Traffic Trace Info
DumpFile: 201009201400.dump
FileSize: 2213.15MB
Id: 201009201400
StartTime: Mon Sep 20 14:00:00 2010
EndTime: Mon Sep 20 14:15:01 2010
TotalTime: 900.75 seconds
TotalCapSize: 1743.31MB CapLen: 96 bytes
# of packets: 30790580 (22420.35MB)
AvgRate: 208.78Mbps stddev:25.35M
IP flow (unique src/dst pair) Information
# of flows: 846700 (avg. 36.37 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.3% 1.2% 1.2% 1.0% 1.0% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 481316
Top 10 bandwidth usage (bytes/total in %):
10.8% 10.4% 10.2% 5.2% 4.2% 3.5% 3.5% 2.9% 2.1% 2.0%
# of IPv6 addresses: 2296
Top 10 bandwidth usage (bytes/total in %):
38.5% 38.5% 32.7% 31.1% 8.0% 6.8% 6.8% 2.8% 2.8% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201009201400.pktlen.png)
detailed numbers
[ 32- 63]: 4161888
[ 64- 127]: 8673800
[ 128- 255]: 1267978
[ 256- 511]: 1183341
[ 512- 1023]: 804275
[ 1024- 2047]: 14699298
Protocol Breakdown
![[protocol breakdown chart]](201009201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30790580 (100.00%) 23509437047 (100.00%) 763.53
ip 30637631 ( 99.50%) 23419278657 ( 99.62%) 764.40
tcp 21213362 ( 68.90%) 18748226806 ( 79.75%) 883.79
http(s) 10771732 ( 34.98%) 14633329163 ( 62.24%) 1358.49
http(c) 5723991 ( 18.59%) 982437464 ( 4.18%) 171.64
squid 256499 ( 0.83%) 102214401 ( 0.43%) 398.50
smtp 232717 ( 0.76%) 73477913 ( 0.31%) 315.74
ftp 38538 ( 0.13%) 3898204 ( 0.02%) 101.15
pop3 23817 ( 0.08%) 10277911 ( 0.04%) 431.54
imap 2992 ( 0.01%) 912148 ( 0.00%) 304.86
telnet 2054 ( 0.01%) 144190 ( 0.00%) 70.20
ssh 27633 ( 0.09%) 4501761 ( 0.02%) 162.91
dns 2716 ( 0.01%) 285099 ( 0.00%) 104.97
bgp 163 ( 0.00%) 78261 ( 0.00%) 480.13
napster 18 ( 0.00%) 1505 ( 0.00%) 83.61
realaud 334 ( 0.00%) 30397 ( 0.00%) 91.01
rtsp 727 ( 0.00%) 765040 ( 0.00%) 1052.32
icecast 3613 ( 0.01%) 942930 ( 0.00%) 260.98
hotline 3 ( 0.00%) 186 ( 0.00%) 62.00
other 4125812 ( 13.40%) 2934930053 ( 12.48%) 711.36
udp 6930047 ( 22.51%) 3337200532 ( 14.20%) 481.56
dns 1278191 ( 4.15%) 202424071 ( 0.86%) 158.37
realaud 17 ( 0.00%) 2275 ( 0.00%) 133.82
halflif 25 ( 0.00%) 2934 ( 0.00%) 117.36
starcra 25 ( 0.00%) 4309 ( 0.00%) 172.36
everque 158 ( 0.00%) 28821 ( 0.00%) 182.41
unreal 19 ( 0.00%) 2196 ( 0.00%) 115.58
quake 37 ( 0.00%) 5539 ( 0.00%) 149.70
cuseeme 81 ( 0.00%) 7596 ( 0.00%) 93.78
other 5651413 ( 18.35%) 3134652703 ( 13.33%) 554.67
icmp 445509 ( 1.45%) 95931175 ( 0.41%) 215.33
ipip 355 ( 0.00%) 88431 ( 0.00%) 249.10
ipsec 11020 ( 0.04%) 1465960 ( 0.01%) 133.03
ip6 2036549 ( 6.61%) 1236241753 ( 5.26%) 607.03
other 789 ( 0.00%) 124000 ( 0.00%) 157.16
frag 413 ( 0.00%) 447231 ( 0.00%) 1082.88
ip6 152949 ( 0.50%) 90158390 ( 0.38%) 589.47
tcp6 60095 ( 0.20%) 47328294 ( 0.20%) 787.56
http(s) 916 ( 0.00%) 932376 ( 0.00%) 1017.88
http(c) 1967 ( 0.01%) 327944 ( 0.00%) 166.72
smtp 145 ( 0.00%) 30428 ( 0.00%) 209.85
dns 38 ( 0.00%) 9895 ( 0.00%) 260.39
bgp 95 ( 0.00%) 15964 ( 0.00%) 168.04
other 56934 ( 0.18%) 46011687 ( 0.20%) 808.16
udp6 39222 ( 0.13%) 10584531 ( 0.05%) 269.86
dns 35538 ( 0.12%) 9968369 ( 0.04%) 280.50
everque 12 ( 0.00%) 1104 ( 0.00%) 92.00
other 3672 ( 0.01%) 615058 ( 0.00%) 167.50
icmp6 9705 ( 0.03%) 1300436 ( 0.01%) 134.00
ip6 86 ( 0.00%) 11698 ( 0.00%) 136.02
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 43811 ( 0.14%) 30929351 ( 0.13%) 705.97
tcpdump file: 201009201400.dump.gz (776.07 MB)