Traffic Trace Info
DumpFile: 200911071400.dump
FileSize: 1972.15MB
Id: 200911071400
StartTime: Sat Nov 7 14:00:01 2009
EndTime: Sat Nov 7 14:15:00 2009
TotalTime: 899.57 seconds
TotalCapSize: 1522.92MB CapLen: 96 bytes
# of packets: 29440375 (17531.37MB)
AvgRate: 163.51Mbps stddev:12.34M
IP flow (unique src/dst pair) Information
# of flows: 1404251 (avg. 20.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.5% 1.4% 1.3% 1.0% 1.0% 1.0% 0.9% 0.5% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 879676
Top 10 bandwidth usage (bytes/total in %):
29.8% 10.6% 4.2% 4.0% 3.7% 3.0% 2.5% 2.1% 1.7% 1.5%
# of IPv6 addresses: 804
Top 10 bandwidth usage (bytes/total in %):
28.4% 10.9% 10.7% 8.4% 7.6% 7.3% 6.4% 6.4% 6.4% 5.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200911071400.pktlen.png)
detailed numbers
[ 32- 63]: 6925963
[ 64- 127]: 7843994
[ 128- 255]: 1612232
[ 256- 511]: 903870
[ 512- 1023]: 881642
[ 1024- 2047]: 11272674
Protocol Breakdown
![[protocol breakdown chart]](200911071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29440375 (100.00%) 18382974753 (100.00%) 624.41
ip 29417123 ( 99.92%) 18378637065 ( 99.98%) 624.76
tcp 20438906 ( 69.42%) 14791005706 ( 80.46%) 723.67
http(s) 6917817 ( 23.50%) 9001696368 ( 48.97%) 1301.23
http(c) 4734117 ( 16.08%) 605892555 ( 3.30%) 127.98
squid 557724 ( 1.89%) 201343901 ( 1.10%) 361.01
smtp 203488 ( 0.69%) 64894433 ( 0.35%) 318.91
nntp 36 ( 0.00%) 3182 ( 0.00%) 88.39
ftp 33944 ( 0.12%) 13228096 ( 0.07%) 389.70
pop3 7765 ( 0.03%) 2425118 ( 0.01%) 312.31
imap 3172 ( 0.01%) 555524 ( 0.00%) 175.13
telnet 1117 ( 0.00%) 139252 ( 0.00%) 124.67
ssh 130988 ( 0.44%) 74023518 ( 0.40%) 565.12
dns 6886 ( 0.02%) 450764 ( 0.00%) 65.46
bgp 134 ( 0.00%) 38407 ( 0.00%) 286.62
napster 3886 ( 0.01%) 2997265 ( 0.02%) 771.30
realaud 737 ( 0.00%) 95985 ( 0.00%) 130.24
rtsp 179129 ( 0.61%) 134672075 ( 0.73%) 751.82
icecast 4459 ( 0.02%) 1086034 ( 0.01%) 243.56
hotline 6 ( 0.00%) 372 ( 0.00%) 62.00
other 7653388 ( 26.00%) 4687456077 ( 25.50%) 612.47
udp 8141026 ( 27.65%) 3506173943 ( 19.07%) 430.68
dns 1226139 ( 4.16%) 178946088 ( 0.97%) 145.94
realaud 223 ( 0.00%) 26770 ( 0.00%) 120.04
halflif 394 ( 0.00%) 34368 ( 0.00%) 87.23
starcra 12672 ( 0.04%) 980744 ( 0.01%) 77.39
everque 456 ( 0.00%) 78044 ( 0.00%) 171.15
unreal 125 ( 0.00%) 25308 ( 0.00%) 202.46
quake 50 ( 0.00%) 8105 ( 0.00%) 162.10
cuseeme 18 ( 0.00%) 2574 ( 0.00%) 143.00
other 6898192 ( 23.43%) 3325390522 ( 18.09%) 482.07
icmp 795091 ( 2.70%) 74633166 ( 0.41%) 93.87
ipip 328 ( 0.00%) 38716 ( 0.00%) 118.04
ip6 40532 ( 0.14%) 6608955 ( 0.04%) 163.06
other 1240 ( 0.00%) 176579 ( 0.00%) 142.40
frag 35022 ( 0.12%) 32110994 ( 0.17%) 916.88
ip6 23252 ( 0.08%) 4337688 ( 0.02%) 186.55
tcp6 11297 ( 0.04%) 2157318 ( 0.01%) 190.96
http(s) 118 ( 0.00%) 61493 ( 0.00%) 521.13
http(c) 2931 ( 0.01%) 264316 ( 0.00%) 90.18
squid 11 ( 0.00%) 886 ( 0.00%) 80.55
smtp 2435 ( 0.01%) 1246600 ( 0.01%) 511.95
ftp 2245 ( 0.01%) 226497 ( 0.00%) 100.89
ssh 13 ( 0.00%) 2695 ( 0.00%) 207.31
dns 14 ( 0.00%) 1478 ( 0.00%) 105.57
bgp 110 ( 0.00%) 13799 ( 0.00%) 125.45
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 3419 ( 0.01%) 339480 ( 0.00%) 99.29
udp6 7642 ( 0.03%) 1669869 ( 0.01%) 218.51
dns 7615 ( 0.03%) 1666431 ( 0.01%) 218.84
other 27 ( 0.00%) 3438 ( 0.00%) 127.33
icmp6 4278 ( 0.01%) 501573 ( 0.00%) 117.24
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 4 ( 0.00%) 4712 ( 0.00%) 1178.00
tcpdump file: 200911071400.dump.gz (738.76 MB)