Traffic Trace Info
DumpFile: 201009131400.dump
FileSize: 2398.10MB
Id: 201009131400
StartTime: Mon Sep 13 14:00:01 2010
EndTime: Mon Sep 13 14:15:01 2010
TotalTime: 900.62 seconds
TotalCapSize: 1887.33MB CapLen: 96 bytes
# of packets: 33473152 (23622.97MB)
AvgRate: 220.10Mbps stddev:32.48M
IP flow (unique src/dst pair) Information
# of flows: 997909 (avg. 33.54 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 3.7% 2.0% 1.9% 1.6% 1.5% 1.3% 1.2% 1.0% 0.8%
IP address Information
# of IPv4 addresses: 568121
Top 10 bandwidth usage (bytes/total in %):
12.5% 7.7% 7.5% 6.7% 5.6% 4.8% 3.9% 3.9% 2.5% 2.2%
# of IPv6 addresses: 2295
Top 10 bandwidth usage (bytes/total in %):
62.0% 40.4% 21.7% 18.4% 14.5% 9.0% 9.0% 3.9% 2.3% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201009131400.pktlen.png)
detailed numbers
[ 32- 63]: 5745366
[ 64- 127]: 8455332
[ 128- 255]: 1480992
[ 256- 511]: 1398623
[ 512- 1023]: 971227
[ 1024- 2047]: 15421612
Protocol Breakdown
![[protocol breakdown chart]](201009131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33473152 (100.00%) 24770482099 (100.00%) 740.01
ip 33171439 ( 99.10%) 24485113959 ( 98.85%) 738.14
tcp 22270323 ( 66.53%) 18443003488 ( 74.46%) 828.14
http(s) 10962131 ( 32.75%) 14873038904 ( 60.04%) 1356.77
http(c) 7346736 ( 21.95%) 1455627056 ( 5.88%) 198.13
squid 162235 ( 0.48%) 66359098 ( 0.27%) 409.03
smtp 255740 ( 0.76%) 97723614 ( 0.39%) 382.12
ftp 29626 ( 0.09%) 2500200 ( 0.01%) 84.39
pop3 15461 ( 0.05%) 5831541 ( 0.02%) 377.18
imap 3926 ( 0.01%) 578434 ( 0.00%) 147.33
telnet 1244 ( 0.00%) 90420 ( 0.00%) 72.68
ssh 56464 ( 0.17%) 34216952 ( 0.14%) 606.00
dns 3304 ( 0.01%) 331248 ( 0.00%) 100.26
bgp 135 ( 0.00%) 47317 ( 0.00%) 350.50
napster 58 ( 0.00%) 8745 ( 0.00%) 150.78
realaud 61 ( 0.00%) 6149 ( 0.00%) 100.80
rtsp 6862 ( 0.02%) 7750477 ( 0.03%) 1129.48
icecast 1495 ( 0.00%) 359683 ( 0.00%) 240.59
hotline 3 ( 0.00%) 186 ( 0.00%) 62.00
other 3424831 ( 10.23%) 1898532804 ( 7.66%) 554.34
udp 7627382 ( 22.79%) 4043775334 ( 16.32%) 530.17
dns 1203992 ( 3.60%) 188859137 ( 0.76%) 156.86
realaud 15 ( 0.00%) 1812 ( 0.00%) 120.80
halflif 50 ( 0.00%) 6930 ( 0.00%) 138.60
starcra 14 ( 0.00%) 2295 ( 0.00%) 163.93
everque 8037 ( 0.02%) 904225 ( 0.00%) 112.51
unreal 22 ( 0.00%) 3704 ( 0.00%) 168.36
quake 28 ( 0.00%) 3307 ( 0.00%) 118.11
cuseeme 2 ( 0.00%) 561 ( 0.00%) 280.50
other 6415126 ( 19.16%) 3853903383 ( 15.56%) 600.75
icmp 373550 ( 1.12%) 89511537 ( 0.36%) 239.62
ipip 181 ( 0.00%) 21930 ( 0.00%) 121.16
ipsec 10523 ( 0.03%) 1959594 ( 0.01%) 186.22
ip6 2888564 ( 8.63%) 1906688072 ( 7.70%) 660.08
other 916 ( 0.00%) 154004 ( 0.00%) 168.13
frag 596 ( 0.00%) 656182 ( 0.00%) 1100.98
ip6 301713 ( 0.90%) 285368140 ( 1.15%) 945.83
tcp6 249798 ( 0.75%) 272218591 ( 1.10%) 1089.75
http(s) 878 ( 0.00%) 616134 ( 0.00%) 701.75
http(c) 1542 ( 0.00%) 230286 ( 0.00%) 149.34
smtp 224 ( 0.00%) 99918 ( 0.00%) 446.06
dns 33 ( 0.00%) 8260 ( 0.00%) 250.30
bgp 92 ( 0.00%) 16238 ( 0.00%) 176.50
other 247029 ( 0.74%) 271247755 ( 1.10%) 1098.04
udp6 40827 ( 0.12%) 10674849 ( 0.04%) 261.47
dns 37421 ( 0.11%) 10131331 ( 0.04%) 270.74
quake 1 ( 0.00%) 116 ( 0.00%) 116.00
cuseeme 1 ( 0.00%) 118 ( 0.00%) 118.00
other 3404 ( 0.01%) 543284 ( 0.00%) 159.60
icmp6 9731 ( 0.03%) 1518224 ( 0.01%) 156.02
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1326 ( 0.00%) 952260 ( 0.00%) 718.14
tcpdump file: 201009131400.dump.gz (835.14 MB)