.80%) 148.12
realaud 948 ( 0.00%) 57914 ( 0.00%) 61.09
halflif 42 ( 0.00%) 4266 ( 0.00%) 101.57
starcra 72 ( 0.00%) 8876 ( 0.00%) 123.28
everque 386 ( 0.00%) 86303 ( 0.00%) 223.58
unreal 132 ( 0.00%) 10667 ( 0.00%) 80.81
quake 24 ( 0.00%) 2360 ( 0.00%) 98.33
cuseeme 3 ( 0.00%) 250 ( 0.00%) 83.33
other 6164242 ( 21.50%) 3533763476 ( 16.70%) 573.27
icmp 479547 ( 1.67%) 95054112 ( 0.45%) 198.22
ipip 154 ( 0.00%) 18080 ( 0.00%) 117.40
ipsec 9609 ( 0.03%) 1321510 ( 0.01%) 137.53
ip6 2478212 ( 8.65%) 1714596702 ( 8.10%) 691.87
other 16106 ( 0.06%) 17556540 ( 0.08%) 1090.06
frag 789 ( 0.00%) 749230 ( 0.00%) 949.59
ip6 94713 ( 0.33%) 17490491 ( 0.08%) 184.67
tcp6 45610 ( 0.16%) 5792766 ( 0.03%) 127.01
http(s) 856 ( 0.00%) 952546 ( 0.00%) 1112.79
http(c) 3947 ( 0.01%) 399554 ( 0.00%) 101.23
squid 21 ( 0.00%) 10472 ( 0.00%) 498.67
smtp 128 ( 0.00%) 22910 ( 0.00%) 178.98
pop3 35 ( 0.00%) 3214 ( 0.00%) 91.83
dns 44 ( 0.00%) 8065 ( 0.00%) 183.30
bgp 88 ( 0.00%) 11767 ( 0.00%) 133.72
other 40491 ( 0.14%) 4384238 ( 0.02%) 108.28
udp6 36995 ( 0.13%) 9714352 ( 0.05%) 262.59
dns 32812 ( 0.11%) 8869199 ( 0.04%) 270.30
unreal 2 ( 0.00%) 333 ( 0.00%) 166.50
other 4181 ( 0.01%) 844820 ( 0.00%) 202.06
icmp6 11797 ( 0.04%) 1684515 ( 0.01%) 142.79
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 281 ( 0.00%) 294778 ( 0.00%) 1049.03
tcpdump file: 201009051400.dump.gz (724.83 MB)