Traffic Trace Info
DumpFile: 201009241400.dump
FileSize: 2425.08MB
Id: 201009241400
StartTime: Fri Sep 24 14:00:01 2010
EndTime: Fri Sep 24 14:15:01 2010
TotalTime: 899.39 seconds
TotalCapSize: 1893.46MB CapLen: 96 bytes
# of packets: 34832062 (22823.06MB)
AvgRate: 212.86Mbps stddev:28.30M
IP flow (unique src/dst pair) Information
# of flows: 1085430 (avg. 32.09 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 2.7% 2.3% 1.9% 1.9% 1.8% 1.8% 1.7% 1.7% 1.6%
IP address Information
# of IPv4 addresses: 650441
Top 10 bandwidth usage (bytes/total in %):
9.4% 8.7% 5.5% 5.1% 4.4% 4.4% 4.2% 3.9% 2.8% 2.5%
# of IPv6 addresses: 2732
Top 10 bandwidth usage (bytes/total in %):
25.5% 25.5% 22.5% 22.5% 15.7% 10.8% 7.2% 4.7% 4.7% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201009241400.pktlen.png)
detailed numbers
[ 32- 63]: 6304237
[ 64- 127]: 10997239
[ 128- 255]: 1349359
[ 256- 511]: 789553
[ 512- 1023]: 722359
[ 1024- 2047]: 14669315
Protocol Breakdown
![[protocol breakdown chart]](201009241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34832062 (100.00%) 23931717009 (100.00%) 687.06
ip 34665802 ( 99.52%) 23845577384 ( 99.64%) 687.87
tcp 26204358 ( 75.23%) 21885522917 ( 91.45%) 835.19
http(s) 12083381 ( 34.69%) 16494481077 ( 68.92%) 1365.06
http(c) 7125242 ( 20.46%) 952892719 ( 3.98%) 133.73
squid 349522 ( 1.00%) 94668977 ( 0.40%) 270.85
smtp 254347 ( 0.73%) 128009811 ( 0.53%) 503.29
ftp 48035 ( 0.14%) 4373367 ( 0.02%) 91.05
pop3 17333 ( 0.05%) 8022190 ( 0.03%) 462.83
imap 6670 ( 0.02%) 3306281 ( 0.01%) 495.69
telnet 609 ( 0.00%) 39050 ( 0.00%) 64.12
ssh 73601 ( 0.21%) 11455731 ( 0.05%) 155.65
dns 5435 ( 0.02%) 494875 ( 0.00%) 91.05
bgp 187 ( 0.00%) 81858 ( 0.00%) 437.74
napster 16 ( 0.00%) 2688 ( 0.00%) 168.00
realaud 268 ( 0.00%) 20811 ( 0.00%) 77.65
rtsp 2870 ( 0.01%) 2659486 ( 0.01%) 926.65
icecast 63053 ( 0.18%) 36196198 ( 0.15%) 574.06
hotline 75 ( 0.00%) 5931 ( 0.00%) 79.08
other 6173714 ( 17.72%) 4148811867 ( 17.34%) 672.01
udp 7514765 ( 21.57%) 1732384037 ( 7.24%) 230.53
dns 1370728 ( 3.94%) 203686619 ( 0.85%) 148.60
realaud 813 ( 0.00%) 52886 ( 0.00%) 65.05
halflif 138 ( 0.00%) 11837 ( 0.00%) 85.78
starcra 103 ( 0.00%) 12967 ( 0.00%) 125.89
everque 23294 ( 0.07%) 6243450 ( 0.03%) 268.03
unreal 25 ( 0.00%) 3070 ( 0.00%) 122.80
quake 44 ( 0.00%) 3845 ( 0.00%) 87.39
cuseeme 18 ( 0.00%) 2990 ( 0.00%) 166.11
other 6118582 ( 17.57%) 1521915916 ( 6.36%) 248.74
icmp 519752 ( 1.49%) 114307105 ( 0.48%) 219.93
ipip 161 ( 0.00%) 21946 ( 0.00%) 136.31
ipsec 5726 ( 0.02%) 874452 ( 0.00%) 152.72
ip6 146076 ( 0.42%) 76712454 ( 0.32%) 525.15
other 274964 ( 0.79%) 35754473 ( 0.15%) 130.03
frag 2865 ( 0.01%) 1518486 ( 0.01%) 530.01
ip6 166260 ( 0.48%) 86139625 ( 0.36%) 518.10
tcp6 106366 ( 0.31%) 69474402 ( 0.29%) 653.16
http(s) 9775 ( 0.03%) 13776358 ( 0.06%) 1409.35
http(c) 18324 ( 0.05%) 1764757 ( 0.01%) 96.31
squid 113 ( 0.00%) 11369 ( 0.00%) 100.61
smtp 1514 ( 0.00%) 162144 ( 0.00%) 107.10
ssh 34 ( 0.00%) 9964 ( 0.00%) 293.06
dns 45 ( 0.00%) 10282 ( 0.00%) 228.49
bgp 97 ( 0.00%) 21264 ( 0.00%) 219.22
other 76464 ( 0.22%) 53718264 ( 0.22%) 702.53
udp6 46092 ( 0.13%) 12205836 ( 0.05%) 264.81
dns 40887 ( 0.12%) 11475612 ( 0.05%) 280.67
cuseeme 1 ( 0.00%) 103 ( 0.00%) 103.00
other 5204 ( 0.01%) 730121 ( 0.00%) 140.30
icmp6 11725 ( 0.03%) 2922565 ( 0.01%) 249.26
rtopt6 13 ( 0.00%) 1820 ( 0.00%) 140.00
dstopt6 169 ( 0.00%) 23660 ( 0.00%) 140.00
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1864 ( 0.01%) 1507126 ( 0.01%) 808.54
tcpdump file: 201009241400.dump.gz (799.98 MB)