Traffic Trace Info
DumpFile: 200911251400.dump
FileSize: 2171.61MB
Id: 200911251400
StartTime: Wed Nov 25 14:00:00 2009
EndTime: Wed Nov 25 14:15:00 2009
TotalTime: 900.10 seconds
TotalCapSize: 1702.05MB CapLen: 96 bytes
# of packets: 30747787 (19915.04MB)
AvgRate: 185.62Mbps stddev:18.09M
IP flow (unique src/dst pair) Information
# of flows: 978123 (avg. 31.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.8% 1.6% 1.4% 1.4% 1.2% 1.1% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 572710
Top 10 bandwidth usage (bytes/total in %):
8.0% 7.7% 6.0% 5.6% 3.3% 3.1% 2.7% 2.5% 2.5% 2.3%
# of IPv6 addresses: 992
Top 10 bandwidth usage (bytes/total in %):
38.6% 38.4% 16.8% 16.8% 7.1% 3.8% 3.7% 2.8% 2.5% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200911251400.pktlen.png)
detailed numbers
[ 32- 63]: 6561985
[ 64- 127]: 8044108
[ 128- 255]: 1346938
[ 256- 511]: 1035882
[ 512- 1023]: 753350
[ 1024- 2047]: 13005524
Protocol Breakdown
![[protocol breakdown chart]](200911251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30747787 (100.00%) 20882437413 (100.00%) 679.15
ip 30658812 ( 99.71%) 20868637972 ( 99.93%) 680.67
tcp 24578203 ( 79.93%) 18163394823 ( 86.98%) 739.00
http(s) 9873331 ( 32.11%) 12933845218 ( 61.94%) 1309.98
http(c) 6915659 ( 22.49%) 1196065780 ( 5.73%) 172.95
squid 1117784 ( 3.64%) 293359378 ( 1.40%) 262.45
smtp 286019 ( 0.93%) 158107136 ( 0.76%) 552.79
nntp 47148 ( 0.15%) 2863524 ( 0.01%) 60.73
ftp 53071 ( 0.17%) 20579377 ( 0.10%) 387.77
pop3 17150 ( 0.06%) 4893278 ( 0.02%) 285.32
imap 4259 ( 0.01%) 2457641 ( 0.01%) 577.05
telnet 6946 ( 0.02%) 489340 ( 0.00%) 70.45
ssh 26420 ( 0.09%) 4766850 ( 0.02%) 180.43
dns 10432 ( 0.03%) 7248200 ( 0.03%) 694.80
bgp 149 ( 0.00%) 54824 ( 0.00%) 367.95
napster 470 ( 0.00%) 363957 ( 0.00%) 774.38
realaud 10 ( 0.00%) 649 ( 0.00%) 64.90
rtsp 159937 ( 0.52%) 31262157 ( 0.15%) 195.47
icecast 14564 ( 0.05%) 953088 ( 0.00%) 65.44
hotline 84 ( 0.00%) 7163 ( 0.00%) 85.27
other 6044768 ( 19.66%) 3506077143 ( 16.79%) 580.02
udp 5063715 ( 16.47%) 2439154731 ( 11.68%) 481.69
dns 1134102 ( 3.69%) 211717489 ( 1.01%) 186.68
realaud 1004 ( 0.00%) 65767 ( 0.00%) 65.50
halflif 116 ( 0.00%) 9595 ( 0.00%) 82.72
starcra 107 ( 0.00%) 15407 ( 0.00%) 143.99
everque 2042 ( 0.01%) 352019 ( 0.00%) 172.39
unreal 18 ( 0.00%) 2921 ( 0.00%) 162.28
quake 172 ( 0.00%) 36202 ( 0.00%) 210.48
cuseeme 159 ( 0.00%) 11435 ( 0.00%) 71.92
other 3923535 ( 12.76%) 2225326102 ( 10.66%) 567.17
icmp 818794 ( 2.66%) 62850367 ( 0.30%) 76.76
ipip 326 ( 0.00%) 40576 ( 0.00%) 124.47
ipsec 13463 ( 0.04%) 1553986 ( 0.01%) 115.43
ip6 173872 ( 0.57%) 199725750 ( 0.96%) 1148.69
other 10439 ( 0.03%) 1917739 ( 0.01%) 183.71
frag 17198 ( 0.06%) 18732529 ( 0.09%) 1089.23
ip6 88975 ( 0.29%) 13799441 ( 0.07%) 155.09
tcp6 69554 ( 0.23%) 10034095 ( 0.05%) 144.26
http(s) 389 ( 0.00%) 511609 ( 0.00%) 1315.19
http(c) 4113 ( 0.01%) 425221 ( 0.00%) 103.38
squid 9 ( 0.00%) 762 ( 0.00%) 84.67
smtp 3635 ( 0.01%) 3307167 ( 0.02%) 909.81
ftp 1 ( 0.00%) 74 ( 0.00%) 74.00
ssh 292 ( 0.00%) 185352 ( 0.00%) 634.77
dns 34 ( 0.00%) 8502 ( 0.00%) 250.06
bgp 104 ( 0.00%) 13714 ( 0.00%) 131.87
other 60977 ( 0.20%) 5581694 ( 0.03%) 91.54
udp6 12409 ( 0.04%) 2908131 ( 0.01%) 234.36
dns 12238 ( 0.04%) 2875869 ( 0.01%) 235.00
other 171 ( 0.00%) 32262 ( 0.00%) 188.67
icmp6 6947 ( 0.02%) 815466 ( 0.00%) 117.38
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 35 ( 0.00%) 37669 ( 0.00%) 1076.26
tcpdump file: 200911251400.dump.gz (760.95 MB)