Traffic Trace Info
DumpFile: 200911051400.dump
FileSize: 2324.31MB
Id: 200911051400
StartTime: Thu Nov 5 14:00:00 2009
EndTime: Thu Nov 5 14:15:01 2009
TotalTime: 900.64 seconds
TotalCapSize: 1796.71MB CapLen: 96 bytes
# of packets: 34576582 (19850.71MB)
AvgRate: 184.90Mbps stddev:12.41M
IP flow (unique src/dst pair) Information
# of flows: 1485701 (avg. 23.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.3% 1.2% 1.1% 0.7% 0.7% 0.7% 0.7% 0.6% 0.6% 0.5%
IP address Information
# of IPv4 addresses: 896240
Top 10 bandwidth usage (bytes/total in %):
25.4% 7.9% 5.8% 3.9% 3.5% 3.5% 2.7% 2.4% 2.1% 1.8%
# of IPv6 addresses: 1350
Top 10 bandwidth usage (bytes/total in %):
27.8% 18.1% 14.5% 12.6% 12.6% 7.7% 7.7% 7.1% 4.5% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200911051400.pktlen.png)
detailed numbers
[ 32- 63]: 8034142
[ 64- 127]: 9431052
[ 128- 255]: 2163514
[ 256- 511]: 1105260
[ 512- 1023]: 1043407
[ 1024- 2047]: 12799207
Protocol Breakdown
![[protocol breakdown chart]](200911051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34576582 (100.00%) 20814981832 (100.00%) 602.00
ip 34517212 ( 99.83%) 20804868926 ( 99.95%) 602.74
tcp 23338396 ( 67.50%) 15467507086 ( 74.31%) 662.75
http(s) 6390218 ( 18.48%) 7953448860 ( 38.21%) 1244.63
http(c) 6269742 ( 18.13%) 987857696 ( 4.75%) 157.56
squid 910078 ( 2.63%) 362705690 ( 1.74%) 398.54
smtp 402437 ( 1.16%) 159152299 ( 0.76%) 395.47
ftp 66344 ( 0.19%) 47509540 ( 0.23%) 716.11
pop3 26494 ( 0.08%) 10282324 ( 0.05%) 388.10
imap 5905 ( 0.02%) 826841 ( 0.00%) 140.02
telnet 837 ( 0.00%) 82984 ( 0.00%) 99.14
ssh 141071 ( 0.41%) 21691451 ( 0.10%) 153.76
dns 1628 ( 0.00%) 155176 ( 0.00%) 95.32
bgp 142 ( 0.00%) 45355 ( 0.00%) 319.40
napster 211 ( 0.00%) 23959 ( 0.00%) 113.55
realaud 1072 ( 0.00%) 679488 ( 0.00%) 633.85
rtsp 189901 ( 0.55%) 115663982 ( 0.56%) 609.08
icecast 8706 ( 0.03%) 890543 ( 0.00%) 102.29
hotline 13 ( 0.00%) 1177 ( 0.00%) 90.54
other 8923591 ( 25.81%) 5806489283 ( 27.90%) 650.69
udp 10436078 ( 30.18%) 5271299535 ( 25.32%) 505.10
dns 1903050 ( 5.50%) 292812652 ( 1.41%) 153.86
realaud 1510 ( 0.00%) 431600 ( 0.00%) 285.83
halflif 177 ( 0.00%) 22109 ( 0.00%) 124.91
starcra 445 ( 0.00%) 93917 ( 0.00%) 211.05
everque 625 ( 0.00%) 97984 ( 0.00%) 156.77
unreal 87 ( 0.00%) 15405 ( 0.00%) 177.07
quake 94 ( 0.00%) 16474 ( 0.00%) 175.26
cuseeme 23 ( 0.00%) 2999 ( 0.00%) 130.39
other 8528404 ( 24.67%) 4977229459 ( 23.91%) 583.61
icmp 699552 ( 2.02%) 57042646 ( 0.27%) 81.54
ipip 350 ( 0.00%) 43926 ( 0.00%) 125.50
ip6 41587 ( 0.12%) 8824549 ( 0.04%) 212.19
other 1249 ( 0.00%) 151184 ( 0.00%) 121.04
frag 12766 ( 0.04%) 11374568 ( 0.05%) 891.00
ip6 59370 ( 0.17%) 10112906 ( 0.05%) 170.34
tcp6 42462 ( 0.12%) 6677606 ( 0.03%) 157.26
http(s) 1087 ( 0.00%) 1432656 ( 0.01%) 1317.99
http(c) 3171 ( 0.01%) 303338 ( 0.00%) 95.66
smtp 1650 ( 0.00%) 802596 ( 0.00%) 486.42
ftp 2568 ( 0.01%) 266749 ( 0.00%) 103.87
ssh 1 ( 0.00%) 74 ( 0.00%) 74.00
bgp 116 ( 0.00%) 15082 ( 0.00%) 130.02
other 33869 ( 0.10%) 3857111 ( 0.02%) 113.88
udp6 12269 ( 0.04%) 2850821 ( 0.01%) 232.36
dns 11632 ( 0.03%) 2758967 ( 0.01%) 237.19
other 637 ( 0.00%) 91854 ( 0.00%) 144.20
icmp6 4562 ( 0.01%) 534534 ( 0.00%) 117.17
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 47 ( 0.00%) 45865 ( 0.00%) 975.85
tcpdump file: 200911051400.dump.gz (882.88 MB)