Traffic Trace Info
DumpFile: 200911141400.dump
FileSize: 2026.30MB
Id: 200911141400
StartTime: Sat Nov 14 14:00:00 2009
EndTime: Sat Nov 14 14:15:01 2009
TotalTime: 900.55 seconds
TotalCapSize: 1569.65MB CapLen: 96 bytes
# of packets: 29926222 (16786.19MB)
AvgRate: 156.36Mbps stddev:10.65M
IP flow (unique src/dst pair) Information
# of flows: 1517243 (avg. 19.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.6% 1.4% 1.3% 1.3% 1.2% 1.2% 1.1% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 956957
Top 10 bandwidth usage (bytes/total in %):
27.6% 7.7% 6.3% 4.6% 4.4% 4.3% 4.3% 2.1% 1.7% 1.6%
# of IPv6 addresses: 892
Top 10 bandwidth usage (bytes/total in %):
98.3% 52.5% 45.8% 0.4% 0.4% 0.3% 0.1% 0.1% 0.1% 0.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200911141400.pktlen.png)
detailed numbers
[ 32- 63]: 7346218
[ 64- 127]: 8144849
[ 128- 255]: 1861516
[ 256- 511]: 909511
[ 512- 1023]: 1011844
[ 1024- 2047]: 10652284
Protocol Breakdown
![[protocol breakdown chart]](200911141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29926222 (100.00%) 17601600197 (100.00%) 588.17
ip 29679346 ( 99.18%) 17316697214 ( 98.38%) 583.46
tcp 20999763 ( 70.17%) 13855367799 ( 78.72%) 659.79
http(s) 6664594 ( 22.27%) 8605791879 ( 48.89%) 1291.27
http(c) 4968062 ( 16.60%) 591673778 ( 3.36%) 119.10
squid 751963 ( 2.51%) 153039045 ( 0.87%) 203.52
smtp 183438 ( 0.61%) 54002064 ( 0.31%) 294.39
nntp 12 ( 0.00%) 726 ( 0.00%) 60.50
ftp 76795 ( 0.26%) 24756455 ( 0.14%) 322.37
pop3 10446 ( 0.03%) 4080586 ( 0.02%) 390.64
imap 6517 ( 0.02%) 1120394 ( 0.01%) 171.92
telnet 879 ( 0.00%) 84751 ( 0.00%) 96.42
ssh 219300 ( 0.73%) 19914530 ( 0.11%) 90.81
dns 1379 ( 0.00%) 146615 ( 0.00%) 106.32
bgp 144 ( 0.00%) 40639 ( 0.00%) 282.22
napster 262 ( 0.00%) 25110 ( 0.00%) 95.84
realaud 786 ( 0.00%) 98038 ( 0.00%) 124.73
rtsp 256503 ( 0.86%) 89207865 ( 0.51%) 347.78
icecast 10334 ( 0.03%) 2847948 ( 0.02%) 275.59
hotline 16 ( 0.00%) 984 ( 0.00%) 61.50
other 7848276 ( 26.23%) 4308532972 ( 24.48%) 548.98
udp 7711806 ( 25.77%) 3188653376 ( 18.12%) 413.48
dns 1134574 ( 3.79%) 172548788 ( 0.98%) 152.08
realaud 1501 ( 0.01%) 102293 ( 0.00%) 68.15
halflif 204 ( 0.00%) 25925 ( 0.00%) 127.08
starcra 493 ( 0.00%) 97577 ( 0.00%) 197.92
everque 2505 ( 0.01%) 1634870 ( 0.01%) 652.64
unreal 122 ( 0.00%) 23878 ( 0.00%) 195.72
quake 76 ( 0.00%) 14375 ( 0.00%) 189.14
cuseeme 10 ( 0.00%) 1766 ( 0.00%) 176.60
other 6569260 ( 21.95%) 3012715025 ( 17.12%) 458.61
icmp 718063 ( 2.40%) 57260592 ( 0.33%) 79.74
ipip 355 ( 0.00%) 43562 ( 0.00%) 122.71
ipsec 98 ( 0.00%) 15484 ( 0.00%) 158.00
ip6 225001 ( 0.75%) 210246272 ( 1.19%) 934.42
other 24260 ( 0.08%) 5110129 ( 0.03%) 210.64
frag 30839 ( 0.10%) 30441062 ( 0.17%) 987.10
ip6 246876 ( 0.82%) 284902983 ( 1.62%) 1154.03
tcp6 234907 ( 0.78%) 282674525 ( 1.61%) 1203.35
http(s) 228669 ( 0.76%) 281349814 ( 1.60%) 1230.38
http(c) 3729 ( 0.01%) 340240 ( 0.00%) 91.24
smtp 1668 ( 0.01%) 885764 ( 0.01%) 531.03
ssh 109 ( 0.00%) 9714 ( 0.00%) 89.12
dns 5 ( 0.00%) 746 ( 0.00%) 149.20
bgp 101 ( 0.00%) 12645 ( 0.00%) 125.20
other 626 ( 0.00%) 75602 ( 0.00%) 120.77
udp6 8053 ( 0.03%) 1740786 ( 0.01%) 216.17
dns 7996 ( 0.03%) 1729786 ( 0.01%) 216.33
other 57 ( 0.00%) 11000 ( 0.00%) 192.98
icmp6 3861 ( 0.01%) 455388 ( 0.00%) 117.95
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 24 ( 0.00%) 28068 ( 0.00%) 1169.50
tcpdump file: 200911141400.dump.gz (767.28 MB)