Traffic Trace Info
DumpFile: 200911031400.dump
FileSize: 2657.92MB
Id: 200911031400
StartTime: Tue Nov 3 14:00:01 2009
EndTime: Tue Nov 3 14:15:01 2009
TotalTime: 899.98 seconds
TotalCapSize: 2022.87MB CapLen: 96 bytes
# of packets: 41618356 (18680.86MB)
AvgRate: 174.12Mbps stddev:15.30M
IP flow (unique src/dst pair) Information
# of flows: 1464830 (avg. 28.41 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 1.8% 1.3% 1.2% 1.2% 1.1% 1.1% 1.1% 1.0% 0.8%
IP address Information
# of IPv4 addresses: 905747
Top 10 bandwidth usage (bytes/total in %):
30.4% 8.8% 6.9% 5.2% 5.1% 3.8% 3.8% 2.1% 1.9% 1.8%
# of IPv6 addresses: 863
Top 10 bandwidth usage (bytes/total in %):
93.4% 92.1% 2.7% 1.4% 1.0% 0.5% 0.4% 0.4% 0.3% 0.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200911031400.pktlen.png)
detailed numbers
[ 32- 63]: 19608220
[ 64- 127]: 7158170
[ 128- 255]: 1411230
[ 256- 511]: 898921
[ 512- 1023]: 912920
[ 1024- 2047]: 11628895
Protocol Breakdown
![[protocol breakdown chart]](200911031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41618356 (100.00%) 19588305556 (100.00%) 470.67
ip 41533501 ( 99.80%) 19516078413 ( 99.63%) 469.89
tcp 21464949 ( 51.58%) 16104869619 ( 82.22%) 750.29
http(s) 8157877 ( 19.60%) 10533031057 ( 53.77%) 1291.15
http(c) 4670230 ( 11.22%) 634424890 ( 3.24%) 135.84
squid 961638 ( 2.31%) 307138320 ( 1.57%) 319.39
smtp 242425 ( 0.58%) 67569594 ( 0.34%) 278.72
ftp 40367 ( 0.10%) 17579233 ( 0.09%) 435.49
pop3 11946 ( 0.03%) 4954729 ( 0.03%) 414.76
imap 14894 ( 0.04%) 12131844 ( 0.06%) 814.55
telnet 913 ( 0.00%) 98005 ( 0.00%) 107.34
ssh 34369 ( 0.08%) 14468225 ( 0.07%) 420.97
dns 1445 ( 0.00%) 140626 ( 0.00%) 97.32
bgp 177 ( 0.00%) 58602 ( 0.00%) 331.08
napster 213 ( 0.00%) 33753 ( 0.00%) 158.46
realaud 884 ( 0.00%) 108136 ( 0.00%) 122.33
rtsp 30311 ( 0.07%) 39562250 ( 0.20%) 1305.21
icecast 33106 ( 0.08%) 18447498 ( 0.09%) 557.23
hotline 30 ( 0.00%) 5127 ( 0.00%) 170.90
other 7264071 ( 17.45%) 4455114550 ( 22.74%) 613.31
udp 19293039 ( 46.36%) 3341629589 ( 17.06%) 173.20
dns 1072431 ( 2.58%) 196151940 ( 1.00%) 182.90
realaud 3638 ( 0.01%) 336303 ( 0.00%) 92.44
halflif 138 ( 0.00%) 17286 ( 0.00%) 125.26
starcra 626 ( 0.00%) 89900 ( 0.00%) 143.61
everque 430 ( 0.00%) 67161 ( 0.00%) 156.19
unreal 91 ( 0.00%) 17038 ( 0.00%) 187.23
quake 69 ( 0.00%) 13228 ( 0.00%) 191.71
cuseeme 12 ( 0.00%) 1931 ( 0.00%) 160.92
other 18213331 ( 43.76%) 3144414047 ( 16.05%) 172.64
icmp 733272 ( 1.76%) 58732700 ( 0.30%) 80.10
ipip 335 ( 0.00%) 41020 ( 0.00%) 122.45
ipsec 7956 ( 0.02%) 5302712 ( 0.03%) 666.50
ip6 31680 ( 0.08%) 5154388 ( 0.03%) 162.70
other 2270 ( 0.01%) 348385 ( 0.00%) 153.47
frag 11720 ( 0.03%) 10213042 ( 0.05%) 871.42
ip6 84855 ( 0.20%) 72227143 ( 0.37%) 851.18
tcp6 71708 ( 0.17%) 69782697 ( 0.36%) 973.15
http(s) 76 ( 0.00%) 37488 ( 0.00%) 493.26
http(c) 3080 ( 0.01%) 275857 ( 0.00%) 89.56
smtp 1616 ( 0.00%) 817372 ( 0.00%) 505.80
ssh 1 ( 0.00%) 86 ( 0.00%) 86.00
dns 5 ( 0.00%) 692 ( 0.00%) 138.40
bgp 114 ( 0.00%) 14160 ( 0.00%) 124.21
other 66816 ( 0.16%) 68637042 ( 0.35%) 1027.25
udp6 8771 ( 0.02%) 1928346 ( 0.01%) 219.85
dns 8753 ( 0.02%) 1926366 ( 0.01%) 220.08
other 18 ( 0.00%) 1980 ( 0.00%) 110.00
icmp6 4342 ( 0.01%) 507694 ( 0.00%) 116.93
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4 ( 0.00%) 4326 ( 0.00%) 1081.50
tcpdump file: 200911031400.dump.gz (862.98 MB)