Traffic Trace Info
DumpFile: 201009221400.dump
FileSize: 1801.11MB
Id: 201009221400
StartTime: Wed Sep 22 14:00:01 2010
EndTime: Wed Sep 22 14:15:01 2010
TotalTime: 900.20 seconds
TotalCapSize: 1417.38MB CapLen: 96 bytes
# of packets: 25146977 (17194.07MB)
AvgRate: 160.22Mbps stddev:26.17M
IP flow (unique src/dst pair) Information
# of flows: 841226 (avg. 29.89 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.8% 5.8% 3.8% 2.8% 2.4% 1.2% 0.9% 0.8% 0.8% 0.6%
IP address Information
# of IPv4 addresses: 442628
Top 10 bandwidth usage (bytes/total in %):
8.6% 7.0% 7.0% 5.8% 5.8% 4.4% 4.2% 3.9% 3.7% 2.8%
# of IPv6 addresses: 2324
Top 10 bandwidth usage (bytes/total in %):
29.2% 17.8% 10.4% 7.4% 6.2% 4.1% 3.5% 3.4% 2.7% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201009221400.pktlen.png)
detailed numbers
[ 32- 63]: 5292915
[ 64- 127]: 6055217
[ 128- 255]: 1288271
[ 256- 511]: 700942
[ 512- 1023]: 684082
[ 1024- 2047]: 11125550
Protocol Breakdown
![[protocol breakdown chart]](201009221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25146977 (100.00%) 18029288784 (100.00%) 716.96
ip 25063435 ( 99.67%) 18004645154 ( 99.86%) 718.36
tcp 20949423 ( 83.31%) 16744859655 ( 92.88%) 799.30
http(s) 8581693 ( 34.13%) 11268701198 ( 62.50%) 1313.11
http(c) 5451496 ( 21.68%) 766794954 ( 4.25%) 140.66
squid 285314 ( 1.13%) 129812338 ( 0.72%) 454.98
smtp 278872 ( 1.11%) 119126130 ( 0.66%) 427.17
nntp 13 ( 0.00%) 792 ( 0.00%) 60.92
ftp 33706 ( 0.13%) 2939879 ( 0.02%) 87.22
pop3 22147 ( 0.09%) 7441733 ( 0.04%) 336.02
imap 5316 ( 0.02%) 1066800 ( 0.01%) 200.68
telnet 801 ( 0.00%) 57449 ( 0.00%) 71.72
ssh 120539 ( 0.48%) 79923383 ( 0.44%) 663.05
dns 3822 ( 0.02%) 387114 ( 0.00%) 101.29
bgp 199 ( 0.00%) 100299 ( 0.00%) 504.02
napster 11 ( 0.00%) 702 ( 0.00%) 63.82
realaud 330 ( 0.00%) 27315 ( 0.00%) 82.77
rtsp 7955 ( 0.03%) 7781983 ( 0.04%) 978.25
icecast 84858 ( 0.34%) 70233273 ( 0.39%) 827.66
other 6072350 ( 24.15%) 4290464253 ( 23.80%) 706.56
udp 3181986 ( 12.65%) 1075561695 ( 5.97%) 338.02
dns 1395678 ( 5.55%) 217631418 ( 1.21%) 155.93
realaud 17 ( 0.00%) 2183 ( 0.00%) 128.41
halflif 34 ( 0.00%) 3041 ( 0.00%) 89.44
starcra 21 ( 0.00%) 2319 ( 0.00%) 110.43
everque 5667 ( 0.02%) 644685 ( 0.00%) 113.76
unreal 10 ( 0.00%) 1500 ( 0.00%) 150.00
quake 24 ( 0.00%) 4273 ( 0.00%) 178.04
cuseeme 4 ( 0.00%) 409 ( 0.00%) 102.25
other 1779050 ( 7.07%) 856714227 ( 4.75%) 481.56
icmp 461904 ( 1.84%) 96106461 ( 0.53%) 208.07
ipip 161 ( 0.00%) 18310 ( 0.00%) 113.73
ipsec 9419 ( 0.04%) 1255106 ( 0.01%) 133.25
ip6 460158 ( 1.83%) 86781714 ( 0.48%) 188.59
other 384 ( 0.00%) 62213 ( 0.00%) 162.01
frag 4173 ( 0.02%) 2399055 ( 0.01%) 574.90
ip6 83542 ( 0.33%) 24643630 ( 0.14%) 294.98
tcp6 24319 ( 0.10%) 9810394 ( 0.05%) 403.40
http(s) 941 ( 0.00%) 756225 ( 0.00%) 803.64
http(c) 1761 ( 0.01%) 289251 ( 0.00%) 164.25
smtp 1018 ( 0.00%) 142170 ( 0.00%) 139.66
ssh 32 ( 0.00%) 9488 ( 0.00%) 296.50
dns 74 ( 0.00%) 19418 ( 0.00%) 262.41
bgp 90 ( 0.00%) 14644 ( 0.00%) 162.71
other 20403 ( 0.08%) 8579198 ( 0.05%) 420.49
udp6 49911 ( 0.20%) 12749567 ( 0.07%) 255.45
dns 40697 ( 0.16%) 11644129 ( 0.06%) 286.12
other 9214 ( 0.04%) 1105438 ( 0.01%) 119.97
icmp6 8001 ( 0.03%) 1202182 ( 0.01%) 150.25
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1281 ( 0.01%) 877407 ( 0.00%) 684.94
tcpdump file: 201009221400.dump.gz (629.46 MB)