Traffic Trace Info
DumpFile: 200911161400.dump
FileSize: 2450.29MB
Id: 200911161400
StartTime: Mon Nov 16 14:00:01 2009
EndTime: Mon Nov 16 14:15:00 2009
TotalTime: 899.24 seconds
TotalCapSize: 1900.28MB CapLen: 96 bytes
# of packets: 36044593 (21266.75MB)
AvgRate: 198.39Mbps stddev:13.55M
IP flow (unique src/dst pair) Information
# of flows: 1343944 (avg. 26.82 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.6% 1.6% 1.3% 0.9% 0.8% 0.7% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 827134
Top 10 bandwidth usage (bytes/total in %):
20.5% 7.9% 6.5% 4.4% 4.4% 4.4% 3.4% 3.0% 2.8% 2.6%
# of IPv6 addresses: 955
Top 10 bandwidth usage (bytes/total in %):
15.5% 6.1% 6.1% 5.3% 5.1% 4.9% 4.3% 4.1% 4.0% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200911161400.pktlen.png)
detailed numbers
[ 32- 63]: 8975213
[ 64- 127]: 9344068
[ 128- 255]: 1810355
[ 256- 511]: 1155048
[ 512- 1023]: 1100731
[ 1024- 2047]: 13659178
Protocol Breakdown
![[protocol breakdown chart]](200911161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36044593 (100.00%) 22299803575 (100.00%) 618.67
ip 36020420 ( 99.93%) 22293677408 ( 99.97%) 618.92
tcp 26740771 ( 74.19%) 18165225525 ( 81.46%) 679.31
http(s) 9243298 ( 25.64%) 11332684524 ( 50.82%) 1226.04
http(c) 8198348 ( 22.75%) 2069954687 ( 9.28%) 252.48
squid 943904 ( 2.62%) 227511624 ( 1.02%) 241.03
smtp 243468 ( 0.68%) 116521314 ( 0.52%) 478.59
nntp 8 ( 0.00%) 698 ( 0.00%) 87.25
ftp 74073 ( 0.21%) 25766769 ( 0.12%) 347.86
pop3 30225 ( 0.08%) 17198932 ( 0.08%) 569.03
imap 5560 ( 0.02%) 1474922 ( 0.01%) 265.27
telnet 905 ( 0.00%) 141268 ( 0.00%) 156.10
ssh 164519 ( 0.46%) 26301917 ( 0.12%) 159.87
dns 1416 ( 0.00%) 273017 ( 0.00%) 192.81
bgp 144 ( 0.00%) 37712 ( 0.00%) 261.89
napster 2842 ( 0.01%) 1210597 ( 0.01%) 425.97
realaud 504 ( 0.00%) 60869 ( 0.00%) 120.77
rtsp 161591 ( 0.45%) 31517620 ( 0.14%) 195.05
icecast 55584 ( 0.15%) 32871454 ( 0.15%) 591.38
hotline 3 ( 0.00%) 206 ( 0.00%) 68.67
other 7614263 ( 21.12%) 4281690185 ( 19.20%) 562.32
udp 8499062 ( 23.58%) 4050540665 ( 18.16%) 476.59
dns 1063509 ( 2.95%) 200111204 ( 0.90%) 188.16
realaud 300 ( 0.00%) 31785 ( 0.00%) 105.95
halflif 411 ( 0.00%) 31824 ( 0.00%) 77.43
starcra 353 ( 0.00%) 71133 ( 0.00%) 201.51
everque 1404 ( 0.00%) 703633 ( 0.00%) 501.16
unreal 210 ( 0.00%) 27424 ( 0.00%) 130.59
quake 41 ( 0.00%) 5978 ( 0.00%) 145.80
cuseeme 19 ( 0.00%) 2342 ( 0.00%) 123.26
other 7430387 ( 20.61%) 3848907014 ( 17.26%) 518.00
icmp 698522 ( 1.94%) 57596125 ( 0.26%) 82.45
ipip 344 ( 0.00%) 41652 ( 0.00%) 121.08
ipsec 96 ( 0.00%) 15168 ( 0.00%) 158.00
ip6 49607 ( 0.14%) 13408730 ( 0.06%) 270.30
other 32018 ( 0.09%) 6849543 ( 0.03%) 213.93
frag 26651 ( 0.07%) 23842012 ( 0.11%) 894.60
ip6 24173 ( 0.07%) 6126167 ( 0.03%) 253.43
tcp6 7352 ( 0.02%) 2810735 ( 0.01%) 382.31
http(s) 790 ( 0.00%) 963741 ( 0.00%) 1219.93
http(c) 2966 ( 0.01%) 282453 ( 0.00%) 95.23
smtp 2289 ( 0.01%) 1171385 ( 0.01%) 511.75
ssh 492 ( 0.00%) 286776 ( 0.00%) 582.88
dns 46 ( 0.00%) 8333 ( 0.00%) 181.15
bgp 109 ( 0.00%) 13636 ( 0.00%) 125.10
other 660 ( 0.00%) 84411 ( 0.00%) 127.90
udp6 12637 ( 0.04%) 2806138 ( 0.01%) 222.06
dns 12598 ( 0.03%) 2799110 ( 0.01%) 222.19
other 39 ( 0.00%) 7028 ( 0.00%) 180.21
icmp6 4131 ( 0.01%) 485190 ( 0.00%) 117.45
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 23 ( 0.00%) 20024 ( 0.00%) 870.61
tcpdump file: 200911161400.dump.gz (919.15 MB)