Traffic Trace Info
DumpFile: 200911221400.dump
FileSize: 1200.27MB
Id: 200911221400
StartTime: Sun Nov 22 14:00:00 2009
EndTime: Sun Nov 22 14:15:00 2009
TotalTime: 899.57 seconds
TotalCapSize: 939.32MB CapLen: 96 bytes
# of packets: 17080332 (9956.74MB)
AvgRate: 92.84Mbps stddev:13.39M
IP flow (unique src/dst pair) Information
# of flows: 765393 (avg. 22.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.1% 3.9% 3.4% 2.9% 2.0% 1.5% 1.4% 1.4% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 477877
Top 10 bandwidth usage (bytes/total in %):
12.8% 9.3% 8.4% 7.8% 5.8% 4.9% 4.6% 3.9% 3.4% 3.0%
# of IPv6 addresses: 844
Top 10 bandwidth usage (bytes/total in %):
13.1% 11.3% 9.8% 9.2% 6.6% 4.5% 4.2% 4.0% 3.9% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200911221400.pktlen.png)
detailed numbers
[ 32- 63]: 4423567
[ 64- 127]: 4848611
[ 128- 255]: 617157
[ 256- 511]: 442028
[ 512- 1023]: 359447
[ 1024- 2047]: 6389522
Protocol Breakdown
![[protocol breakdown chart]](200911221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17080332 (100.00%) 10440403596 (100.00%) 611.25
ip 17063878 ( 99.90%) 10437605243 ( 99.97%) 611.68
tcp 14056009 ( 82.29%) 9551577535 ( 91.49%) 679.54
http(s) 5767739 ( 33.77%) 7514190292 ( 71.97%) 1302.80
http(c) 3170786 ( 18.56%) 317053213 ( 3.04%) 99.99
squid 1535139 ( 8.99%) 243533567 ( 2.33%) 158.64
smtp 144869 ( 0.85%) 37355330 ( 0.36%) 257.86
ftp 47526 ( 0.28%) 19655181 ( 0.19%) 413.57
pop3 5412 ( 0.03%) 1913758 ( 0.02%) 353.61
imap 762 ( 0.00%) 280865 ( 0.00%) 368.59
telnet 5321 ( 0.03%) 390715 ( 0.00%) 73.43
ssh 43100 ( 0.25%) 7369508 ( 0.07%) 170.99
dns 6039 ( 0.04%) 7954354 ( 0.08%) 1317.16
bgp 148 ( 0.00%) 52175 ( 0.00%) 352.53
napster 10 ( 0.00%) 912 ( 0.00%) 91.20
rtsp 232 ( 0.00%) 68148 ( 0.00%) 293.74
icecast 389 ( 0.00%) 34550 ( 0.00%) 88.82
other 3328532 ( 19.49%) 1401724667 ( 13.43%) 421.12
udp 2236909 ( 13.10%) 822014416 ( 7.87%) 367.48
dns 796389 ( 4.66%) 126765485 ( 1.21%) 159.18
realaud 1946 ( 0.01%) 117668 ( 0.00%) 60.47
halflif 95 ( 0.00%) 7919 ( 0.00%) 83.36
starcra 68 ( 0.00%) 12672 ( 0.00%) 186.35
everque 1459 ( 0.01%) 1429211 ( 0.01%) 979.58
unreal 20 ( 0.00%) 2764 ( 0.00%) 138.20
quake 11 ( 0.00%) 1008 ( 0.00%) 91.64
cuseeme 5 ( 0.00%) 679 ( 0.00%) 135.80
other 1436872 ( 8.41%) 693640140 ( 6.64%) 482.74
icmp 715922 ( 4.19%) 56461293 ( 0.54%) 78.87
ipip 351 ( 0.00%) 43670 ( 0.00%) 124.42
ipsec 28 ( 0.00%) 3528 ( 0.00%) 126.00
ip6 43389 ( 0.25%) 6012551 ( 0.06%) 138.57
other 11270 ( 0.07%) 1492250 ( 0.01%) 132.41
frag 2972 ( 0.02%) 4115615 ( 0.04%) 1384.80
ip6 16454 ( 0.10%) 2798353 ( 0.03%) 170.07
tcp6 5083 ( 0.03%) 825557 ( 0.01%) 162.42
http(s) 57 ( 0.00%) 34103 ( 0.00%) 598.30
http(c) 3596 ( 0.02%) 326630 ( 0.00%) 90.83
smtp 701 ( 0.00%) 358284 ( 0.00%) 511.10
ssh 8 ( 0.00%) 1024 ( 0.00%) 128.00
bgp 110 ( 0.00%) 14702 ( 0.00%) 133.65
other 611 ( 0.00%) 90814 ( 0.00%) 148.63
udp6 6684 ( 0.04%) 1363657 ( 0.01%) 204.02
dns 6595 ( 0.04%) 1343297 ( 0.01%) 203.68
other 89 ( 0.00%) 20360 ( 0.00%) 228.76
icmp6 4655 ( 0.03%) 602794 ( 0.01%) 129.49
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2 ( 0.00%) 2265 ( 0.00%) 1132.50
tcpdump file: 200911221400.dump.gz (431.31 MB)