Traffic Trace Info
DumpFile: 200911151400.dump
FileSize: 1901.96MB
Id: 200911151400
StartTime: Sun Nov 15 14:00:00 2009
EndTime: Sun Nov 15 14:15:00 2009
TotalTime: 900.22 seconds
TotalCapSize: 1458.95MB CapLen: 96 bytes
# of packets: 29032493 (15879.55MB)
AvgRate: 147.94Mbps stddev:25.87M
IP flow (unique src/dst pair) Information
# of flows: 1278078 (avg. 22.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.5% 1.4% 1.3% 1.3% 1.1% 1.0% 1.0% 1.0% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 816614
Top 10 bandwidth usage (bytes/total in %):
30.9% 8.5% 8.5% 7.5% 5.0% 3.9% 3.3% 2.1% 2.0% 1.6%
# of IPv6 addresses: 882
Top 10 bandwidth usage (bytes/total in %):
13.4% 9.8% 9.8% 9.5% 8.4% 7.3% 5.3% 4.9% 4.8% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200911151400.pktlen.png)
detailed numbers
[ 32- 63]: 9406477
[ 64- 127]: 6436219
[ 128- 255]: 1418615
[ 256- 511]: 752462
[ 512- 1023]: 740919
[ 1024- 2047]: 10277801
Protocol Breakdown
![[protocol breakdown chart]](200911151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29032493 (100.00%) 16650918625 (100.00%) 573.53
ip 29013931 ( 99.94%) 16647408555 ( 99.98%) 573.77
tcp 18292188 ( 63.01%) 13340191404 ( 80.12%) 729.28
http(s) 6552801 ( 22.57%) 8608410006 ( 51.70%) 1313.70
http(c) 3529108 ( 12.16%) 498168725 ( 2.99%) 141.16
squid 611343 ( 2.11%) 174584221 ( 1.05%) 285.57
smtp 138189 ( 0.48%) 31702843 ( 0.19%) 229.42
nntp 845 ( 0.00%) 510881 ( 0.00%) 604.59
ftp 79724 ( 0.27%) 41454232 ( 0.25%) 519.97
pop3 10545 ( 0.04%) 7828530 ( 0.05%) 742.39
imap 3786 ( 0.01%) 1076984 ( 0.01%) 284.46
telnet 708 ( 0.00%) 112942 ( 0.00%) 159.52
ssh 145964 ( 0.50%) 21444093 ( 0.13%) 146.91
dns 1392 ( 0.00%) 122899 ( 0.00%) 88.29
bgp 140 ( 0.00%) 38287 ( 0.00%) 273.48
napster 4278 ( 0.01%) 3626693 ( 0.02%) 847.75
realaud 894 ( 0.00%) 114045 ( 0.00%) 127.57
rtsp 160501 ( 0.55%) 166335071 ( 1.00%) 1036.35
icecast 4536 ( 0.02%) 774934 ( 0.00%) 170.84
other 7047423 ( 24.27%) 3783885358 ( 22.72%) 536.92
udp 9947522 ( 34.26%) 3238301810 ( 19.45%) 325.54
dns 904437 ( 3.12%) 141919661 ( 0.85%) 156.91
realaud 1363 ( 0.00%) 97969 ( 0.00%) 71.88
halflif 139 ( 0.00%) 19239 ( 0.00%) 138.41
starcra 4913 ( 0.02%) 394672 ( 0.00%) 80.33
everque 1727 ( 0.01%) 1020221 ( 0.01%) 590.75
unreal 119 ( 0.00%) 22031 ( 0.00%) 185.13
quake 77 ( 0.00%) 7742 ( 0.00%) 100.55
cuseeme 36 ( 0.00%) 4445 ( 0.00%) 123.47
other 9027637 ( 31.09%) 3093581172 ( 18.58%) 342.68
icmp 713612 ( 2.46%) 59157674 ( 0.36%) 82.90
ipip 324 ( 0.00%) 39024 ( 0.00%) 120.44
ipsec 98 ( 0.00%) 15484 ( 0.00%) 158.00
ip6 42263 ( 0.15%) 5841479 ( 0.04%) 138.22
other 17924 ( 0.06%) 3861680 ( 0.02%) 215.45
frag 38920 ( 0.13%) 31886362 ( 0.19%) 819.28
ip6 18562 ( 0.06%) 3510070 ( 0.02%) 189.10
tcp6 6479 ( 0.02%) 1411141 ( 0.01%) 217.80
http(s) 46 ( 0.00%) 23518 ( 0.00%) 511.26
http(c) 4254 ( 0.01%) 438224 ( 0.00%) 103.01
smtp 1310 ( 0.00%) 849014 ( 0.01%) 648.10
ssh 110 ( 0.00%) 10036 ( 0.00%) 91.24
bgp 109 ( 0.00%) 13503 ( 0.00%) 123.88
other 650 ( 0.00%) 76846 ( 0.00%) 118.22
udp6 7933 ( 0.03%) 1608955 ( 0.01%) 202.82
dns 7902 ( 0.03%) 1605289 ( 0.01%) 203.15
other 31 ( 0.00%) 3666 ( 0.00%) 118.26
icmp6 4114 ( 0.01%) 480725 ( 0.00%) 116.85
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6 ( 0.00%) 5169 ( 0.00%) 861.50
tcpdump file: 200911151400.dump.gz (697.34 MB)