Traffic Trace Info
DumpFile: 201009151400.dump
FileSize: 2477.96MB
Id: 201009151400
StartTime: Wed Sep 15 14:00:01 2010
EndTime: Wed Sep 15 14:15:01 2010
TotalTime: 899.55 seconds
TotalCapSize: 1947.73MB CapLen: 96 bytes
# of packets: 34748314 (23190.78MB)
AvgRate: 216.25Mbps stddev:25.34M
IP flow (unique src/dst pair) Information
# of flows: 1009018 (avg. 34.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 2.0% 1.6% 1.5% 1.5% 1.2% 1.0% 0.9% 0.9% 0.7%
IP address Information
# of IPv4 addresses: 550212
Top 10 bandwidth usage (bytes/total in %):
12.8% 9.1% 8.5% 8.0% 3.8% 3.1% 2.1% 2.1% 1.7% 1.6%
# of IPv6 addresses: 2327
Top 10 bandwidth usage (bytes/total in %):
52.5% 52.5% 18.9% 2.1% 2.1% 1.7% 1.7% 1.7% 1.7% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201009151400.pktlen.png)
detailed numbers
[ 32- 63]: 5833056
[ 64- 127]: 9483126
[ 128- 255]: 1894292
[ 256- 511]: 1410632
[ 512- 1023]: 969590
[ 1024- 2047]: 15157618
Protocol Breakdown
![[protocol breakdown chart]](201009151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34748314 (100.00%) 24317299916 (100.00%) 699.81
ip 34672648 ( 99.78%) 24284322511 ( 99.86%) 700.39
tcp 22469445 ( 64.66%) 17588635619 ( 72.33%) 782.78
http(s) 10645352 ( 30.64%) 14005918254 ( 57.60%) 1315.68
http(c) 7330357 ( 21.10%) 935107129 ( 3.85%) 127.57
squid 202218 ( 0.58%) 76536801 ( 0.31%) 378.49
smtp 251977 ( 0.73%) 64084673 ( 0.26%) 254.33
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 35050 ( 0.10%) 3337499 ( 0.01%) 95.22
pop3 11414 ( 0.03%) 3964410 ( 0.02%) 347.33
imap 5830 ( 0.02%) 3480223 ( 0.01%) 596.95
telnet 1217 ( 0.00%) 86082 ( 0.00%) 70.73
ssh 79138 ( 0.23%) 29693661 ( 0.12%) 375.21
dns 3573 ( 0.01%) 390993 ( 0.00%) 109.43
bgp 154 ( 0.00%) 58082 ( 0.00%) 377.16
napster 596 ( 0.00%) 223919 ( 0.00%) 375.70
realaud 27 ( 0.00%) 5098 ( 0.00%) 188.81
icecast 11854 ( 0.03%) 5121796 ( 0.02%) 432.07
hotline 13 ( 0.00%) 1776 ( 0.00%) 136.62
other 3890668 ( 11.20%) 2460624797 ( 10.12%) 632.44
udp 8641540 ( 24.87%) 4501274793 ( 18.51%) 520.89
dns 1442740 ( 4.15%) 230042283 ( 0.95%) 159.45
rip 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 19 ( 0.00%) 2286 ( 0.00%) 120.32
halflif 50 ( 0.00%) 7506 ( 0.00%) 150.12
starcra 105 ( 0.00%) 12812 ( 0.00%) 122.02
everque 2816 ( 0.01%) 852538 ( 0.00%) 302.75
unreal 16 ( 0.00%) 2655 ( 0.00%) 165.94
quake 26 ( 0.00%) 2412 ( 0.00%) 92.77
cuseeme 5 ( 0.00%) 372 ( 0.00%) 74.40
other 7195681 ( 20.71%) 4270292149 ( 17.56%) 593.45
icmp 411669 ( 1.18%) 90300675 ( 0.37%) 219.35
ipip 170 ( 0.00%) 20024 ( 0.00%) 117.79
ipsec 6064 ( 0.02%) 918176 ( 0.00%) 151.41
ip6 2941485 ( 8.47%) 2077624087 ( 8.54%) 706.32
other 202275 ( 0.58%) 25549137 ( 0.11%) 126.31
frag 475 ( 0.00%) 474335 ( 0.00%) 998.60
ip6 75666 ( 0.22%) 32977405 ( 0.14%) 435.83
tcp6 23588 ( 0.07%) 20389238 ( 0.08%) 864.39
http(s) 1849 ( 0.01%) 1828888 ( 0.01%) 989.12
http(c) 2040 ( 0.01%) 335411 ( 0.00%) 164.42
smtp 96 ( 0.00%) 22633 ( 0.00%) 235.76
dns 76 ( 0.00%) 18494 ( 0.00%) 243.34
bgp 92 ( 0.00%) 14651 ( 0.00%) 159.25
other 19435 ( 0.06%) 18169161 ( 0.07%) 934.87
udp6 42317 ( 0.12%) 11034866 ( 0.05%) 260.77
dns 38511 ( 0.11%) 10415798 ( 0.04%) 270.46
unreal 1 ( 0.00%) 105 ( 0.00%) 105.00
other 3805 ( 0.01%) 618963 ( 0.00%) 162.67
icmp6 9637 ( 0.03%) 1463998 ( 0.01%) 151.91
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 94 ( 0.00%) 85223 ( 0.00%) 906.63
tcpdump file: 201009151400.dump.gz (884.94 MB)