Traffic Trace Info
DumpFile: 201009071400.dump
FileSize: 2415.60MB
Id: 201009071400
StartTime: Tue Sep 7 14:00:01 2010
EndTime: Tue Sep 7 14:15:01 2010
TotalTime: 900.51 seconds
TotalCapSize: 1905.83MB CapLen: 96 bytes
# of packets: 33407639 (24163.33MB)
AvgRate: 225.05Mbps stddev:22.12M
IP flow (unique src/dst pair) Information
# of flows: 785963 (avg. 42.51 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 3.2% 2.6% 2.1% 2.0% 1.6% 1.6% 1.4% 1.4% 1.1%
IP address Information
# of IPv4 addresses: 436864
Top 10 bandwidth usage (bytes/total in %):
17.4% 12.1% 8.4% 5.0% 4.0% 3.4% 3.2% 3.0% 2.6% 2.2%
# of IPv6 addresses: 2364
Top 10 bandwidth usage (bytes/total in %):
40.4% 34.0% 16.6% 6.4% 6.2% 5.8% 3.0% 3.0% 2.7% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201009071400.pktlen.png)
detailed numbers
[ 32- 63]: 4356860
[ 64- 127]: 9310233
[ 128- 255]: 1529921
[ 256- 511]: 1319231
[ 512- 1023]: 922752
[ 1024- 2047]: 15968642
Protocol Breakdown
![[protocol breakdown chart]](201009071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33407639 (100.00%) 25337083585 (100.00%) 758.42
ip 33300265 ( 99.68%) 25299478943 ( 99.85%) 759.74
tcp 21975108 ( 65.78%) 18820012211 ( 74.28%) 856.42
http(s) 11287698 ( 33.79%) 15349471975 ( 60.58%) 1359.84
http(c) 6294559 ( 18.84%) 994550007 ( 3.93%) 158.00
squid 163470 ( 0.49%) 64422432 ( 0.25%) 394.09
smtp 222350 ( 0.67%) 94314080 ( 0.37%) 424.17
ftp 47939 ( 0.14%) 11714640 ( 0.05%) 244.37
pop3 12343 ( 0.04%) 5317729 ( 0.02%) 430.83
imap 3758 ( 0.01%) 867052 ( 0.00%) 230.72
telnet 1046 ( 0.00%) 70546 ( 0.00%) 67.44
ssh 618976 ( 1.85%) 354535017 ( 1.40%) 572.78
dns 5744 ( 0.02%) 488481 ( 0.00%) 85.04
bgp 115 ( 0.00%) 39255 ( 0.00%) 341.35
napster 11 ( 0.00%) 2389 ( 0.00%) 217.18
realaud 41 ( 0.00%) 7412 ( 0.00%) 180.78
rtsp 2109 ( 0.01%) 1473825 ( 0.01%) 698.83
icecast 11597 ( 0.03%) 984885 ( 0.00%) 84.93
hotline 14 ( 0.00%) 1876 ( 0.00%) 134.00
other 3303228 ( 9.89%) 1941744010 ( 7.66%) 587.83
udp 7813875 ( 23.39%) 4216156605 ( 16.64%) 539.57
dns 1193351 ( 3.57%) 198616690 ( 0.78%) 166.44
rip 1 ( 0.00%) 109 ( 0.00%) 109.00
realaud 23 ( 0.00%) 3030 ( 0.00%) 131.74
halflif 95 ( 0.00%) 17336 ( 0.00%) 182.48
starcra 30 ( 0.00%) 4797 ( 0.00%) 159.90
everque 564 ( 0.00%) 111079 ( 0.00%) 196.95
unreal 21 ( 0.00%) 4089 ( 0.00%) 194.71
quake 19 ( 0.00%) 2438 ( 0.00%) 128.32
cuseeme 3 ( 0.00%) 293 ( 0.00%) 97.67
other 6619675 ( 19.81%) 4017326105 ( 15.86%) 606.88
icmp 499668 ( 1.50%) 112718893 ( 0.44%) 225.59
ipip 171 ( 0.00%) 19938 ( 0.00%) 116.60
ipsec 11072 ( 0.03%) 2341756 ( 0.01%) 211.50
ip6 3000005 ( 8.98%) 2148186140 ( 8.48%) 716.06
other 366 ( 0.00%) 43400 ( 0.00%) 118.58
frag 653 ( 0.00%) 638801 ( 0.00%) 978.26
ip6 107374 ( 0.32%) 37604642 ( 0.15%) 350.22
tcp6 53905 ( 0.16%) 24092111 ( 0.10%) 446.94
http(s) 848 ( 0.00%) 756935 ( 0.00%) 892.61
http(c) 1597 ( 0.00%) 276126 ( 0.00%) 172.90
smtp 358 ( 0.00%) 170471 ( 0.00%) 476.18
imap 429 ( 0.00%) 48839 ( 0.00%) 113.84
ssh 15 ( 0.00%) 4650 ( 0.00%) 310.00
dns 65 ( 0.00%) 11134 ( 0.00%) 171.29
bgp 88 ( 0.00%) 13133 ( 0.00%) 149.24
other 50505 ( 0.15%) 22810823 ( 0.09%) 451.65
udp6 43888 ( 0.13%) 11083067 ( 0.04%) 252.53
dns 41256 ( 0.12%) 10658099 ( 0.04%) 258.34
other 2632 ( 0.01%) 424968 ( 0.00%) 161.46
icmp6 8022 ( 0.02%) 1318763 ( 0.01%) 164.39
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1529 ( 0.00%) 1106621 ( 0.00%) 723.75
tcpdump file: 201009071400.dump.gz (846.64 MB)