Traffic Trace Info
DumpFile: 201009291400.dump
FileSize: 2474.69MB
Id: 201009291400
StartTime: Wed Sep 29 14:00:01 2010
EndTime: Wed Sep 29 14:15:01 2010
TotalTime: 899.57 seconds
TotalCapSize: 1948.50MB CapLen: 96 bytes
# of packets: 34482642 (23211.76MB)
AvgRate: 216.42Mbps stddev:39.93M
IP flow (unique src/dst pair) Information
# of flows: 1068107 (avg. 32.28 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 2.7% 2.6% 1.7% 1.6% 1.2% 1.1% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 567810
Top 10 bandwidth usage (bytes/total in %):
10.2% 8.6% 6.0% 5.4% 4.3% 4.0% 3.7% 2.9% 2.7% 2.6%
# of IPv6 addresses: 3128
Top 10 bandwidth usage (bytes/total in %):
23.6% 23.4% 23.4% 17.7% 11.1% 11.1% 7.8% 7.8% 7.7% 5.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201009291400.pktlen.png)
detailed numbers
[ 32- 63]: 6670915
[ 64- 127]: 9395883
[ 128- 255]: 1281905
[ 256- 511]: 924550
[ 512- 1023]: 1071834
[ 1024- 2047]: 15137555
Protocol Breakdown
![[protocol breakdown chart]](201009291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34482642 (100.00%) 24339292741 (100.00%) 705.84
ip 34221712 ( 99.24%) 24221478580 ( 99.52%) 707.78
tcp 28416976 ( 82.41%) 22078895449 ( 90.71%) 776.96
http(s) 13746896 ( 39.87%) 17764583340 ( 72.99%) 1292.26
http(c) 9391360 ( 27.24%) 1703396846 ( 7.00%) 181.38
squid 285497 ( 0.83%) 120769200 ( 0.50%) 423.01
smtp 294970 ( 0.86%) 128582655 ( 0.53%) 435.92
nntp 17 ( 0.00%) 1326 ( 0.00%) 78.00
ftp 16326 ( 0.05%) 1927271 ( 0.01%) 118.05
pop3 25088 ( 0.07%) 7846622 ( 0.03%) 312.76
imap 7971 ( 0.02%) 4407603 ( 0.02%) 552.95
telnet 688 ( 0.00%) 46072 ( 0.00%) 66.97
ssh 280557 ( 0.81%) 74967434 ( 0.31%) 267.21
dns 5957 ( 0.02%) 509922 ( 0.00%) 85.60
bgp 132 ( 0.00%) 53182 ( 0.00%) 402.89
napster 1128 ( 0.00%) 236570 ( 0.00%) 209.73
realaud 117 ( 0.00%) 15546 ( 0.00%) 132.87
rtsp 36964 ( 0.11%) 35089486 ( 0.14%) 949.29
icecast 26543 ( 0.08%) 2080617 ( 0.01%) 78.39
hotline 10 ( 0.00%) 629 ( 0.00%) 62.90
other 4296728 ( 12.46%) 2234379508 ( 9.18%) 520.02
udp 4787773 ( 13.88%) 1872051772 ( 7.69%) 391.01
dns 1283385 ( 3.72%) 195904171 ( 0.80%) 152.65
realaud 33 ( 0.00%) 3607 ( 0.00%) 109.30
halflif 438 ( 0.00%) 142557 ( 0.00%) 325.47
starcra 28 ( 0.00%) 5227 ( 0.00%) 186.68
everque 22462 ( 0.07%) 3097938 ( 0.01%) 137.92
unreal 19 ( 0.00%) 3429 ( 0.00%) 180.47
quake 16 ( 0.00%) 2205 ( 0.00%) 137.81
cuseeme 1 ( 0.00%) 95 ( 0.00%) 95.00
other 3479685 ( 10.09%) 1672600388 ( 6.87%) 480.68
icmp 621811 ( 1.80%) 111154160 ( 0.46%) 178.76
ipip 348 ( 0.00%) 41484 ( 0.00%) 119.21
ipsec 29284 ( 0.08%) 10371016 ( 0.04%) 354.15
ip6 349766 ( 1.01%) 144561526 ( 0.59%) 413.31
other 15754 ( 0.05%) 4403173 ( 0.02%) 279.50
frag 7996 ( 0.02%) 5577577 ( 0.02%) 697.55
ip6 260930 ( 0.76%) 117814161 ( 0.48%) 451.52
tcp6 147810 ( 0.43%) 67979124 ( 0.28%) 459.91
http(s) 6113 ( 0.02%) 7140792 ( 0.03%) 1168.13
http(c) 53768 ( 0.16%) 4512467 ( 0.02%) 83.92
smtp 1190 ( 0.00%) 157037 ( 0.00%) 131.96
ftp 66 ( 0.00%) 5814 ( 0.00%) 88.09
imap 2 ( 0.00%) 185 ( 0.00%) 92.50
ssh 932 ( 0.00%) 314924 ( 0.00%) 337.90
dns 84 ( 0.00%) 18338 ( 0.00%) 218.31
bgp 93 ( 0.00%) 14762 ( 0.00%) 158.73
other 85562 ( 0.25%) 55814805 ( 0.23%) 652.33
udp6 60467 ( 0.18%) 17546830 ( 0.07%) 290.19
dns 54966 ( 0.16%) 16684897 ( 0.07%) 303.55
quake 2 ( 0.00%) 228 ( 0.00%) 114.00
other 5499 ( 0.02%) 861705 ( 0.00%) 156.70
icmp6 10805 ( 0.03%) 2658281 ( 0.01%) 246.02
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 41817 ( 0.12%) 29625710 ( 0.12%) 708.46
tcpdump file: 201009291400.dump.gz (845.35 MB)