Traffic Trace Info
DumpFile: 201009301400.dump
FileSize: 2880.17MB
Id: 201009301400
StartTime: Thu Sep 30 14:00:01 2010
EndTime: Thu Sep 30 14:15:00 2010
TotalTime: 899.22 seconds
TotalCapSize: -1828.68MB CapLen: 96 bytes
# of packets: 40161287 (28320.91MB)
AvgRate: 264.25Mbps stddev:44.92M
IP flow (unique src/dst pair) Information
# of flows: 1010534 (avg. 39.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.4% 3.7% 3.1% 2.4% 2.1% 1.4% 1.2% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 525970
Top 10 bandwidth usage (bytes/total in %):
9.5% 8.4% 8.4% 6.6% 6.4% 4.9% 4.4% 4.1% 3.8% 3.8%
# of IPv6 addresses: 2993
Top 10 bandwidth usage (bytes/total in %):
18.4% 11.6% 10.9% 10.5% 9.7% 9.7% 8.3% 3.4% 3.4% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201009301400.pktlen.png)
detailed numbers
[ 32- 63]: 6915577
[ 64- 127]: 10451632
[ 128- 255]: 1821810
[ 256- 511]: 1383221
[ 512- 1023]: 992537
[ 1024- 2047]: 18596510
Protocol Breakdown
![[protocol breakdown chart]](201009301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40161287 (100.00%) 29696626327 (100.00%) 739.43
ip 39970738 ( 99.53%) 29647422927 ( 99.83%) 741.73
tcp 28217441 ( 70.26%) 23395942279 ( 78.78%) 829.13
http(s) 14159687 ( 35.26%) 19265718485 ( 64.88%) 1360.60
http(c) 9165792 ( 22.82%) 1280490949 ( 4.31%) 139.70
squid 306125 ( 0.76%) 135217489 ( 0.46%) 441.71
smtp 345257 ( 0.86%) 178297153 ( 0.60%) 516.42
ftp 43487 ( 0.11%) 3813421 ( 0.01%) 87.69
pop3 20769 ( 0.05%) 7136239 ( 0.02%) 343.60
imap 3961 ( 0.01%) 1429734 ( 0.00%) 360.95
telnet 1264 ( 0.00%) 85635 ( 0.00%) 67.75
ssh 48951 ( 0.12%) 15643234 ( 0.05%) 319.57
dns 5787 ( 0.01%) 465553 ( 0.00%) 80.45
bgp 155 ( 0.00%) 66836 ( 0.00%) 431.20
napster 274 ( 0.00%) 22826 ( 0.00%) 83.31
realaud 18 ( 0.00%) 3914 ( 0.00%) 217.44
rtsp 9216 ( 0.02%) 7889331 ( 0.03%) 856.05
icecast 32972 ( 0.08%) 16827818 ( 0.06%) 510.37
hotline 11 ( 0.00%) 991 ( 0.00%) 90.09
other 4073712 ( 10.14%) 2482832491 ( 8.36%) 609.48
udp 8118036 ( 20.21%) 4083937844 ( 13.75%) 503.07
dns 1301133 ( 3.24%) 196839893 ( 0.66%) 151.28
realaud 1890 ( 0.00%) 116814 ( 0.00%) 61.81
halflif 90 ( 0.00%) 13543 ( 0.00%) 150.48
starcra 57 ( 0.00%) 10562 ( 0.00%) 185.30
everque 19202 ( 0.05%) 2593496 ( 0.01%) 135.06
unreal 45 ( 0.00%) 7081 ( 0.00%) 157.36
quake 85 ( 0.00%) 6958 ( 0.00%) 81.86
cuseeme 4 ( 0.00%) 1017 ( 0.00%) 254.25
other 6795246 ( 16.92%) 3884259959 ( 13.08%) 571.61
icmp 546330 ( 1.36%) 101827478 ( 0.34%) 186.38
ipip 334 ( 0.00%) 39260 ( 0.00%) 117.54
ipsec 10757 ( 0.03%) 1593078 ( 0.01%) 148.10
ip6 2982213 ( 7.43%) 2016980301 ( 6.79%) 676.34
other 95627 ( 0.24%) 47102687 ( 0.16%) 492.57
frag 1136 ( 0.00%) 1093661 ( 0.00%) 962.73
ip6 190549 ( 0.47%) 49203400 ( 0.17%) 258.22
tcp6 113452 ( 0.28%) 25066875 ( 0.08%) 220.95
http(s) 12402 ( 0.03%) 11744149 ( 0.04%) 946.96
http(c) 43795 ( 0.11%) 3824532 ( 0.01%) 87.33
squid 6 ( 0.00%) 508 ( 0.00%) 84.67
smtp 3731 ( 0.01%) 493342 ( 0.00%) 132.23
ftp 66 ( 0.00%) 5814 ( 0.00%) 88.09
dns 65 ( 0.00%) 17808 ( 0.00%) 273.97
bgp 92 ( 0.00%) 14646 ( 0.00%) 159.20
other 53295 ( 0.13%) 8966076 ( 0.03%) 168.23
udp6 60232 ( 0.15%) 17685558 ( 0.06%) 293.62
dns 54371 ( 0.14%) 16555332 ( 0.06%) 304.49
halflif 1 ( 0.00%) 101 ( 0.00%) 101.00
other 5860 ( 0.01%) 1130125 ( 0.00%) 192.85
icmp6 9834 ( 0.02%) 1450055 ( 0.00%) 147.45
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 7001 ( 0.02%) 4996832 ( 0.02%) 713.73
tcpdump file: 201009301400.dump.gz (1007.51 MB)