Traffic Trace Info
DumpFile: 200911201400.dump
FileSize: 1688.75MB
Id: 200911201400
StartTime: Fri Nov 20 14:00:01 2009
EndTime: Fri Nov 20 14:15:00 2009
TotalTime: 899.42 seconds
TotalCapSize: 1317.57MB CapLen: 96 bytes
# of packets: 24324952 (14114.58MB)
AvgRate: 131.66Mbps stddev:11.93M
IP flow (unique src/dst pair) Information
# of flows: 844441 (avg. 28.81 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.5% 2.5% 2.5% 2.5% 1.5% 1.3% 1.2% 1.0% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 500312
Top 10 bandwidth usage (bytes/total in %):
13.6% 7.5% 6.2% 5.4% 4.5% 3.5% 3.5% 3.1% 2.8% 2.7%
# of IPv6 addresses: 978
Top 10 bandwidth usage (bytes/total in %):
43.6% 43.4% 18.3% 18.3% 7.3% 2.8% 2.8% 2.8% 2.8% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200911201400.pktlen.png)
detailed numbers
[ 32- 63]: 5222657
[ 64- 127]: 6923729
[ 128- 255]: 1535742
[ 256- 511]: 689148
[ 512- 1023]: 961239
[ 1024- 2047]: 8992437
Protocol Breakdown
![[protocol breakdown chart]](200911201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24324952 (100.00%) 14800213686 (100.00%) 608.44
ip 24249624 ( 99.69%) 14788252290 ( 99.92%) 609.83
tcp 18296972 ( 75.22%) 12024446488 ( 81.25%) 657.18
http(s) 5506577 ( 22.64%) 7137940972 ( 48.23%) 1296.26
http(c) 4905617 ( 20.17%) 894412307 ( 6.04%) 182.32
squid 1356380 ( 5.58%) 274747420 ( 1.86%) 202.56
smtp 257884 ( 1.06%) 107084479 ( 0.72%) 415.24
nntp 140 ( 0.00%) 11404 ( 0.00%) 81.46
ftp 73253 ( 0.30%) 9833810 ( 0.07%) 134.24
pop3 15724 ( 0.06%) 3793857 ( 0.03%) 241.28
imap 2583 ( 0.01%) 950809 ( 0.01%) 368.10
telnet 1284 ( 0.01%) 97260 ( 0.00%) 75.75
ssh 437710 ( 1.80%) 65988363 ( 0.45%) 150.76
dns 4090 ( 0.02%) 4703973 ( 0.03%) 1150.12
bgp 163 ( 0.00%) 71402 ( 0.00%) 438.05
napster 525 ( 0.00%) 336456 ( 0.00%) 640.87
realaud 7 ( 0.00%) 896 ( 0.00%) 128.00
rtsp 200059 ( 0.82%) 51218675 ( 0.35%) 256.02
icecast 1973 ( 0.01%) 511096 ( 0.00%) 259.05
hotline 2 ( 0.00%) 132 ( 0.00%) 66.00
other 5533000 ( 22.75%) 3472743117 ( 23.46%) 627.64
udp 5025029 ( 20.66%) 2650854407 ( 17.91%) 527.53
dns 1074236 ( 4.42%) 206120192 ( 1.39%) 191.88
realaud 597 ( 0.00%) 38763 ( 0.00%) 64.93
halflif 102 ( 0.00%) 22673 ( 0.00%) 222.28
starcra 66 ( 0.00%) 9367 ( 0.00%) 141.92
everque 539 ( 0.00%) 171674 ( 0.00%) 318.50
unreal 40 ( 0.00%) 6143 ( 0.00%) 153.57
quake 29 ( 0.00%) 2594 ( 0.00%) 89.45
cuseeme 21 ( 0.00%) 4795 ( 0.00%) 228.33
other 3948372 ( 16.23%) 2443822978 ( 16.51%) 618.94
icmp 838388 ( 3.45%) 99741736 ( 0.67%) 118.97
ipip 349 ( 0.00%) 43240 ( 0.00%) 123.90
ipsec 30 ( 0.00%) 3780 ( 0.00%) 126.00
ip6 38476 ( 0.16%) 5789706 ( 0.04%) 150.48
other 50380 ( 0.21%) 7372933 ( 0.05%) 146.35
frag 9744 ( 0.04%) 10763062 ( 0.07%) 1104.58
ip6 75328 ( 0.31%) 11961396 ( 0.08%) 158.79
tcp6 60895 ( 0.25%) 9299937 ( 0.06%) 152.72
http(s) 2358 ( 0.01%) 2755046 ( 0.02%) 1168.38
http(c) 3851 ( 0.02%) 349649 ( 0.00%) 90.79
smtp 1696 ( 0.01%) 918147 ( 0.01%) 541.36
ssh 9 ( 0.00%) 1110 ( 0.00%) 123.33
bgp 116 ( 0.00%) 15206 ( 0.00%) 131.09
other 52865 ( 0.22%) 5260779 ( 0.04%) 99.51
udp6 9791 ( 0.04%) 2125749 ( 0.01%) 217.11
dns 9730 ( 0.04%) 2115297 ( 0.01%) 217.40
other 61 ( 0.00%) 10452 ( 0.00%) 171.34
icmp6 4604 ( 0.02%) 523820 ( 0.00%) 113.77
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 8 ( 0.00%) 7810 ( 0.00%) 976.25
tcpdump file: 200911201400.dump.gz (598.69 MB)