Traffic Trace Info
DumpFile: 200911271400.dump
FileSize: 1758.66MB
Id: 200911271400
StartTime: Fri Nov 27 14:00:01 2009
EndTime: Fri Nov 27 14:15:01 2009
TotalTime: 899.55 seconds
TotalCapSize: 1374.22MB CapLen: 96 bytes
# of packets: 25190592 (14136.71MB)
AvgRate: 131.84Mbps stddev:14.03M
IP flow (unique src/dst pair) Information
# of flows: 1003413 (avg. 25.10 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.9% 1.8% 1.3% 1.3% 1.3% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 555798
Top 10 bandwidth usage (bytes/total in %):
10.9% 7.3% 3.3% 3.2% 3.0% 2.9% 2.9% 2.8% 2.7% 2.3%
# of IPv6 addresses: 897
Top 10 bandwidth usage (bytes/total in %):
28.1% 11.7% 11.7% 8.4% 6.6% 5.1% 4.0% 3.2% 3.1% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200911271400.pktlen.png)
detailed numbers
[ 32- 63]: 6877110
[ 64- 127]: 6728947
[ 128- 255]: 1199428
[ 256- 511]: 677583
[ 512- 1023]: 788765
[ 1024- 2047]: 8918759
Protocol Breakdown
![[protocol breakdown chart]](200911271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25190592 (100.00%) 14823419876 (100.00%) 588.45
ip 25158689 ( 99.87%) 14817018985 ( 99.96%) 588.94
tcp 20243180 ( 80.36%) 13280934939 ( 89.59%) 656.07
http(s) 7549683 ( 29.97%) 10148794553 ( 68.46%) 1344.27
http(c) 6798062 ( 26.99%) 1083092810 ( 7.31%) 159.32
squid 730782 ( 2.90%) 111646103 ( 0.75%) 152.78
smtp 174644 ( 0.69%) 62377825 ( 0.42%) 357.17
nntp 33522 ( 0.13%) 2041197 ( 0.01%) 60.89
ftp 25251 ( 0.10%) 8469863 ( 0.06%) 335.43
pop3 16065 ( 0.06%) 6669774 ( 0.04%) 415.17
imap 2667 ( 0.01%) 1107831 ( 0.01%) 415.38
telnet 7024 ( 0.03%) 514118 ( 0.00%) 73.19
ssh 97214 ( 0.39%) 82894315 ( 0.56%) 852.70
dns 11335 ( 0.04%) 7895345 ( 0.05%) 696.55
bgp 145 ( 0.00%) 48784 ( 0.00%) 336.44
napster 48 ( 0.00%) 2968 ( 0.00%) 61.83
realaud 30 ( 0.00%) 8904 ( 0.00%) 296.80
rtsp 172285 ( 0.68%) 21846749 ( 0.15%) 126.81
icecast 16653 ( 0.07%) 15542346 ( 0.10%) 933.31
hotline 12 ( 0.00%) 1295 ( 0.00%) 107.92
other 4607758 ( 18.29%) 1727980159 ( 11.66%) 375.02
udp 4111880 ( 16.32%) 1437422176 ( 9.70%) 349.58
dns 1798140 ( 7.14%) 250331868 ( 1.69%) 139.22
realaud 922 ( 0.00%) 58331 ( 0.00%) 63.27
halflif 130 ( 0.00%) 10762 ( 0.00%) 82.78
starcra 97 ( 0.00%) 11743 ( 0.00%) 121.06
everque 444 ( 0.00%) 156972 ( 0.00%) 353.54
unreal 33 ( 0.00%) 4364 ( 0.00%) 132.24
quake 52 ( 0.00%) 6089 ( 0.00%) 117.10
other 2311676 ( 9.18%) 1186510279 ( 8.00%) 513.27
icmp 762480 ( 3.03%) 92794810 ( 0.63%) 121.70
ipip 309 ( 0.00%) 36602 ( 0.00%) 118.45
ipsec 30 ( 0.00%) 3780 ( 0.00%) 126.00
ip6 38811 ( 0.15%) 5499731 ( 0.04%) 141.71
other 1999 ( 0.01%) 326947 ( 0.00%) 163.56
frag 1453 ( 0.01%) 1618941 ( 0.01%) 1114.21
ip6 31903 ( 0.13%) 6400891 ( 0.04%) 200.64
tcp6 6533 ( 0.03%) 1945559 ( 0.01%) 297.80
http(s) 757 ( 0.00%) 864194 ( 0.01%) 1141.60
http(c) 3621 ( 0.01%) 332015 ( 0.00%) 91.69
smtp 1092 ( 0.00%) 554175 ( 0.00%) 507.49
ssh 344 ( 0.00%) 104556 ( 0.00%) 303.94
bgp 105 ( 0.00%) 13241 ( 0.00%) 126.10
other 614 ( 0.00%) 77378 ( 0.00%) 126.02
udp6 19793 ( 0.08%) 3836143 ( 0.03%) 193.81
dns 19764 ( 0.08%) 3831005 ( 0.03%) 193.84
other 29 ( 0.00%) 5138 ( 0.00%) 177.17
icmp6 5537 ( 0.02%) 606559 ( 0.00%) 109.55
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 10 ( 0.00%) 8550 ( 0.00%) 855.00
tcpdump file: 200911271400.dump.gz (610.22 MB)