Traffic Trace Info
DumpFile: 201009121400.dump
FileSize: 2201.28MB
Id: 201009121400
StartTime: Sun Sep 12 14:00:01 2010
EndTime: Sun Sep 12 14:15:01 2010
TotalTime: 899.97 seconds
TotalCapSize: 1735.44MB CapLen: 96 bytes
# of packets: 30528605 (24894.76MB)
AvgRate: 232.03Mbps stddev:36.68M
IP flow (unique src/dst pair) Information
# of flows: 783181 (avg. 38.98 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.1% 3.6% 3.1% 2.8% 2.6% 2.1% 1.8% 1.7% 1.6% 1.5%
IP address Information
# of IPv4 addresses: 450810
Top 10 bandwidth usage (bytes/total in %):
25.9% 9.4% 7.8% 6.4% 6.2% 5.1% 4.1% 3.7% 3.1% 2.9%
# of IPv6 addresses: 2183
Top 10 bandwidth usage (bytes/total in %):
25.1% 18.7% 18.7% 18.1% 14.6% 10.8% 10.8% 7.5% 7.1% 5.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201009121400.pktlen.png)
detailed numbers
[ 32- 63]: 3397871
[ 64- 127]: 7291559
[ 128- 255]: 1290260
[ 256- 511]: 1106785
[ 512- 1023]: 815252
[ 1024- 2047]: 16626878
Protocol Breakdown
![[protocol breakdown chart]](201009121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30528605 (100.00%) 26104050723 (100.00%) 855.07
ip 30411284 ( 99.62%) 26061168382 ( 99.84%) 856.96
tcp 20186641 ( 66.12%) 20689517523 ( 79.26%) 1024.91
http(s) 13133432 ( 43.02%) 18181433320 ( 69.65%) 1384.36
http(c) 4343471 ( 14.23%) 954058480 ( 3.65%) 219.65
squid 192496 ( 0.63%) 68711812 ( 0.26%) 356.95
smtp 144047 ( 0.47%) 36127923 ( 0.14%) 250.81
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 22391 ( 0.07%) 1933526 ( 0.01%) 86.35
pop3 8253 ( 0.03%) 3128516 ( 0.01%) 379.08
imap 2510 ( 0.01%) 462818 ( 0.00%) 184.39
telnet 1206 ( 0.00%) 87048 ( 0.00%) 72.18
ssh 73129 ( 0.24%) 21472616 ( 0.08%) 293.63
dns 2237 ( 0.01%) 250823 ( 0.00%) 112.12
bgp 110 ( 0.00%) 39052 ( 0.00%) 355.02
napster 9 ( 0.00%) 1000 ( 0.00%) 111.11
realaud 12 ( 0.00%) 1170 ( 0.00%) 97.50
rtsp 3614 ( 0.01%) 2618953 ( 0.01%) 724.67
icecast 951 ( 0.00%) 382384 ( 0.00%) 402.09
hotline 4 ( 0.00%) 296 ( 0.00%) 74.00
other 2258768 ( 7.40%) 1418807724 ( 5.44%) 628.13
udp 7149756 ( 23.42%) 3568430066 ( 13.67%) 499.10
dns 989854 ( 3.24%) 142905213 ( 0.55%) 144.37
realaud 12 ( 0.00%) 1048 ( 0.00%) 87.33
halflif 518 ( 0.00%) 31432 ( 0.00%) 60.68
starcra 4 ( 0.00%) 300 ( 0.00%) 75.00
everque 183 ( 0.00%) 31519 ( 0.00%) 172.23
unreal 101 ( 0.00%) 7622 ( 0.00%) 75.47
quake 22 ( 0.00%) 1970 ( 0.00%) 89.55
cuseeme 1 ( 0.00%) 90 ( 0.00%) 90.00
other 6159011 ( 20.17%) 3425412495 ( 13.12%) 556.16
icmp 481551 ( 1.58%) 112950364 ( 0.43%) 234.56
ipip 169 ( 0.00%) 20402 ( 0.00%) 120.72
ipsec 9478 ( 0.03%) 1334868 ( 0.01%) 140.84
ip6 2583323 ( 8.46%) 1688871075 ( 6.47%) 653.76
other 366 ( 0.00%) 44084 ( 0.00%) 120.45
frag 415 ( 0.00%) 426650 ( 0.00%) 1028.07
ip6 117321 ( 0.38%) 42882341 ( 0.16%) 365.51
tcp6 70983 ( 0.23%) 32028030 ( 0.12%) 451.21
http(s) 515 ( 0.00%) 393267 ( 0.00%) 763.63
http(c) 827 ( 0.00%) 104835 ( 0.00%) 126.77
smtp 77 ( 0.00%) 11599 ( 0.00%) 150.64
dns 16 ( 0.00%) 2193 ( 0.00%) 137.06
bgp 95 ( 0.00%) 17228 ( 0.00%) 181.35
other 69453 ( 0.23%) 31498908 ( 0.12%) 453.53
udp6 36803 ( 0.12%) 9340494 ( 0.04%) 253.80
dns 31883 ( 0.10%) 8494590 ( 0.03%) 266.43
other 4920 ( 0.02%) 845904 ( 0.00%) 171.93
icmp6 9447 ( 0.03%) 1452542 ( 0.01%) 153.76
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 58 ( 0.00%) 57195 ( 0.00%) 986.12
tcpdump file: 201009121400.dump.gz (741.56 MB)