Traffic Trace Info
DumpFile: 201009061400.dump
FileSize: 2224.24MB
Id: 201009061400
StartTime: Mon Sep 6 14:00:01 2010
EndTime: Mon Sep 6 14:15:00 2010
TotalTime: 899.64 seconds
TotalCapSize: 1752.62MB CapLen: 96 bytes
# of packets: 30907603 (21187.75MB)
AvgRate: 197.59Mbps stddev:30.99M
IP flow (unique src/dst pair) Information
# of flows: 933543 (avg. 33.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 3.8% 2.9% 1.8% 1.7% 1.4% 1.4% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 514010
Top 10 bandwidth usage (bytes/total in %):
10.9% 9.0% 8.4% 5.2% 4.4% 4.4% 3.8% 3.8% 3.7% 2.9%
# of IPv6 addresses: 2177
Top 10 bandwidth usage (bytes/total in %):
63.6% 63.6% 8.8% 4.7% 4.7% 4.1% 4.1% 3.0% 3.0% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201009061400.pktlen.png)
detailed numbers
[ 32- 63]: 5466927
[ 64- 127]: 8206872
[ 128- 255]: 1350797
[ 256- 511]: 1281000
[ 512- 1023]: 714301
[ 1024- 2047]: 13887706
Protocol Breakdown
![[protocol breakdown chart]](201009061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30907603 (100.00%) 22216964709 (100.00%) 718.82
ip 30788668 ( 99.62%) 22146450768 ( 99.68%) 719.31
tcp 20902146 ( 67.63%) 17034340793 ( 76.67%) 814.96
http(s) 9424799 ( 30.49%) 12740268009 ( 57.34%) 1351.78
http(c) 5812623 ( 18.81%) 851235656 ( 3.83%) 146.45
squid 210116 ( 0.68%) 78136471 ( 0.35%) 371.87
smtp 312378 ( 1.01%) 109566569 ( 0.49%) 350.75
ftp 15947 ( 0.05%) 1713148 ( 0.01%) 107.43
pop3 13256 ( 0.04%) 3965230 ( 0.02%) 299.13
imap 3517 ( 0.01%) 804367 ( 0.00%) 228.71
telnet 648 ( 0.00%) 47034 ( 0.00%) 72.58
ssh 27354 ( 0.09%) 3747375 ( 0.02%) 137.00
dns 3877 ( 0.01%) 362776 ( 0.00%) 93.57
bgp 152 ( 0.00%) 64964 ( 0.00%) 427.39
napster 138 ( 0.00%) 14674 ( 0.00%) 106.33
realaud 37 ( 0.00%) 6759 ( 0.00%) 182.68
rtsp 15016 ( 0.05%) 14280227 ( 0.06%) 951.00
icecast 19753 ( 0.06%) 9723493 ( 0.04%) 492.25
other 5042532 ( 16.31%) 3220403861 ( 14.50%) 638.65
udp 6801747 ( 22.01%) 3164273086 ( 14.24%) 465.21
dns 1242058 ( 4.02%) 200953639 ( 0.90%) 161.79
rip 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 14 ( 0.00%) 1485 ( 0.00%) 106.07
halflif 27 ( 0.00%) 2532 ( 0.00%) 93.78
starcra 84 ( 0.00%) 9955 ( 0.00%) 118.51
everque 8423 ( 0.03%) 976589 ( 0.00%) 115.94
unreal 18 ( 0.00%) 2213 ( 0.00%) 122.94
quake 15 ( 0.00%) 1898 ( 0.00%) 126.53
cuseeme 3 ( 0.00%) 464 ( 0.00%) 154.67
other 5551029 ( 17.96%) 2962275967 ( 13.33%) 533.64
icmp 468788 ( 1.52%) 82484052 ( 0.37%) 175.95
ipip 167 ( 0.00%) 20158 ( 0.00%) 120.71
ipsec 9335 ( 0.03%) 1285770 ( 0.01%) 137.74
ip6 2605284 ( 8.43%) 1863778097 ( 8.39%) 715.38
other 1201 ( 0.00%) 268812 ( 0.00%) 223.82
frag 808 ( 0.00%) 805230 ( 0.00%) 996.57
ip6 118935 ( 0.38%) 70513941 ( 0.32%) 592.88
tcp6 64153 ( 0.21%) 55644789 ( 0.25%) 867.38
http(s) 775 ( 0.00%) 783694 ( 0.00%) 1011.22
http(c) 1297 ( 0.00%) 213889 ( 0.00%) 164.91
smtp 104 ( 0.00%) 26067 ( 0.00%) 250.64
imap 332 ( 0.00%) 39239 ( 0.00%) 118.19
dns 23 ( 0.00%) 4598 ( 0.00%) 199.91
bgp 87 ( 0.00%) 13477 ( 0.00%) 154.91
other 61535 ( 0.20%) 54563825 ( 0.25%) 886.71
udp6 41868 ( 0.14%) 11073038 ( 0.05%) 264.47
dns 38422 ( 0.12%) 10336527 ( 0.05%) 269.03
quake 1 ( 0.00%) 115 ( 0.00%) 115.00
cuseeme 1 ( 0.00%) 107 ( 0.00%) 107.00
other 3444 ( 0.01%) 736289 ( 0.00%) 213.79
icmp6 9613 ( 0.03%) 1442105 ( 0.01%) 150.02
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3271 ( 0.01%) 2349929 ( 0.01%) 718.41
tcpdump file: 201009061400.dump.gz (784.65 MB)