Traffic Trace Info
DumpFile: 201009281400.dump
FileSize: 3214.82MB
Id: 201009281400
StartTime: Tue Sep 28 14:00:01 2010
EndTime: Tue Sep 28 14:15:01 2010
TotalTime: 899.85 seconds
TotalCapSize: -1559.23MB CapLen: 96 bytes
# of packets: 44428538 (31240.42MB)
AvgRate: 291.24Mbps stddev:21.49M
IP flow (unique src/dst pair) Information
# of flows: 913050 (avg. 48.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 2.0% 1.8% 1.7% 1.3% 1.2% 1.1% 1.0% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 475686
Top 10 bandwidth usage (bytes/total in %):
9.6% 7.8% 7.5% 6.4% 5.2% 3.7% 2.4% 2.2% 2.2% 2.1%
# of IPv6 addresses: 2725
Top 10 bandwidth usage (bytes/total in %):
24.5% 12.7% 11.6% 5.7% 5.1% 5.0% 5.0% 3.9% 2.6% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201009281400.pktlen.png)
detailed numbers
[ 32- 63]: 7210560
[ 64- 127]: 12141983
[ 128- 255]: 1948132
[ 256- 511]: 1532466
[ 512- 1023]: 991731
[ 1024- 2047]: 20603666
Protocol Breakdown
![[protocol breakdown chart]](201009281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 44428538 (100.00%) 32757959884 (100.00%) 737.32
ip 44335393 ( 99.79%) 32732524303 ( 99.92%) 738.29
tcp 32523590 ( 73.20%) 26457454610 ( 80.77%) 813.49
http(s) 16744273 ( 37.69%) 22565051850 ( 68.88%) 1347.63
http(c) 10948239 ( 24.64%) 1211058581 ( 3.70%) 110.62
squid 187900 ( 0.42%) 85074992 ( 0.26%) 452.77
smtp 389061 ( 0.88%) 231052033 ( 0.71%) 593.87
ftp 47278 ( 0.11%) 5072650 ( 0.02%) 107.29
pop3 18072 ( 0.04%) 7596665 ( 0.02%) 420.36
imap 3649 ( 0.01%) 752081 ( 0.00%) 206.11
telnet 439 ( 0.00%) 32815 ( 0.00%) 74.75
ssh 108183 ( 0.24%) 86653980 ( 0.26%) 800.99
dns 4661 ( 0.01%) 427285 ( 0.00%) 91.67
bgp 140 ( 0.00%) 59800 ( 0.00%) 427.14
napster 44 ( 0.00%) 5224 ( 0.00%) 118.73
realaud 237 ( 0.00%) 23010 ( 0.00%) 97.09
rtsp 22683 ( 0.05%) 23331562 ( 0.07%) 1028.59
icecast 10411 ( 0.02%) 8600097 ( 0.03%) 826.06
hotline 13 ( 0.00%) 1487 ( 0.00%) 114.38
other 4038160 ( 9.09%) 2232651678 ( 6.82%) 552.89
udp 7891226 ( 17.76%) 3671996801 ( 11.21%) 465.33
dns 1494508 ( 3.36%) 223682696 ( 0.68%) 149.67
realaud 946 ( 0.00%) 58072 ( 0.00%) 61.39
halflif 39 ( 0.00%) 3901 ( 0.00%) 100.03
starcra 16 ( 0.00%) 2238 ( 0.00%) 139.88
everque 10090 ( 0.02%) 1650041 ( 0.01%) 163.53
unreal 56 ( 0.00%) 9479 ( 0.00%) 169.27
quake 16 ( 0.00%) 1938 ( 0.00%) 121.12
cuseeme 7 ( 0.00%) 592 ( 0.00%) 84.57
other 6384665 ( 14.37%) 3446425050 ( 10.52%) 539.80
icmp 549833 ( 1.24%) 105151958 ( 0.32%) 191.24
ipip 152 ( 0.00%) 17996 ( 0.00%) 118.39
ipsec 8157 ( 0.02%) 2208542 ( 0.01%) 270.75
ip6 3315298 ( 7.46%) 2467028062 ( 7.53%) 744.13
other 47137 ( 0.11%) 28666334 ( 0.09%) 608.15
frag 2220 ( 0.00%) 1843496 ( 0.01%) 830.40
ip6 93145 ( 0.21%) 25435581 ( 0.08%) 273.08
tcp6 33625 ( 0.08%) 9046748 ( 0.03%) 269.05
http(s) 2659 ( 0.01%) 3201713 ( 0.01%) 1204.10
http(c) 7817 ( 0.02%) 1105121 ( 0.00%) 141.37
smtp 594 ( 0.00%) 85209 ( 0.00%) 143.45
ftp 17 ( 0.00%) 1464 ( 0.00%) 86.12
ssh 36 ( 0.00%) 10888 ( 0.00%) 302.44
dns 84 ( 0.00%) 22467 ( 0.00%) 267.46
bgp 94 ( 0.00%) 20081 ( 0.00%) 213.63
realaud 3 ( 0.00%) 254 ( 0.00%) 84.67
other 22321 ( 0.05%) 4599551 ( 0.01%) 206.06
udp6 44063 ( 0.10%) 11838418 ( 0.04%) 268.67
dns 39478 ( 0.09%) 10977220 ( 0.03%) 278.06
everque 1 ( 0.00%) 101 ( 0.00%) 101.00
unreal 17 ( 0.00%) 1461 ( 0.00%) 85.94
other 4567 ( 0.01%) 859636 ( 0.00%) 188.23
icmp6 13420 ( 0.03%) 3013996 ( 0.01%) 224.59
rtopt6 4 ( 0.00%) 560 ( 0.00%) 140.00
dstopt6 126 ( 0.00%) 17640 ( 0.00%) 140.00
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1876 ( 0.00%) 1514003 ( 0.00%) 807.04
tcpdump file: 201009281400.dump.gz (1115.59 MB)