Traffic Trace Info
DumpFile: 200911261400.dump
FileSize: 2056.04MB
Id: 200911261400
StartTime: Thu Nov 26 14:00:01 2009
EndTime: Thu Nov 26 14:15:01 2009
TotalTime: 899.98 seconds
TotalCapSize: 1607.46MB CapLen: 96 bytes
# of packets: 29375765 (17529.87MB)
AvgRate: 163.41Mbps stddev:17.35M
IP flow (unique src/dst pair) Information
# of flows: 1047801 (avg. 28.04 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.7% 1.3% 1.2% 1.2% 1.1% 0.8% 0.8% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 616830
Top 10 bandwidth usage (bytes/total in %):
10.0% 8.4% 3.5% 3.0% 3.0% 2.8% 2.4% 2.2% 2.1% 2.0%
# of IPv6 addresses: 957
Top 10 bandwidth usage (bytes/total in %):
26.3% 10.2% 8.9% 4.8% 3.7% 3.2% 3.1% 3.1% 2.8% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200911261400.pktlen.png)
detailed numbers
[ 32- 63]: 7102250
[ 64- 127]: 7913636
[ 128- 255]: 1249624
[ 256- 511]: 851781
[ 512- 1023]: 1124587
[ 1024- 2047]: 11133887
Protocol Breakdown
![[protocol breakdown chart]](200911261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29375765 (100.00%) 18381402165 (100.00%) 625.73
ip 29337389 ( 99.87%) 18374544197 ( 99.96%) 626.32
tcp 23348646 ( 79.48%) 15783144338 ( 85.86%) 675.98
http(s) 8817782 ( 30.02%) 11319133770 ( 61.58%) 1283.67
http(c) 6873478 ( 23.40%) 898217194 ( 4.89%) 130.68
squid 942969 ( 3.21%) 144205467 ( 0.78%) 152.93
smtp 258167 ( 0.88%) 122123983 ( 0.66%) 473.04
nntp 8488 ( 0.03%) 529995 ( 0.00%) 62.44
ftp 33666 ( 0.11%) 3313673 ( 0.02%) 98.43
pop3 16270 ( 0.06%) 5978167 ( 0.03%) 367.43
imap 2725 ( 0.01%) 396315 ( 0.00%) 145.44
telnet 7506 ( 0.03%) 525838 ( 0.00%) 70.06
ssh 46685 ( 0.16%) 14669832 ( 0.08%) 314.23
dns 6275 ( 0.02%) 7359609 ( 0.04%) 1172.85
bgp 160 ( 0.00%) 43424 ( 0.00%) 271.40
napster 80 ( 0.00%) 17057 ( 0.00%) 213.21
realaud 49 ( 0.00%) 7372 ( 0.00%) 150.45
rtsp 396576 ( 1.35%) 35109705 ( 0.19%) 88.53
icecast 54550 ( 0.19%) 32470712 ( 0.18%) 595.25
hotline 6 ( 0.00%) 414 ( 0.00%) 69.00
other 5883206 ( 20.03%) 3199041331 ( 17.40%) 543.76
udp 5234513 ( 17.82%) 2490456329 ( 13.55%) 475.78
dns 1687521 ( 5.74%) 278711875 ( 1.52%) 165.16
rip 1 ( 0.00%) 105 ( 0.00%) 105.00
realaud 159 ( 0.00%) 13764 ( 0.00%) 86.57
halflif 134 ( 0.00%) 12273 ( 0.00%) 91.59
starcra 140 ( 0.00%) 21372 ( 0.00%) 152.66
everque 962 ( 0.00%) 216328 ( 0.00%) 224.87
unreal 45 ( 0.00%) 7214 ( 0.00%) 160.31
quake 41 ( 0.00%) 3928 ( 0.00%) 95.80
cuseeme 9 ( 0.00%) 1178 ( 0.00%) 130.89
other 3545097 ( 12.07%) 2211193205 ( 12.03%) 623.73
icmp 705528 ( 2.40%) 92642706 ( 0.50%) 131.31
ipip 314 ( 0.00%) 38588 ( 0.00%) 122.89
ipsec 30 ( 0.00%) 3780 ( 0.00%) 126.00
ip6 37720 ( 0.13%) 5292692 ( 0.03%) 140.32
other 10638 ( 0.04%) 2965764 ( 0.02%) 278.79
frag 2626 ( 0.01%) 2581741 ( 0.01%) 983.15
ip6 38376 ( 0.13%) 6857968 ( 0.04%) 178.70
tcp6 8704 ( 0.03%) 1678877 ( 0.01%) 192.89
http(s) 300 ( 0.00%) 301602 ( 0.00%) 1005.34
http(c) 3912 ( 0.01%) 359463 ( 0.00%) 91.89
smtp 1283 ( 0.00%) 631451 ( 0.00%) 492.17
ftp 2 ( 0.00%) 160 ( 0.00%) 80.00
ssh 322 ( 0.00%) 86904 ( 0.00%) 269.89
dns 8 ( 0.00%) 3890 ( 0.00%) 486.25
bgp 111 ( 0.00%) 15465 ( 0.00%) 139.32
other 2766 ( 0.01%) 279942 ( 0.00%) 101.21
udp6 21319 ( 0.07%) 4186286 ( 0.02%) 196.36
dns 21219 ( 0.07%) 4161986 ( 0.02%) 196.14
other 100 ( 0.00%) 24300 ( 0.00%) 243.00
icmp6 8297 ( 0.03%) 967424 ( 0.01%) 116.60
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 26 ( 0.00%) 21301 ( 0.00%) 819.27
tcpdump file: 200911261400.dump.gz (735.21 MB)