Traffic Trace Info
DumpFile: 201009091400.dump
FileSize: 2812.92MB
Id: 201009091400
StartTime: Thu Sep 9 14:00:01 2010
EndTime: Thu Sep 9 14:15:01 2010
TotalTime: 900.07 seconds
TotalCapSize: -1883.90MB CapLen: 96 bytes
# of packets: 39374306 (27806.96MB)
AvgRate: 259.14Mbps stddev:45.92M
IP flow (unique src/dst pair) Information
# of flows: 1094725 (avg. 35.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 1.7% 1.5% 1.4% 1.3% 0.9% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 660066
Top 10 bandwidth usage (bytes/total in %):
13.0% 10.5% 6.2% 5.0% 4.8% 4.4% 4.3% 4.0% 2.6% 1.8%
# of IPv6 addresses: 2203
Top 10 bandwidth usage (bytes/total in %):
27.6% 27.6% 15.9% 15.8% 13.5% 7.6% 6.6% 6.6% 6.5% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201009091400.pktlen.png)
detailed numbers
[ 32- 63]: 6198789
[ 64- 127]: 10757185
[ 128- 255]: 1547828
[ 256- 511]: 1459614
[ 512- 1023]: 920844
[ 1024- 2047]: 18490046
Protocol Breakdown
![[protocol breakdown chart]](201009091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39374306 (100.00%) 29157714340 (100.00%) 740.53
ip 39227086 ( 99.63%) 29111664595 ( 99.84%) 742.13
tcp 27236137 ( 69.17%) 22469179527 ( 77.06%) 824.98
http(s) 13193356 ( 33.51%) 17921312474 ( 61.46%) 1358.36
http(c) 8371943 ( 21.26%) 1004373816 ( 3.44%) 119.97
squid 246041 ( 0.62%) 119192418 ( 0.41%) 484.44
smtp 240413 ( 0.61%) 74418445 ( 0.26%) 309.54
ftp 19407 ( 0.05%) 1583072 ( 0.01%) 81.57
pop3 12713 ( 0.03%) 4403307 ( 0.02%) 346.36
imap 15660 ( 0.04%) 13461623 ( 0.05%) 859.62
telnet 1010 ( 0.00%) 73423 ( 0.00%) 72.70
ssh 67618 ( 0.17%) 8764654 ( 0.03%) 129.62
dns 4275 ( 0.01%) 385869 ( 0.00%) 90.26
bgp 148 ( 0.00%) 53473 ( 0.00%) 361.30
napster 337 ( 0.00%) 158347 ( 0.00%) 469.87
realaud 211 ( 0.00%) 25229 ( 0.00%) 119.57
rtsp 7998 ( 0.02%) 9062281 ( 0.03%) 1133.07
icecast 884 ( 0.00%) 136679 ( 0.00%) 154.61
other 5054108 ( 12.84%) 3311773517 ( 11.36%) 655.26
udp 8798815 ( 22.35%) 4727327708 ( 16.21%) 537.27
dns 1171632 ( 2.98%) 189474660 ( 0.65%) 161.72
realaud 87 ( 0.00%) 6092 ( 0.00%) 70.02
halflif 2367 ( 0.01%) 1634148 ( 0.01%) 690.39
starcra 12 ( 0.00%) 1285 ( 0.00%) 107.08
everque 380 ( 0.00%) 74544 ( 0.00%) 196.17
unreal 38 ( 0.00%) 4141 ( 0.00%) 108.97
quake 23 ( 0.00%) 2053 ( 0.00%) 89.26
cuseeme 5 ( 0.00%) 365 ( 0.00%) 73.00
other 7624124 ( 19.36%) 4536001941 ( 15.56%) 594.95
icmp 513559 ( 1.30%) 99360558 ( 0.34%) 193.47
ipip 164 ( 0.00%) 18884 ( 0.00%) 115.15
ipsec 10964 ( 0.03%) 1863224 ( 0.01%) 169.94
ip6 2666535 ( 6.77%) 1813764824 ( 6.22%) 680.20
other 912 ( 0.00%) 149870 ( 0.00%) 164.33
frag 3507 ( 0.01%) 3156962 ( 0.01%) 900.19
ip6 147220 ( 0.37%) 46049745 ( 0.16%) 312.80
tcp6 90503 ( 0.23%) 32881388 ( 0.11%) 363.32
http(s) 3826 ( 0.01%) 4533340 ( 0.02%) 1184.88
http(c) 2570 ( 0.01%) 341729 ( 0.00%) 132.97
smtp 177 ( 0.00%) 81235 ( 0.00%) 458.95
imap 351 ( 0.00%) 40384 ( 0.00%) 115.05
dns 25 ( 0.00%) 6049 ( 0.00%) 241.96
bgp 87 ( 0.00%) 12894 ( 0.00%) 148.21
other 83467 ( 0.21%) 27865757 ( 0.10%) 333.85
udp6 46467 ( 0.12%) 11159241 ( 0.04%) 240.15
dns 37607 ( 0.10%) 10047734 ( 0.03%) 267.18
halflif 2 ( 0.00%) 184 ( 0.00%) 92.00
other 8858 ( 0.02%) 1111323 ( 0.00%) 125.46
icmp6 9501 ( 0.02%) 1475886 ( 0.01%) 155.34
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 718 ( 0.00%) 529014 ( 0.00%) 736.79
tcpdump file: 201009091400.dump.gz (983.60 MB)