Traffic Trace Info
DumpFile: 200911131400.dump
FileSize: 3355.98MB
Id: 200911131400
StartTime: Fri Nov 13 14:00:01 2009
EndTime: Fri Nov 13 14:15:01 2009
TotalTime: 900.45 seconds
TotalCapSize: -1545.81MB CapLen: 96 bytes
# of packets: 52807848 (22342.04MB)
AvgRate: 208.16Mbps stddev:19.60M
IP flow (unique src/dst pair) Information
# of flows: 1493100 (avg. 35.37 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 2.4% 1.2% 1.2% 1.1% 1.1% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 912203
Top 10 bandwidth usage (bytes/total in %):
25.0% 9.7% 6.4% 4.5% 4.3% 4.3% 4.3% 4.3% 2.7% 2.4%
# of IPv6 addresses: 973
Top 10 bandwidth usage (bytes/total in %):
31.1% 30.9% 9.6% 5.2% 5.1% 4.3% 3.8% 3.6% 3.6% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200911131400.pktlen.png)
detailed numbers
[ 32- 63]: 25563406
[ 64- 127]: 9536698
[ 128- 255]: 1680769
[ 256- 511]: 1192701
[ 512- 1023]: 1197178
[ 1024- 2047]: 13637096
Protocol Breakdown
![[protocol breakdown chart]](200911131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 52807848 (100.00%) 23427325997 (100.00%) 443.63
ip 52760066 ( 99.91%) 23420283555 ( 99.97%) 443.90
tcp 25688257 ( 48.64%) 17709799184 ( 75.59%) 689.41
http(s) 8303882 ( 15.72%) 10413885688 ( 44.45%) 1254.10
http(c) 6586346 ( 12.47%) 914566864 ( 3.90%) 138.86
squid 563932 ( 1.07%) 161281867 ( 0.69%) 286.00
smtp 217679 ( 0.41%) 78781733 ( 0.34%) 361.92
nntp 129223 ( 0.24%) 7772826 ( 0.03%) 60.15
ftp 94410 ( 0.18%) 60551251 ( 0.26%) 641.36
pop3 25008 ( 0.05%) 11834375 ( 0.05%) 473.22
imap 4658 ( 0.01%) 484796 ( 0.00%) 104.08
telnet 1058 ( 0.00%) 152291 ( 0.00%) 143.94
ssh 94812 ( 0.18%) 13558348 ( 0.06%) 143.00
dns 1463 ( 0.00%) 148153 ( 0.00%) 101.27
bgp 149 ( 0.00%) 48954 ( 0.00%) 328.55
napster 781 ( 0.00%) 369661 ( 0.00%) 473.32
realaud 2067 ( 0.00%) 224072 ( 0.00%) 108.40
rtsp 250867 ( 0.48%) 31306718 ( 0.13%) 124.79
icecast 42996 ( 0.08%) 19607105 ( 0.08%) 456.02
hotline 38 ( 0.00%) 5758 ( 0.00%) 151.53
other 9368662 ( 17.74%) 5995205164 ( 25.59%) 639.92
udp 26211911 ( 49.64%) 5578093723 ( 23.81%) 212.81
dns 1064835 ( 2.02%) 195186646 ( 0.83%) 183.30
realaud 108 ( 0.00%) 18027 ( 0.00%) 166.92
halflif 158 ( 0.00%) 21214 ( 0.00%) 134.27
starcra 326 ( 0.00%) 67370 ( 0.00%) 206.66
everque 704 ( 0.00%) 102082 ( 0.00%) 145.00
unreal 100 ( 0.00%) 22582 ( 0.00%) 225.82
quake 6175 ( 0.01%) 789659 ( 0.00%) 127.88
cuseeme 34 ( 0.00%) 4483 ( 0.00%) 131.85
other 25136290 ( 47.60%) 5380376540 ( 22.97%) 214.05
icmp 694809 ( 1.32%) 59510362 ( 0.25%) 85.65
ipip 336 ( 0.00%) 40988 ( 0.00%) 121.99
ipsec 87592 ( 0.17%) 48464360 ( 0.21%) 553.30
ip6 53266 ( 0.10%) 19990791 ( 0.09%) 375.30
other 23895 ( 0.05%) 4384147 ( 0.02%) 183.48
frag 70991 ( 0.13%) 43056383 ( 0.18%) 606.50
ip6 47782 ( 0.09%) 7042442 ( 0.03%) 147.39
tcp6 31710 ( 0.06%) 3858017 ( 0.02%) 121.67
http(s) 308 ( 0.00%) 354812 ( 0.00%) 1151.99
http(c) 4530 ( 0.01%) 424003 ( 0.00%) 93.60
smtp 1379 ( 0.00%) 698957 ( 0.00%) 506.86
ssh 205 ( 0.00%) 97006 ( 0.00%) 473.20
dns 21 ( 0.00%) 3153 ( 0.00%) 150.14
bgp 108 ( 0.00%) 13723 ( 0.00%) 127.06
other 25159 ( 0.05%) 2266363 ( 0.01%) 90.08
udp6 11751 ( 0.02%) 2642866 ( 0.01%) 224.91
dns 11730 ( 0.02%) 2640556 ( 0.01%) 225.11
other 21 ( 0.00%) 2310 ( 0.00%) 110.00
icmp6 4265 ( 0.01%) 511126 ( 0.00%) 119.84
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 26 ( 0.00%) 26353 ( 0.00%) 1013.58
tcpdump file: 200911131400.dump.gz (1125.83 MB)