Traffic Trace Info
DumpFile: 200911091400.dump
FileSize: 2910.92MB
Id: 200911091400
StartTime: Mon Nov 9 14:00:01 2009
EndTime: Mon Nov 9 14:15:01 2009
TotalTime: 900.21 seconds
TotalCapSize: -1837.74MB CapLen: 96 bytes
# of packets: 42772474 (28791.02MB)
AvgRate: 268.32Mbps stddev:19.17M
IP flow (unique src/dst pair) Information
# of flows: 1592096 (avg. 26.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.1% 2.0% 1.5% 1.5% 1.2% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 983191
Top 10 bandwidth usage (bytes/total in %):
16.8% 6.6% 6.0% 4.4% 4.3% 4.3% 4.0% 2.9% 2.9% 2.2%
# of IPv6 addresses: 997
Top 10 bandwidth usage (bytes/total in %):
13.4% 12.8% 11.1% 9.3% 8.6% 8.5% 7.9% 7.4% 4.4% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200911091400.pktlen.png)
detailed numbers
[ 32- 63]: 9051766
[ 64- 127]: 10177364
[ 128- 255]: 2117364
[ 256- 511]: 1008535
[ 512- 1023]: 1509596
[ 1024- 2047]: 18907849
Protocol Breakdown
![[protocol breakdown chart]](200911091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42772474 (100.00%) 30189569545 (100.00%) 705.82
ip 42742858 ( 99.93%) 30182092202 ( 99.98%) 706.13
tcp 32108614 ( 75.07%) 24853922683 ( 82.33%) 774.06
http(s) 11234585 ( 26.27%) 14749502297 ( 48.86%) 1312.87
http(c) 7298331 ( 17.06%) 1063062352 ( 3.52%) 145.66
squid 474505 ( 1.11%) 249019516 ( 0.82%) 524.80
smtp 329241 ( 0.77%) 79074111 ( 0.26%) 240.17
nntp 44161 ( 0.10%) 2666521 ( 0.01%) 60.38
ftp 119789 ( 0.28%) 20777969 ( 0.07%) 173.45
pop3 23873 ( 0.06%) 8134214 ( 0.03%) 340.73
imap 6219 ( 0.01%) 880108 ( 0.00%) 141.52
telnet 570 ( 0.00%) 50608 ( 0.00%) 88.79
ssh 245456 ( 0.57%) 81754521 ( 0.27%) 333.07
dns 1384 ( 0.00%) 134353 ( 0.00%) 97.08
bgp 127 ( 0.00%) 40570 ( 0.00%) 319.45
napster 675 ( 0.00%) 173244 ( 0.00%) 256.66
realaud 567 ( 0.00%) 61104 ( 0.00%) 107.77
rtsp 343651 ( 0.80%) 75800689 ( 0.25%) 220.57
icecast 15427 ( 0.04%) 3773560 ( 0.01%) 244.61
hotline 28 ( 0.00%) 3879 ( 0.00%) 138.54
other 11969993 ( 27.99%) 8519011147 ( 28.22%) 711.70
udp 9856925 ( 23.05%) 5258047812 ( 17.42%) 533.44
dns 1235511 ( 2.89%) 214091852 ( 0.71%) 173.28
realaud 1019 ( 0.00%) 75328 ( 0.00%) 73.92
halflif 2561 ( 0.01%) 168802 ( 0.00%) 65.91
starcra 644 ( 0.00%) 157678 ( 0.00%) 244.84
everque 1590 ( 0.00%) 1008467 ( 0.00%) 634.26
unreal 94 ( 0.00%) 17403 ( 0.00%) 185.14
quake 52 ( 0.00%) 8487 ( 0.00%) 163.21
cuseeme 35 ( 0.00%) 7193 ( 0.00%) 205.51
other 8608407 ( 20.13%) 5041668012 ( 16.70%) 585.67
icmp 729021 ( 1.70%) 58743852 ( 0.19%) 80.58
ipip 351 ( 0.00%) 42694 ( 0.00%) 121.64
ip6 47186 ( 0.11%) 11245879 ( 0.04%) 238.33
other 761 ( 0.00%) 89282 ( 0.00%) 117.32
frag 26339 ( 0.06%) 21747129 ( 0.07%) 825.66
ip6 29616 ( 0.07%) 7477343 ( 0.02%) 252.48
tcp6 8212 ( 0.02%) 3724086 ( 0.01%) 453.49
http(s) 1504 ( 0.00%) 1927436 ( 0.01%) 1281.54
http(c) 3339 ( 0.01%) 341178 ( 0.00%) 102.18
smtp 2201 ( 0.01%) 1157405 ( 0.00%) 525.85
ssh 476 ( 0.00%) 207864 ( 0.00%) 436.69
dns 16 ( 0.00%) 5636 ( 0.00%) 352.25
bgp 115 ( 0.00%) 14962 ( 0.00%) 130.10
other 561 ( 0.00%) 69605 ( 0.00%) 124.07
udp6 11724 ( 0.03%) 2583789 ( 0.01%) 220.38
dns 11680 ( 0.03%) 2578473 ( 0.01%) 220.76
other 44 ( 0.00%) 5316 ( 0.00%) 120.82
icmp6 9618 ( 0.02%) 1134611 ( 0.00%) 117.97
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 31 ( 0.00%) 30641 ( 0.00%) 988.42
tcpdump file: 200911091400.dump.gz (1058.90 MB)