Traffic Trace Info
DumpFile: 201009141400.dump
FileSize: 2563.15MB
Id: 201009141400
StartTime: Tue Sep 14 14:00:01 2010
EndTime: Tue Sep 14 14:15:01 2010
TotalTime: 899.95 seconds
TotalCapSize: 2019.39MB CapLen: 96 bytes
# of packets: 35635324 (25506.99MB)
AvgRate: 237.76Mbps stddev:27.71M
IP flow (unique src/dst pair) Information
# of flows: 913059 (avg. 39.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.7% 4.2% 1.5% 1.4% 1.4% 1.3% 1.0% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 490652
Top 10 bandwidth usage (bytes/total in %):
11.0% 9.8% 9.0% 7.5% 7.3% 4.8% 4.7% 4.3% 2.8% 2.0%
# of IPv6 addresses: 2214
Top 10 bandwidth usage (bytes/total in %):
27.1% 11.7% 11.5% 10.1% 10.1% 6.2% 6.2% 2.9% 2.7% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201009141400.pktlen.png)
detailed numbers
[ 32- 63]: 5512190
[ 64- 127]: 9678262
[ 128- 255]: 1415006
[ 256- 511]: 1332186
[ 512- 1023]: 828538
[ 1024- 2047]: 16869142
Protocol Breakdown
![[protocol breakdown chart]](201009141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35635324 (100.00%) 26746022175 (100.00%) 750.55
ip 35549222 ( 99.76%) 26722991630 ( 99.91%) 751.72
tcp 24609802 ( 69.06%) 20470854812 ( 76.54%) 831.82
http(s) 12421138 ( 34.86%) 16872270456 ( 63.08%) 1358.35
http(c) 7881610 ( 22.12%) 992675071 ( 3.71%) 125.95
squid 159519 ( 0.45%) 61685747 ( 0.23%) 386.70
smtp 248509 ( 0.70%) 67322430 ( 0.25%) 270.91
ftp 29609 ( 0.08%) 2395221 ( 0.01%) 80.90
pop3 17559 ( 0.05%) 6323215 ( 0.02%) 360.11
imap 62417 ( 0.18%) 63593582 ( 0.24%) 1018.85
telnet 1792 ( 0.01%) 124663 ( 0.00%) 69.57
ssh 18287 ( 0.05%) 8083300 ( 0.03%) 442.02
dns 3869 ( 0.01%) 361318 ( 0.00%) 93.39
bgp 142 ( 0.00%) 57938 ( 0.00%) 408.01
napster 1114 ( 0.00%) 565726 ( 0.00%) 507.83
realaud 22 ( 0.00%) 3245 ( 0.00%) 147.50
rtsp 15002 ( 0.04%) 15938263 ( 0.06%) 1062.41
icecast 8676 ( 0.02%) 896031 ( 0.00%) 103.28
hotline 415 ( 0.00%) 28671 ( 0.00%) 69.09
other 3740106 ( 10.50%) 2378528975 ( 8.89%) 635.95
udp 7600803 ( 21.33%) 4171161099 ( 15.60%) 548.78
dns 1359114 ( 3.81%) 213096704 ( 0.80%) 156.79
realaud 15 ( 0.00%) 1876 ( 0.00%) 125.07
halflif 37 ( 0.00%) 3314 ( 0.00%) 89.57
starcra 60 ( 0.00%) 7639 ( 0.00%) 127.32
everque 287 ( 0.00%) 44359 ( 0.00%) 154.56
unreal 16 ( 0.00%) 2002 ( 0.00%) 125.12
quake 36 ( 0.00%) 3682 ( 0.00%) 102.28
cuseeme 6 ( 0.00%) 501 ( 0.00%) 83.50
other 6238067 ( 17.51%) 3957709851 ( 14.80%) 634.44
icmp 449653 ( 1.26%) 110136842 ( 0.41%) 244.94
ipip 173 ( 0.00%) 20218 ( 0.00%) 116.87
ipsec 11706 ( 0.03%) 1808892 ( 0.01%) 154.53
ip6 2875908 ( 8.07%) 1968729623 ( 7.36%) 684.56
other 1177 ( 0.00%) 280144 ( 0.00%) 238.02
frag 10243 ( 0.03%) 7794561 ( 0.03%) 760.96
ip6 86102 ( 0.24%) 23030545 ( 0.09%) 267.48
tcp6 36224 ( 0.10%) 10573957 ( 0.04%) 291.90
http(s) 2706 ( 0.01%) 3017433 ( 0.01%) 1115.09
http(c) 4969 ( 0.01%) 705332 ( 0.00%) 141.95
smtp 1177 ( 0.00%) 681648 ( 0.00%) 579.14
dns 39 ( 0.00%) 7000 ( 0.00%) 179.49
bgp 90 ( 0.00%) 15363 ( 0.00%) 170.70
other 27243 ( 0.08%) 6147181 ( 0.02%) 225.64
udp6 41024 ( 0.12%) 10804096 ( 0.04%) 263.36
dns 37757 ( 0.11%) 10189120 ( 0.04%) 269.86
other 3267 ( 0.01%) 614976 ( 0.00%) 188.24
icmp6 8684 ( 0.02%) 1520940 ( 0.01%) 175.14
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 140 ( 0.00%) 127472 ( 0.00%) 910.51
tcpdump file: 201009141400.dump.gz (896.92 MB)