Traffic Trace Info
DumpFile: 201009271400.dump
FileSize: 2166.03MB
Id: 201009271400
StartTime: Mon Sep 27 14:00:01 2010
EndTime: Mon Sep 27 14:15:00 2010
TotalTime: 899.55 seconds
TotalCapSize: 1700.72MB CapLen: 96 bytes
# of packets: 30493577 (21200.00MB)
AvgRate: 197.71Mbps stddev:27.01M
IP flow (unique src/dst pair) Information
# of flows: 997061 (avg. 30.58 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 2.0% 1.4% 1.3% 1.2% 1.1% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 535240
Top 10 bandwidth usage (bytes/total in %):
9.1% 5.5% 3.9% 3.8% 3.5% 2.6% 2.2% 2.2% 2.2% 2.0%
# of IPv6 addresses: 2249
Top 10 bandwidth usage (bytes/total in %):
19.9% 10.4% 10.3% 10.0% 9.1% 9.0% 9.0% 7.2% 7.2% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201009271400.pktlen.png)
detailed numbers
[ 32- 63]: 6195568
[ 64- 127]: 7717739
[ 128- 255]: 1344235
[ 256- 511]: 801144
[ 512- 1023]: 686219
[ 1024- 2047]: 13748672
Protocol Breakdown
![[protocol breakdown chart]](201009271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30493577 (100.00%) 22229813186 (100.00%) 729.00
ip 30365759 ( 99.58%) 22198427461 ( 99.86%) 731.03
tcp 25839861 ( 84.74%) 20933620510 ( 94.17%) 810.13
http(s) 11462148 ( 37.59%) 15477896089 ( 69.63%) 1350.35
http(c) 7639028 ( 25.05%) 1015741011 ( 4.57%) 132.97
squid 975501 ( 3.20%) 771314143 ( 3.47%) 790.69
smtp 306832 ( 1.01%) 104496696 ( 0.47%) 340.57
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 21758 ( 0.07%) 1816655 ( 0.01%) 83.49
pop3 14420 ( 0.05%) 3317312 ( 0.01%) 230.05
imap 3770 ( 0.01%) 1906789 ( 0.01%) 505.78
telnet 12969 ( 0.04%) 945708 ( 0.00%) 72.92
ssh 316763 ( 1.04%) 97628279 ( 0.44%) 308.21
dns 4808 ( 0.02%) 427071 ( 0.00%) 88.83
bgp 134 ( 0.00%) 47974 ( 0.00%) 358.01
napster 19 ( 0.00%) 5464 ( 0.00%) 287.58
realaud 282 ( 0.00%) 24953 ( 0.00%) 88.49
rtsp 29091 ( 0.10%) 30527775 ( 0.14%) 1049.39
icecast 2023 ( 0.01%) 383199 ( 0.00%) 189.42
other 5050306 ( 16.56%) 3427140852 ( 15.42%) 678.60
udp 3788751 ( 12.42%) 1130237795 ( 5.08%) 298.31
dns 1422596 ( 4.67%) 214947451 ( 0.97%) 151.10
realaud 21 ( 0.00%) 2170 ( 0.00%) 103.33
halflif 27 ( 0.00%) 3173 ( 0.00%) 117.52
starcra 62 ( 0.00%) 13747 ( 0.00%) 221.73
everque 6381 ( 0.02%) 876485 ( 0.00%) 137.36
unreal 58 ( 0.00%) 8940 ( 0.00%) 154.14
quake 58 ( 0.00%) 4626 ( 0.00%) 79.76
cuseeme 4 ( 0.00%) 385 ( 0.00%) 96.25
other 2358669 ( 7.73%) 913990594 ( 4.11%) 387.50
icmp 575716 ( 1.89%) 90145790 ( 0.41%) 156.58
ipip 163 ( 0.00%) 19638 ( 0.00%) 120.48
ipsec 14500 ( 0.05%) 6522008 ( 0.03%) 449.79
ip6 144958 ( 0.48%) 37625624 ( 0.17%) 259.56
other 1810 ( 0.01%) 256096 ( 0.00%) 141.49
frag 5518 ( 0.02%) 4253802 ( 0.02%) 770.90
ip6 127818 ( 0.42%) 31385725 ( 0.14%) 245.55
tcp6 44144 ( 0.14%) 13127528 ( 0.06%) 297.38
http(s) 3061 ( 0.01%) 3670856 ( 0.02%) 1199.23
http(c) 8184 ( 0.03%) 832281 ( 0.00%) 101.70
smtp 199 ( 0.00%) 87829 ( 0.00%) 441.35
ssh 18 ( 0.00%) 3660 ( 0.00%) 203.33
dns 34 ( 0.00%) 6606 ( 0.00%) 194.29
bgp 91 ( 0.00%) 17167 ( 0.00%) 188.65
other 32557 ( 0.11%) 8509129 ( 0.04%) 261.36
udp6 69000 ( 0.23%) 13872622 ( 0.06%) 201.05
dns 39881 ( 0.13%) 11201743 ( 0.05%) 280.88
other 29119 ( 0.10%) 2670879 ( 0.01%) 91.72
icmp6 12764 ( 0.04%) 2855866 ( 0.01%) 223.74
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1880 ( 0.01%) 1525629 ( 0.01%) 811.50
tcpdump file: 201009271400.dump.gz (773.61 MB)