Traffic Trace Info
DumpFile: 200911191400.dump
FileSize: 2892.94MB
Id: 200911191400
StartTime: Thu Nov 19 14:00:01 2009
EndTime: Thu Nov 19 14:15:01 2009
TotalTime: 899.93 seconds
TotalCapSize: -1858.84MB CapLen: 96 bytes
# of packets: 42976118 (30764.38MB)
AvgRate: 286.74Mbps stddev:12.51M
IP flow (unique src/dst pair) Information
# of flows: 1588441 (avg. 27.06 pkts/flow)
Top 10 big flow size (bytes/total in %):
29.5% 2.5% 1.8% 1.2% 0.8% 0.7% 0.7% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 934377
Top 10 bandwidth usage (bytes/total in %):
29.5% 29.5% 18.9% 4.3% 4.1% 3.1% 2.8% 2.5% 2.1% 1.8%
# of IPv6 addresses: 905
Top 10 bandwidth usage (bytes/total in %):
21.5% 21.5% 12.7% 12.7% 7.8% 6.6% 5.1% 4.1% 3.8% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200911191400.pktlen.png)
detailed numbers
[ 32- 63]: 8767666
[ 64- 127]: 9596399
[ 128- 255]: 1839416
[ 256- 511]: 1023313
[ 512- 1023]: 1500672
[ 1024- 2047]: 20248652
Protocol Breakdown
![[protocol breakdown chart]](200911191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42976118 (100.00%) 32258793393 (100.00%) 750.62
ip 42938444 ( 99.91%) 32252523846 ( 99.98%) 751.13
tcp 32264635 ( 75.08%) 27479357359 ( 85.18%) 851.69
http(s) 14055269 ( 32.70%) 19440905248 ( 60.27%) 1383.18
http(c) 6840920 ( 15.92%) 1346161627 ( 4.17%) 196.78
squid 1008393 ( 2.35%) 180296554 ( 0.56%) 178.80
smtp 215822 ( 0.50%) 91332877 ( 0.28%) 423.19
nntp 64 ( 0.00%) 5966 ( 0.00%) 93.22
ftp 620963 ( 1.44%) 821088058 ( 2.55%) 1322.28
pop3 16599 ( 0.04%) 8439500 ( 0.03%) 508.43
imap 13218 ( 0.03%) 15574420 ( 0.05%) 1178.27
telnet 3135 ( 0.01%) 1055014 ( 0.00%) 336.53
ssh 380235 ( 0.88%) 56740694 ( 0.18%) 149.23
dns 3761 ( 0.01%) 433714 ( 0.00%) 115.32
bgp 150 ( 0.00%) 49845 ( 0.00%) 332.30
napster 262 ( 0.00%) 24375 ( 0.00%) 93.03
realaud 480 ( 0.00%) 62977 ( 0.00%) 131.20
rtsp 104177 ( 0.24%) 44525058 ( 0.14%) 427.40
icecast 46636 ( 0.11%) 34837096 ( 0.11%) 747.00
hotline 14 ( 0.00%) 6474 ( 0.00%) 462.43
other 8953961 ( 20.83%) 5437722142 ( 16.86%) 607.30
udp 9677851 ( 22.52%) 4635865484 ( 14.37%) 479.02
dns 1039960 ( 2.42%) 185674328 ( 0.58%) 178.54
rip 4 ( 0.00%) 614 ( 0.00%) 153.50
realaud 71 ( 0.00%) 9424 ( 0.00%) 132.73
halflif 127 ( 0.00%) 19171 ( 0.00%) 150.95
starcra 431 ( 0.00%) 87658 ( 0.00%) 203.38
everque 735 ( 0.00%) 141214 ( 0.00%) 192.13
unreal 164 ( 0.00%) 29603 ( 0.00%) 180.51
quake 44 ( 0.00%) 7932 ( 0.00%) 180.27
cuseeme 19 ( 0.00%) 1796 ( 0.00%) 94.53
other 8634860 ( 20.09%) 4449300766 ( 13.79%) 515.27
icmp 946832 ( 2.20%) 122111242 ( 0.38%) 128.97
ipip 326 ( 0.00%) 40650 ( 0.00%) 124.69
ipsec 10 ( 0.00%) 1452 ( 0.00%) 145.20
ip6 38966 ( 0.09%) 5614377 ( 0.02%) 144.08
other 9824 ( 0.02%) 9533282 ( 0.03%) 970.41
frag 12747 ( 0.03%) 9893215 ( 0.03%) 776.12
ip6 37674 ( 0.09%) 6269547 ( 0.02%) 166.42
tcp6 22220 ( 0.05%) 3323468 ( 0.01%) 149.57
http(s) 151 ( 0.00%) 186777 ( 0.00%) 1236.93
http(c) 19304 ( 0.04%) 1679434 ( 0.01%) 87.00
smtp 1040 ( 0.00%) 526839 ( 0.00%) 506.58
ssh 264 ( 0.00%) 45792 ( 0.00%) 173.45
dns 5 ( 0.00%) 1774 ( 0.00%) 354.80
bgp 99 ( 0.00%) 12256 ( 0.00%) 123.80
other 1357 ( 0.00%) 870596 ( 0.00%) 641.56
udp6 10247 ( 0.02%) 2344449 ( 0.01%) 228.79
dns 10228 ( 0.02%) 2342343 ( 0.01%) 229.01
other 19 ( 0.00%) 2106 ( 0.00%) 110.84
icmp6 5160 ( 0.01%) 580067 ( 0.00%) 112.42
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 17 ( 0.00%) 17483 ( 0.00%) 1028.41
tcpdump file: 200911191400.dump.gz (1040.13 MB)