Traffic Trace Info
DumpFile: 201009111400.dump
FileSize: 2201.26MB
Id: 201009111400
StartTime: Sat Sep 11 14:00:01 2010
EndTime: Sat Sep 11 14:15:00 2010
TotalTime: 899.70 seconds
TotalCapSize: 1734.20MB CapLen: 96 bytes
# of packets: 30608574 (22729.69MB)
AvgRate: 211.97Mbps stddev:28.25M
IP flow (unique src/dst pair) Information
# of flows: 1050764 (avg. 29.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 4.7% 2.4% 2.1% 2.0% 1.8% 1.6% 1.2% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 614837
Top 10 bandwidth usage (bytes/total in %):
17.1% 10.1% 8.2% 7.0% 6.1% 4.9% 4.7% 4.7% 2.4% 2.2%
# of IPv6 addresses: 2186
Top 10 bandwidth usage (bytes/total in %):
46.8% 46.8% 25.4% 25.3% 8.8% 2.9% 1.9% 1.3% 1.3% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201009111400.pktlen.png)
detailed numbers
[ 32- 63]: 3847407
[ 64- 127]: 8213646
[ 128- 255]: 1380370
[ 256- 511]: 1270276
[ 512- 1023]: 988950
[ 1024- 2047]: 14907925
Protocol Breakdown
![[protocol breakdown chart]](201009111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30608574 (100.00%) 23833810753 (100.00%) 778.66
ip 30489504 ( 99.61%) 23763056809 ( 99.70%) 779.38
tcp 20223839 ( 66.07%) 18527521408 ( 77.74%) 916.12
http(s) 10945258 ( 35.76%) 14781104714 ( 62.02%) 1350.46
http(c) 4613463 ( 15.07%) 709667724 ( 2.98%) 153.83
squid 241131 ( 0.79%) 131419182 ( 0.55%) 545.01
smtp 198135 ( 0.65%) 34876127 ( 0.15%) 176.02
nntp 8 ( 0.00%) 496 ( 0.00%) 62.00
ftp 14365 ( 0.05%) 1637768 ( 0.01%) 114.01
pop3 16774 ( 0.05%) 5112358 ( 0.02%) 304.78
imap 16719 ( 0.05%) 22138671 ( 0.09%) 1324.16
telnet 747 ( 0.00%) 49960 ( 0.00%) 66.88
ssh 1080164 ( 3.53%) 211275309 ( 0.89%) 195.60
dns 2742 ( 0.01%) 304446 ( 0.00%) 111.03
bgp 149 ( 0.00%) 73871 ( 0.00%) 495.78
napster 33 ( 0.00%) 6663 ( 0.00%) 201.91
realaud 20 ( 0.00%) 3777 ( 0.00%) 188.85
rtsp 7200 ( 0.02%) 6017775 ( 0.03%) 835.80
icecast 1890 ( 0.01%) 1216791 ( 0.01%) 643.80
other 3085041 ( 10.08%) 2622615776 ( 11.00%) 850.11
udp 7152784 ( 23.37%) 3443613914 ( 14.45%) 481.44
dns 1157347 ( 3.78%) 173266760 ( 0.73%) 149.71
realaud 7 ( 0.00%) 898 ( 0.00%) 128.29
halflif 37 ( 0.00%) 3043 ( 0.00%) 82.24
starcra 38 ( 0.00%) 6046 ( 0.00%) 159.11
everque 226 ( 0.00%) 36749 ( 0.00%) 162.61
unreal 16 ( 0.00%) 2510 ( 0.00%) 156.88
quake 19 ( 0.00%) 4865 ( 0.00%) 256.05
cuseeme 8 ( 0.00%) 1013 ( 0.00%) 126.62
other 5995019 ( 19.59%) 3270230812 ( 13.72%) 545.49
icmp 563122 ( 1.84%) 120816141 ( 0.51%) 214.55
ipip 159 ( 0.00%) 18310 ( 0.00%) 115.16
ipsec 13960 ( 0.05%) 1914736 ( 0.01%) 137.16
ip6 2534752 ( 8.28%) 1669021264 ( 7.00%) 658.46
other 888 ( 0.00%) 151036 ( 0.00%) 170.09
frag 534 ( 0.00%) 567193 ( 0.00%) 1062.16
ip6 119070 ( 0.39%) 70753944 ( 0.30%) 594.22
tcp6 67753 ( 0.22%) 58277291 ( 0.24%) 860.14
http(s) 1018 ( 0.00%) 1000632 ( 0.00%) 982.94
http(c) 2168 ( 0.01%) 333835 ( 0.00%) 153.98
smtp 221 ( 0.00%) 68362 ( 0.00%) 309.33
dns 81 ( 0.00%) 28366 ( 0.00%) 350.20
bgp 87 ( 0.00%) 13863 ( 0.00%) 159.34
other 64178 ( 0.21%) 56832233 ( 0.24%) 885.54
udp6 44563 ( 0.15%) 11211038 ( 0.05%) 251.58
dns 35545 ( 0.12%) 9390164 ( 0.04%) 264.18
other 9018 ( 0.03%) 1820874 ( 0.01%) 201.92
icmp6 6572 ( 0.02%) 1133673 ( 0.00%) 172.50
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 152 ( 0.00%) 127862 ( 0.00%) 841.20
tcpdump file: 201009111400.dump.gz (772.82 MB)