Traffic Trace Info
DumpFile: 200911171400.dump
FileSize: 2723.88MB
Id: 200911171400
StartTime: Tue Nov 17 14:00:01 2009
EndTime: Tue Nov 17 14:15:01 2009
TotalTime: 899.71 seconds
TotalCapSize: -1987.84MB CapLen: 96 bytes
# of packets: 40351462 (24381.18MB)
AvgRate: 227.32Mbps stddev:11.61M
IP flow (unique src/dst pair) Information
# of flows: 1486653 (avg. 27.14 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.5% 1.2% 0.9% 0.9% 0.9% 0.8% 0.8% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 909577
Top 10 bandwidth usage (bytes/total in %):
16.1% 7.3% 6.8% 5.9% 4.8% 4.1% 3.9% 3.9% 3.6% 3.0%
# of IPv6 addresses: 1027
Top 10 bandwidth usage (bytes/total in %):
35.8% 18.6% 17.6% 10.3% 5.2% 4.5% 4.2% 4.2% 3.8% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200911171400.pktlen.png)
detailed numbers
[ 32- 63]: 10454778
[ 64- 127]: 9797613
[ 128- 255]: 1842828
[ 256- 511]: 1259216
[ 512- 1023]: 1550096
[ 1024- 2047]: 15446931
Protocol Breakdown
![[protocol breakdown chart]](200911171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40351462 (100.00%) 25565521072 (100.00%) 633.57
ip 40321761 ( 99.93%) 25554817224 ( 99.96%) 633.77
tcp 29816829 ( 73.89%) 20377399988 ( 79.71%) 683.42
http(s) 10536765 ( 26.11%) 13312085865 ( 52.07%) 1263.39
http(c) 8451304 ( 20.94%) 1586893107 ( 6.21%) 187.77
squid 767553 ( 1.90%) 233801458 ( 0.91%) 304.61
smtp 512373 ( 1.27%) 169356566 ( 0.66%) 330.53
nntp 10 ( 0.00%) 632 ( 0.00%) 63.20
ftp 56799 ( 0.14%) 20147563 ( 0.08%) 354.72
pop3 20077 ( 0.05%) 6367398 ( 0.02%) 317.15
imap 3687 ( 0.01%) 1865743 ( 0.01%) 506.03
telnet 754 ( 0.00%) 84177 ( 0.00%) 111.64
ssh 55130 ( 0.14%) 19741374 ( 0.08%) 358.09
dns 2089 ( 0.01%) 349822 ( 0.00%) 167.46
bgp 157 ( 0.00%) 47906 ( 0.00%) 305.13
napster 20131 ( 0.05%) 2739745 ( 0.01%) 136.10
realaud 242 ( 0.00%) 27999 ( 0.00%) 115.70
rtsp 194996 ( 0.48%) 31034531 ( 0.12%) 159.15
icecast 33947 ( 0.08%) 17894292 ( 0.07%) 527.12
hotline 13 ( 0.00%) 2391 ( 0.00%) 183.92
other 9160374 ( 22.70%) 4974933739 ( 19.46%) 543.09
udp 9467764 ( 23.46%) 5025159488 ( 19.66%) 530.77
dns 1182403 ( 2.93%) 211904979 ( 0.83%) 179.22
realaud 93 ( 0.00%) 13279 ( 0.00%) 142.78
halflif 124 ( 0.00%) 17095 ( 0.00%) 137.86
starcra 357 ( 0.00%) 67844 ( 0.00%) 190.04
everque 1016 ( 0.00%) 233952 ( 0.00%) 230.27
unreal 131 ( 0.00%) 22471 ( 0.00%) 171.53
quake 66 ( 0.00%) 11486 ( 0.00%) 174.03
cuseeme 14 ( 0.00%) 1873 ( 0.00%) 133.79
other 8278680 ( 20.52%) 4812106758 ( 18.82%) 581.26
icmp 870777 ( 2.16%) 104104569 ( 0.41%) 119.55
ipip 343 ( 0.00%) 43216 ( 0.00%) 125.99
ipsec 94 ( 0.00%) 14852 ( 0.00%) 158.00
ip6 127193 ( 0.32%) 42255335 ( 0.17%) 332.21
other 38761 ( 0.10%) 5839776 ( 0.02%) 150.66
frag 26328 ( 0.07%) 21207838 ( 0.08%) 805.52
ip6 29701 ( 0.07%) 10703848 ( 0.04%) 360.39
tcp6 10751 ( 0.03%) 6856575 ( 0.03%) 637.76
http(s) 3858 ( 0.01%) 5045177 ( 0.02%) 1307.72
http(c) 2565 ( 0.01%) 250391 ( 0.00%) 97.62
smtp 2249 ( 0.01%) 1245918 ( 0.00%) 553.99
pop3 711 ( 0.00%) 52864 ( 0.00%) 74.35
ssh 258 ( 0.00%) 103224 ( 0.00%) 400.09
dns 22 ( 0.00%) 11370 ( 0.00%) 516.82
bgp 113 ( 0.00%) 14323 ( 0.00%) 126.75
other 975 ( 0.00%) 133308 ( 0.00%) 136.73
udp6 14567 ( 0.04%) 3319020 ( 0.01%) 227.85
dns 14548 ( 0.04%) 3316885 ( 0.01%) 228.00
other 19 ( 0.00%) 2135 ( 0.00%) 112.37
icmp6 4332 ( 0.01%) 503118 ( 0.00%) 116.14
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 21 ( 0.00%) 21055 ( 0.00%) 1002.62
tcpdump file: 200911171400.dump.gz (1032.08 MB)