Traffic Trace Info
DumpFile: 201009261400.dump
FileSize: 2691.84MB
Id: 201009261400
StartTime: Sun Sep 26 14:00:01 2010
EndTime: Sun Sep 26 14:15:01 2010
TotalTime: 899.97 seconds
TotalCapSize: -1972.62MB CapLen: 96 bytes
# of packets: 37245436 (28745.25MB)
AvgRate: 267.89Mbps stddev:31.16M
IP flow (unique src/dst pair) Information
# of flows: 785471 (avg. 47.42 pkts/flow)
Top 10 big flow size (bytes/total in %):
17.7% 2.4% 1.4% 1.3% 1.1% 1.0% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 431372
Top 10 bandwidth usage (bytes/total in %):
17.8% 17.8% 9.3% 6.3% 6.1% 5.1% 4.7% 2.4% 2.4% 2.4%
# of IPv6 addresses: 2555
Top 10 bandwidth usage (bytes/total in %):
23.2% 23.2% 14.7% 9.9% 7.4% 7.4% 4.9% 4.9% 4.5% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201009261400.pktlen.png)
detailed numbers
[ 32- 63]: 5877661
[ 64- 127]: 8879805
[ 128- 255]: 1467243
[ 256- 511]: 1185509
[ 512- 1023]: 698353
[ 1024- 2047]: 19136865
Protocol Breakdown
![[protocol breakdown chart]](201009261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37245436 (100.00%) 30141579441 (100.00%) 809.27
ip 37114973 ( 99.65%) 30099260844 ( 99.86%) 810.97
tcp 27837843 ( 74.74%) 25680072399 ( 85.20%) 922.49
http(s) 11599887 ( 31.14%) 16124407039 ( 53.50%) 1390.05
http(c) 6525526 ( 17.52%) 926129568 ( 3.07%) 141.92
squid 471824 ( 1.27%) 110784527 ( 0.37%) 234.80
smtp 427580 ( 1.15%) 156619347 ( 0.52%) 366.29
ftp 33476 ( 0.09%) 3980504 ( 0.01%) 118.91
pop3 11533 ( 0.03%) 7405638 ( 0.02%) 642.13
imap 2693 ( 0.01%) 381923 ( 0.00%) 141.82
telnet 1141 ( 0.00%) 76944 ( 0.00%) 67.44
ssh 3912387 ( 10.50%) 5589168105 ( 18.54%) 1428.58
dns 5784 ( 0.02%) 487071 ( 0.00%) 84.21
bgp 111 ( 0.00%) 43031 ( 0.00%) 387.67
napster 28 ( 0.00%) 5092 ( 0.00%) 181.86
realaud 324 ( 0.00%) 28602 ( 0.00%) 88.28
rtsp 2 ( 0.00%) 132 ( 0.00%) 66.00
icecast 31294 ( 0.08%) 23629419 ( 0.08%) 755.08
hotline 7 ( 0.00%) 424 ( 0.00%) 60.57
other 4814168 ( 12.93%) 2736920353 ( 9.08%) 568.51
udp 6528785 ( 17.53%) 2825773288 ( 9.38%) 432.82
dns 1259530 ( 3.38%) 183697740 ( 0.61%) 145.85
realaud 11 ( 0.00%) 862 ( 0.00%) 78.36
halflif 18 ( 0.00%) 1477 ( 0.00%) 82.06
starcra 6 ( 0.00%) 675 ( 0.00%) 112.50
everque 9055 ( 0.02%) 1008362 ( 0.00%) 111.36
unreal 10 ( 0.00%) 1236 ( 0.00%) 123.60
quake 11 ( 0.00%) 1018 ( 0.00%) 92.55
cuseeme 5 ( 0.00%) 502 ( 0.00%) 100.40
other 5259341 ( 14.12%) 2640944053 ( 8.76%) 502.14
icmp 767624 ( 2.06%) 101525568 ( 0.34%) 132.26
ipip 179 ( 0.00%) 22938 ( 0.00%) 128.15
ipsec 7548 ( 0.02%) 2050032 ( 0.01%) 271.60
ip6 1964919 ( 5.28%) 1488010589 ( 4.94%) 757.29
other 8075 ( 0.02%) 1806030 ( 0.01%) 223.66
frag 4516 ( 0.01%) 3558826 ( 0.01%) 788.05
ip6 130463 ( 0.35%) 42318597 ( 0.14%) 324.37
tcp6 61454 ( 0.16%) 18397620 ( 0.06%) 299.37
http(s) 1505 ( 0.00%) 1711433 ( 0.01%) 1137.16
http(c) 11195 ( 0.03%) 1085704 ( 0.00%) 96.98
smtp 505 ( 0.00%) 226690 ( 0.00%) 448.89
ftp 1947 ( 0.01%) 197316 ( 0.00%) 101.34
dns 37 ( 0.00%) 11227 ( 0.00%) 303.43
bgp 89 ( 0.00%) 14415 ( 0.00%) 161.97
other 46176 ( 0.12%) 15150835 ( 0.05%) 328.11
udp6 42771 ( 0.11%) 10210756 ( 0.03%) 238.73
dns 31979 ( 0.09%) 8643137 ( 0.03%) 270.28
realaud 1 ( 0.00%) 99 ( 0.00%) 99.00
other 10791 ( 0.03%) 1567520 ( 0.01%) 145.26
icmp6 10274 ( 0.03%) 2447050 ( 0.01%) 238.18
rtopt6 4 ( 0.00%) 560 ( 0.00%) 140.00
dstopt6 207 ( 0.00%) 28980 ( 0.00%) 140.00
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 15723 ( 0.04%) 11229551 ( 0.04%) 714.21
tcpdump file: 201009261400.dump.gz (897.68 MB)