Traffic Trace Info
DumpFile: 200911041400.dump
FileSize: 2387.43MB
Id: 200911041400
StartTime: Wed Nov 4 14:00:01 2009
EndTime: Wed Nov 4 14:15:01 2009
TotalTime: 899.68 seconds
TotalCapSize: 1845.78MB CapLen: 96 bytes
# of packets: 35497107 (21029.49MB)
AvgRate: 196.08Mbps stddev:16.32M
IP flow (unique src/dst pair) Information
# of flows: 1547243 (avg. 22.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.8% 1.5% 1.3% 1.1% 1.0% 0.9% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 935358
Top 10 bandwidth usage (bytes/total in %):
25.1% 8.4% 7.6% 4.8% 3.9% 3.4% 2.8% 2.5% 2.3% 1.8%
# of IPv6 addresses: 1516
Top 10 bandwidth usage (bytes/total in %):
27.9% 27.9% 24.0% 18.2% 14.6% 12.1% 4.2% 3.1% 2.4% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200911041400.pktlen.png)
detailed numbers
[ 32- 63]: 8819758
[ 64- 127]: 9120422
[ 128- 255]: 1914513
[ 256- 511]: 1080373
[ 512- 1023]: 1059041
[ 1024- 2047]: 13503000
Protocol Breakdown
![[protocol breakdown chart]](200911041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35497107 (100.00%) 22051013970 (100.00%) 621.21
ip 35405173 ( 99.74%) 22035912681 ( 99.93%) 622.39
tcp 25426002 ( 71.63%) 17498533095 ( 79.35%) 688.21
http(s) 8428542 ( 23.74%) 10713007948 ( 48.58%) 1271.04
http(c) 6218648 ( 17.52%) 871128642 ( 3.95%) 140.08
squid 905478 ( 2.55%) 227306791 ( 1.03%) 251.04
smtp 301311 ( 0.85%) 109920904 ( 0.50%) 364.81
ftp 43938 ( 0.12%) 10932827 ( 0.05%) 248.82
pop3 29148 ( 0.08%) 6940191 ( 0.03%) 238.10
imap 7265 ( 0.02%) 696310 ( 0.00%) 95.84
telnet 1768 ( 0.00%) 216351 ( 0.00%) 122.37
ssh 339781 ( 0.96%) 56500740 ( 0.26%) 166.29
dns 964 ( 0.00%) 104303 ( 0.00%) 108.20
bgp 137 ( 0.00%) 43686 ( 0.00%) 318.88
napster 3172 ( 0.01%) 2590106 ( 0.01%) 816.55
realaud 697 ( 0.00%) 80127 ( 0.00%) 114.96
rtsp 250042 ( 0.70%) 45906480 ( 0.21%) 183.60
icecast 32753 ( 0.09%) 18042552 ( 0.08%) 550.87
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 8861013 ( 24.96%) 5435034389 ( 24.65%) 613.36
udp 9186293 ( 25.88%) 4468425593 ( 20.26%) 486.42
dns 1272690 ( 3.59%) 220652991 ( 1.00%) 173.38
realaud 2430 ( 0.01%) 164639 ( 0.00%) 67.75
halflif 102 ( 0.00%) 14732 ( 0.00%) 144.43
starcra 440 ( 0.00%) 93626 ( 0.00%) 212.79
everque 4485 ( 0.01%) 2092933 ( 0.01%) 466.65
unreal 158 ( 0.00%) 28755 ( 0.00%) 181.99
quake 70 ( 0.00%) 10744 ( 0.00%) 153.49
cuseeme 15 ( 0.00%) 1470 ( 0.00%) 98.00
other 7903490 ( 22.27%) 4244969824 ( 19.25%) 537.10
icmp 753298 ( 2.12%) 61331356 ( 0.28%) 81.42
ipip 318 ( 0.00%) 40724 ( 0.00%) 128.06
ip6 37026 ( 0.10%) 7274623 ( 0.03%) 196.47
other 2236 ( 0.01%) 307290 ( 0.00%) 137.43
frag 18603 ( 0.05%) 15145154 ( 0.07%) 814.12
ip6 91934 ( 0.26%) 15101289 ( 0.07%) 164.26
tcp6 74208 ( 0.21%) 11277408 ( 0.05%) 151.97
http(s) 3683 ( 0.01%) 4619858 ( 0.02%) 1254.37
http(c) 32912 ( 0.09%) 2486958 ( 0.01%) 75.56
smtp 1353 ( 0.00%) 686896 ( 0.00%) 507.68
ftp 2392 ( 0.01%) 247116 ( 0.00%) 103.31
ssh 230 ( 0.00%) 133544 ( 0.00%) 580.63
dns 5 ( 0.00%) 895 ( 0.00%) 179.00
bgp 121 ( 0.00%) 27363 ( 0.00%) 226.14
other 33512 ( 0.09%) 3074778 ( 0.01%) 91.75
udp6 13157 ( 0.04%) 3253633 ( 0.01%) 247.29
dns 12065 ( 0.03%) 2939577 ( 0.01%) 243.65
starcra 2 ( 0.00%) 219 ( 0.00%) 109.50
everque 2 ( 0.00%) 1062 ( 0.00%) 531.00
unreal 2 ( 0.00%) 232 ( 0.00%) 116.00
other 1086 ( 0.00%) 312543 ( 0.00%) 287.79
icmp6 4505 ( 0.01%) 533114 ( 0.00%) 118.34
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 34 ( 0.00%) 33054 ( 0.00%) 972.18
tcpdump file: 200911041400.dump.gz (914.05 MB)