Traffic Trace Info
DumpFile: 200911241400.dump
FileSize: 1968.59MB
Id: 200911241400
StartTime: Tue Nov 24 14:00:01 2009
EndTime: Tue Nov 24 14:15:01 2009
TotalTime: 899.94 seconds
TotalCapSize: 1538.37MB CapLen: 96 bytes
# of packets: 28171459 (17320.34MB)
AvgRate: 161.45Mbps stddev:16.75M
IP flow (unique src/dst pair) Information
# of flows: 904384 (avg. 31.15 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.1% 1.5% 1.3% 1.2% 1.1% 1.1% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 555003
Top 10 bandwidth usage (bytes/total in %):
8.6% 6.7% 6.7% 6.6% 5.9% 2.7% 2.7% 2.7% 2.3% 2.2%
# of IPv6 addresses: 1009
Top 10 bandwidth usage (bytes/total in %):
10.0% 8.5% 8.1% 6.5% 6.5% 5.8% 5.1% 4.3% 3.9% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200911241400.pktlen.png)
detailed numbers
[ 32- 63]: 6725396
[ 64- 127]: 7568842
[ 128- 255]: 928267
[ 256- 511]: 808110
[ 512- 1023]: 1157885
[ 1024- 2047]: 10982959
Protocol Breakdown
![[protocol breakdown chart]](200911241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28171459 (100.00%) 18161690594 (100.00%) 644.68
ip 28145863 ( 99.91%) 18156631400 ( 99.97%) 645.09
tcp 22414778 ( 79.57%) 15416439663 ( 84.88%) 687.78
http(s) 8308748 ( 29.49%) 10615057824 ( 58.45%) 1277.58
http(c) 6735797 ( 23.91%) 1253869618 ( 6.90%) 186.15
squid 990823 ( 3.52%) 150810058 ( 0.83%) 152.21
smtp 211414 ( 0.75%) 84527005 ( 0.47%) 399.82
nntp 10678 ( 0.04%) 649036 ( 0.00%) 60.78
ftp 94618 ( 0.34%) 9287879 ( 0.05%) 98.16
pop3 11622 ( 0.04%) 3640243 ( 0.02%) 313.22
imap 8328 ( 0.03%) 8691904 ( 0.05%) 1043.70
telnet 8372 ( 0.03%) 616428 ( 0.00%) 73.63
ssh 32743 ( 0.12%) 5286841 ( 0.03%) 161.46
dns 6256 ( 0.02%) 7112533 ( 0.04%) 1136.91
bgp 134 ( 0.00%) 48222 ( 0.00%) 359.87
napster 156 ( 0.00%) 10601 ( 0.00%) 67.96
realaud 26 ( 0.00%) 3149 ( 0.00%) 121.12
rtsp 44726 ( 0.16%) 3512301 ( 0.02%) 78.53
icecast 8935 ( 0.03%) 612576 ( 0.00%) 68.56
hotline 22 ( 0.00%) 1950 ( 0.00%) 88.64
other 5941378 ( 21.09%) 3272701375 ( 18.02%) 550.83
udp 4707042 ( 16.71%) 2615429359 ( 14.40%) 555.64
dns 1181435 ( 4.19%) 222810804 ( 1.23%) 188.59
realaud 1249 ( 0.00%) 80242 ( 0.00%) 64.24
halflif 307 ( 0.00%) 20084 ( 0.00%) 65.42
starcra 32 ( 0.00%) 4533 ( 0.00%) 141.66
everque 801 ( 0.00%) 96623 ( 0.00%) 120.63
unreal 25 ( 0.00%) 3104 ( 0.00%) 124.16
quake 26 ( 0.00%) 2478 ( 0.00%) 95.31
cuseeme 2 ( 0.00%) 187 ( 0.00%) 93.50
other 3522929 ( 12.51%) 2392212955 ( 13.17%) 679.04
icmp 878650 ( 3.12%) 102128472 ( 0.56%) 116.23
ipip 350 ( 0.00%) 43444 ( 0.00%) 124.13
ipsec 30 ( 0.00%) 3780 ( 0.00%) 126.00
ip6 46737 ( 0.17%) 11201941 ( 0.06%) 239.68
other 98276 ( 0.35%) 11384741 ( 0.06%) 115.84
frag 1045 ( 0.00%) 1161499 ( 0.01%) 1111.48
ip6 25596 ( 0.09%) 5059194 ( 0.03%) 197.66
tcp6 7739 ( 0.03%) 1479025 ( 0.01%) 191.11
http(s) 207 ( 0.00%) 162634 ( 0.00%) 785.67
http(c) 5384 ( 0.02%) 495005 ( 0.00%) 91.94
squid 6 ( 0.00%) 444 ( 0.00%) 74.00
smtp 1285 ( 0.00%) 710621 ( 0.00%) 553.01
ssh 9 ( 0.00%) 1126 ( 0.00%) 125.11
dns 8 ( 0.00%) 784 ( 0.00%) 98.00
bgp 102 ( 0.00%) 12681 ( 0.00%) 124.32
icecast 3 ( 0.00%) 222 ( 0.00%) 74.00
other 735 ( 0.00%) 95508 ( 0.00%) 129.94
udp6 12108 ( 0.04%) 2868387 ( 0.02%) 236.90
dns 11869 ( 0.04%) 2822201 ( 0.02%) 237.78
other 239 ( 0.00%) 46186 ( 0.00%) 193.25
icmp6 5710 ( 0.02%) 699779 ( 0.00%) 122.55
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 9 ( 0.00%) 7923 ( 0.00%) 880.33
tcpdump file: 200911241400.dump.gz (693.29 MB)