Traffic Trace Info
DumpFile: 201009181400.dump
FileSize: 2067.24MB
Id: 201009181400
StartTime: Sat Sep 18 14:00:01 2010
EndTime: Sat Sep 18 14:15:01 2010
TotalTime: 899.98 seconds
TotalCapSize: 1622.46MB CapLen: 96 bytes
# of packets: 29148123 (20587.76MB)
AvgRate: 191.88Mbps stddev:19.61M
IP flow (unique src/dst pair) Information
# of flows: 876276 (avg. 33.26 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 1.9% 1.9% 1.8% 1.5% 1.4% 1.4% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 493735
Top 10 bandwidth usage (bytes/total in %):
10.2% 9.0% 7.6% 7.0% 4.5% 3.4% 3.4% 3.3% 3.3% 3.0%
# of IPv6 addresses: 2255
Top 10 bandwidth usage (bytes/total in %):
35.2% 9.9% 7.1% 5.6% 5.5% 5.1% 3.8% 3.8% 3.6% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201009181400.pktlen.png)
detailed numbers
[ 32- 63]: 4151015
[ 64- 127]: 8132498
[ 128- 255]: 1388566
[ 256- 511]: 1229321
[ 512- 1023]: 787093
[ 1024- 2047]: 13459630
Protocol Breakdown
![[protocol breakdown chart]](201009181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29148123 (100.00%) 21587830226 (100.00%) 740.63
ip 29074789 ( 99.75%) 21567455453 ( 99.91%) 741.79
tcp 18335151 ( 62.90%) 16004753260 ( 74.14%) 872.90
http(s) 9271260 ( 31.81%) 12645558309 ( 58.58%) 1363.95
http(c) 4348814 ( 14.92%) 632390984 ( 2.93%) 145.42
squid 238204 ( 0.82%) 72404363 ( 0.34%) 303.96
smtp 218272 ( 0.75%) 55575918 ( 0.26%) 254.62
nntp 36 ( 0.00%) 2260 ( 0.00%) 62.78
ftp 35415 ( 0.12%) 4316315 ( 0.02%) 121.88
pop3 20878 ( 0.07%) 12697710 ( 0.06%) 608.19
imap 2689 ( 0.01%) 797858 ( 0.00%) 296.71
telnet 1419 ( 0.00%) 99268 ( 0.00%) 69.96
ssh 509215 ( 1.75%) 83214244 ( 0.39%) 163.42
dns 2755 ( 0.01%) 290207 ( 0.00%) 105.34
bgp 125 ( 0.00%) 44003 ( 0.00%) 352.02
napster 35 ( 0.00%) 3697 ( 0.00%) 105.63
realaud 14 ( 0.00%) 1358 ( 0.00%) 97.00
rtsp 10530 ( 0.04%) 8850865 ( 0.04%) 840.54
icecast 9495 ( 0.03%) 8335645 ( 0.04%) 877.90
hotline 11 ( 0.00%) 1468 ( 0.00%) 133.45
other 3665936 ( 12.58%) 2480165908 ( 11.49%) 676.54
udp 7901149 ( 27.11%) 3904166975 ( 18.09%) 494.13
dns 1294277 ( 4.44%) 200801667 ( 0.93%) 155.15
realaud 7 ( 0.00%) 688 ( 0.00%) 98.29
halflif 24 ( 0.00%) 2010 ( 0.00%) 83.75
starcra 53 ( 0.00%) 6293 ( 0.00%) 118.74
everque 209 ( 0.00%) 33870 ( 0.00%) 162.06
unreal 18 ( 0.00%) 2116 ( 0.00%) 117.56
quake 21 ( 0.00%) 1840 ( 0.00%) 87.62
cuseeme 3 ( 0.00%) 324 ( 0.00%) 108.00
other 6606088 ( 22.66%) 3703087630 ( 17.15%) 560.56
icmp 474969 ( 1.63%) 116544225 ( 0.54%) 245.37
ipip 161 ( 0.00%) 19134 ( 0.00%) 118.84
ipsec 11075 ( 0.04%) 1472314 ( 0.01%) 132.94
ip6 2351219 ( 8.07%) 1540321575 ( 7.14%) 655.12
other 1065 ( 0.00%) 177970 ( 0.00%) 167.11
frag 3364 ( 0.01%) 2073605 ( 0.01%) 616.41
ip6 73334 ( 0.25%) 20374773 ( 0.09%) 277.84
tcp6 23145 ( 0.08%) 5757493 ( 0.03%) 248.76
http(s) 688 ( 0.00%) 567950 ( 0.00%) 825.51
http(c) 2026 ( 0.01%) 268418 ( 0.00%) 132.49
squid 60 ( 0.00%) 10758 ( 0.00%) 179.30
smtp 34 ( 0.00%) 7622 ( 0.00%) 224.18
dns 38 ( 0.00%) 8195 ( 0.00%) 215.66
bgp 92 ( 0.00%) 15469 ( 0.00%) 168.14
other 20207 ( 0.07%) 4879081 ( 0.02%) 241.45
udp6 42246 ( 0.14%) 12041259 ( 0.06%) 285.03
dns 36253 ( 0.12%) 10172905 ( 0.05%) 280.61
other 5993 ( 0.02%) 1868354 ( 0.01%) 311.76
icmp6 5733 ( 0.02%) 888058 ( 0.00%) 154.90
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2095 ( 0.01%) 1672303 ( 0.01%) 798.24
tcpdump file: 201009181400.dump.gz (739.25 MB)