Traffic Trace Info
DumpFile: 201009171400.dump
FileSize: 2471.99MB
Id: 201009171400
StartTime: Fri Sep 17 14:00:01 2010
EndTime: Fri Sep 17 14:15:01 2010
TotalTime: 900.45 seconds
TotalCapSize: 1942.54MB CapLen: 96 bytes
# of packets: 34697685 (24106.12MB)
AvgRate: 224.57Mbps stddev:25.39M
IP flow (unique src/dst pair) Information
# of flows: 1103800 (avg. 31.43 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 2.1% 1.8% 1.8% 1.3% 1.3% 1.1% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 614405
Top 10 bandwidth usage (bytes/total in %):
9.9% 8.6% 8.2% 7.2% 4.6% 4.1% 3.5% 2.2% 2.1% 1.8%
# of IPv6 addresses: 2149
Top 10 bandwidth usage (bytes/total in %):
19.0% 19.0% 18.2% 17.3% 17.1% 8.9% 8.1% 5.0% 5.0% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201009171400.pktlen.png)
detailed numbers
[ 32- 63]: 5916304
[ 64- 127]: 8985752
[ 128- 255]: 1637589
[ 256- 511]: 1477281
[ 512- 1023]: 854641
[ 1024- 2047]: 15826118
Protocol Breakdown
![[protocol breakdown chart]](201009171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34697685 (100.00%) 25277094904 (100.00%) 728.50
ip 34598285 ( 99.71%) 25235058889 ( 99.83%) 729.37
tcp 22883054 ( 65.95%) 19222512111 ( 76.05%) 840.03
http(s) 11544593 ( 33.27%) 15632114521 ( 61.84%) 1354.06
http(c) 6824382 ( 19.67%) 860787567 ( 3.41%) 126.13
squid 263167 ( 0.76%) 109840571 ( 0.43%) 417.38
smtp 244267 ( 0.70%) 70720615 ( 0.28%) 289.52
ftp 37156 ( 0.11%) 4417798 ( 0.02%) 118.90
pop3 12987 ( 0.04%) 4267793 ( 0.02%) 328.62
imap 10169 ( 0.03%) 7496473 ( 0.03%) 737.19
telnet 353 ( 0.00%) 25041 ( 0.00%) 70.94
ssh 224686 ( 0.65%) 37190377 ( 0.15%) 165.52
dns 3277 ( 0.01%) 326881 ( 0.00%) 99.75
bgp 150 ( 0.00%) 63087 ( 0.00%) 420.58
napster 24 ( 0.00%) 4100 ( 0.00%) 170.83
realaud 6 ( 0.00%) 415 ( 0.00%) 69.17
rtsp 108367 ( 0.31%) 105840173 ( 0.42%) 976.68
icecast 7466 ( 0.02%) 960822 ( 0.00%) 128.69
hotline 12 ( 0.00%) 3461 ( 0.00%) 288.42
other 3601992 ( 10.38%) 2388452416 ( 9.45%) 663.09
udp 8047186 ( 23.19%) 3670179327 ( 14.52%) 456.08
dns 1461001 ( 4.21%) 230243430 ( 0.91%) 157.59
rip 2 ( 0.00%) 120 ( 0.00%) 60.00
realaud 488 ( 0.00%) 29532 ( 0.00%) 60.52
halflif 35 ( 0.00%) 3623 ( 0.00%) 103.51
starcra 16 ( 0.00%) 2155 ( 0.00%) 134.69
everque 8548 ( 0.02%) 1403747 ( 0.01%) 164.22
unreal 12 ( 0.00%) 1614 ( 0.00%) 134.50
quake 16 ( 0.00%) 2222 ( 0.00%) 138.88
cuseeme 5 ( 0.00%) 527 ( 0.00%) 105.40
other 6577002 ( 18.96%) 3438458065 ( 13.60%) 522.80
icmp 512589 ( 1.48%) 131444259 ( 0.52%) 256.43
ipip 171 ( 0.00%) 20506 ( 0.00%) 119.92
ipsec 8461 ( 0.02%) 1170238 ( 0.00%) 138.31
ip6 3004134 ( 8.66%) 2189743437 ( 8.66%) 728.91
other 142690 ( 0.41%) 19989011 ( 0.08%) 140.09
frag 491 ( 0.00%) 541329 ( 0.00%) 1102.50
ip6 99400 ( 0.29%) 42036015 ( 0.17%) 422.90
tcp6 43493 ( 0.13%) 26613714 ( 0.11%) 611.91
http(s) 1757 ( 0.01%) 1897363 ( 0.01%) 1079.89
http(c) 1687 ( 0.00%) 246465 ( 0.00%) 146.10
smtp 399 ( 0.00%) 104063 ( 0.00%) 260.81
dns 80 ( 0.00%) 15995 ( 0.00%) 199.94
bgp 93 ( 0.00%) 19155 ( 0.00%) 205.97
other 39477 ( 0.11%) 24330673 ( 0.10%) 616.33
udp6 44815 ( 0.13%) 12539047 ( 0.05%) 279.80
dns 40095 ( 0.12%) 11220724 ( 0.04%) 279.85
other 4720 ( 0.01%) 1318323 ( 0.01%) 279.31
icmp6 9076 ( 0.03%) 1318535 ( 0.01%) 145.28
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1902 ( 0.01%) 1549227 ( 0.01%) 814.53
tcpdump file: 201009171400.dump.gz (877.24 MB)