Traffic Trace Info
DumpFile: 200911081400.dump
FileSize: 1662.62MB
Id: 200911081400
StartTime: Sun Nov 8 14:00:01 2009
EndTime: Sun Nov 8 14:15:00 2009
TotalTime: 899.35 seconds
TotalCapSize: 1280.33MB CapLen: 96 bytes
# of packets: 25052612 (15360.49MB)
AvgRate: 143.28Mbps stddev:14.09M
IP flow (unique src/dst pair) Information
# of flows: 1209261 (avg. 20.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.3% 2.0% 2.0% 1.4% 1.3% 1.0% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 769476
Top 10 bandwidth usage (bytes/total in %):
33.2% 11.8% 4.1% 3.8% 2.7% 2.7% 2.5% 2.5% 2.4% 2.1%
# of IPv6 addresses: 843
Top 10 bandwidth usage (bytes/total in %):
29.0% 27.3% 21.0% 7.6% 7.4% 6.9% 6.4% 5.0% 4.7% 4.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200911081400.pktlen.png)
detailed numbers
[ 32- 63]: 5488023
[ 64- 127]: 6511742
[ 128- 255]: 1623372
[ 256- 511]: 724530
[ 512- 1023]: 658801
[ 1024- 2047]: 10046144
Protocol Breakdown
![[protocol breakdown chart]](200911081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25052612 (100.00%) 16106640024 (100.00%) 642.91
ip 25022087 ( 99.88%) 16100783434 ( 99.96%) 643.46
tcp 16807923 ( 67.09%) 12685043820 ( 78.76%) 754.71
http(s) 5775654 ( 23.05%) 7523503047 ( 46.71%) 1302.62
http(c) 3342300 ( 13.34%) 429703183 ( 2.67%) 128.57
squid 460157 ( 1.84%) 150149951 ( 0.93%) 326.30
smtp 164874 ( 0.66%) 31819353 ( 0.20%) 192.99
ftp 36276 ( 0.14%) 17006274 ( 0.11%) 468.80
pop3 6082 ( 0.02%) 1999530 ( 0.01%) 328.76
imap 5233 ( 0.02%) 538164 ( 0.00%) 102.84
telnet 999 ( 0.00%) 66907 ( 0.00%) 66.97
ssh 111482 ( 0.44%) 16969466 ( 0.11%) 152.22
dns 44111 ( 0.18%) 37282904 ( 0.23%) 845.21
bgp 178 ( 0.00%) 70899 ( 0.00%) 398.31
napster 114 ( 0.00%) 8196 ( 0.00%) 71.89
realaud 685 ( 0.00%) 78727 ( 0.00%) 114.93
rtsp 28544 ( 0.11%) 4906922 ( 0.03%) 171.91
icecast 10241 ( 0.04%) 6918141 ( 0.04%) 675.53
hotline 23 ( 0.00%) 1504 ( 0.00%) 65.39
other 6820964 ( 27.23%) 4464020292 ( 27.72%) 654.46
udp 7452710 ( 29.75%) 3349155062 ( 20.79%) 449.39
dns 838389 ( 3.35%) 130886944 ( 0.81%) 156.12
realaud 846 ( 0.00%) 55959 ( 0.00%) 66.15
halflif 96 ( 0.00%) 14006 ( 0.00%) 145.90
starcra 7564 ( 0.03%) 533681 ( 0.00%) 70.56
everque 479 ( 0.00%) 72464 ( 0.00%) 151.28
unreal 129 ( 0.00%) 18781 ( 0.00%) 145.59
quake 48 ( 0.00%) 7645 ( 0.00%) 159.27
cuseeme 15 ( 0.00%) 1902 ( 0.00%) 126.80
other 6590984 ( 26.31%) 3216343036 ( 19.97%) 487.99
icmp 711067 ( 2.84%) 58030950 ( 0.36%) 81.61
ipip 345 ( 0.00%) 41142 ( 0.00%) 119.25
ip6 49288 ( 0.20%) 8425374 ( 0.05%) 170.94
other 754 ( 0.00%) 87086 ( 0.00%) 115.50
frag 54887 ( 0.22%) 42396949 ( 0.26%) 772.44
ip6 30525 ( 0.12%) 5856590 ( 0.04%) 191.86
tcp6 19115 ( 0.08%) 3905728 ( 0.02%) 204.33
http(s) 243 ( 0.00%) 125230 ( 0.00%) 515.35
http(c) 3045 ( 0.01%) 275149 ( 0.00%) 90.36
smtp 2615 ( 0.01%) 1369421 ( 0.01%) 523.68
ftp 72 ( 0.00%) 6642 ( 0.00%) 92.25
ssh 7626 ( 0.03%) 1598312 ( 0.01%) 209.59
dns 9 ( 0.00%) 3558 ( 0.00%) 395.33
bgp 108 ( 0.00%) 13543 ( 0.00%) 125.40
other 5397 ( 0.02%) 513873 ( 0.00%) 95.21
udp6 7982 ( 0.03%) 1545004 ( 0.01%) 193.56
dns 7953 ( 0.03%) 1541410 ( 0.01%) 193.81
other 29 ( 0.00%) 3594 ( 0.00%) 123.93
icmp6 3389 ( 0.01%) 393422 ( 0.00%) 116.09
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 8 ( 0.00%) 8220 ( 0.00%) 1027.50
tcpdump file: 200911081400.dump.gz (622.77 MB)