Traffic Trace Info
DumpFile: 200911281400.dump
FileSize: 1343.00MB
Id: 200911281400
StartTime: Sat Nov 28 14:00:01 2009
EndTime: Sat Nov 28 14:15:01 2009
TotalTime: 899.92 seconds
TotalCapSize: 1047.62MB CapLen: 96 bytes
# of packets: 19355725 (11047.55MB)
AvgRate: 103.00Mbps stddev:11.04M
IP flow (unique src/dst pair) Information
# of flows: 828052 (avg. 23.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 3.2% 2.7% 2.5% 1.8% 1.7% 1.7% 1.6% 1.5% 1.4%
IP address Information
# of IPv4 addresses: 488724
Top 10 bandwidth usage (bytes/total in %):
6.5% 5.9% 5.6% 4.8% 4.8% 4.4% 3.8% 3.5% 3.4% 3.3%
# of IPv6 addresses: 835
Top 10 bandwidth usage (bytes/total in %):
35.9% 11.7% 8.6% 5.9% 5.1% 4.6% 4.5% 3.7% 3.7% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200911281400.pktlen.png)
detailed numbers
[ 32- 63]: 5683344
[ 64- 127]: 4795635
[ 128- 255]: 661561
[ 256- 511]: 564149
[ 512- 1023]: 490859
[ 1024- 2047]: 7160177
Protocol Breakdown
![[protocol breakdown chart]](200911281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19355725 (100.00%) 11584195362 (100.00%) 598.49
ip 19326146 ( 99.85%) 11579181491 ( 99.96%) 599.15
tcp 15637808 ( 80.79%) 10268593269 ( 88.64%) 656.65
http(s) 5710932 ( 29.51%) 7501884020 ( 64.76%) 1313.60
http(c) 3691287 ( 19.07%) 401458599 ( 3.47%) 108.76
squid 1077262 ( 5.57%) 194629886 ( 1.68%) 180.67
smtp 176283 ( 0.91%) 55953100 ( 0.48%) 317.40
ftp 65697 ( 0.34%) 7990765 ( 0.07%) 121.63
pop3 7844 ( 0.04%) 3749783 ( 0.03%) 478.04
imap 3154 ( 0.02%) 825065 ( 0.01%) 261.59
telnet 12890 ( 0.07%) 929875 ( 0.01%) 72.14
ssh 57839 ( 0.30%) 10442601 ( 0.09%) 180.55
dns 56241 ( 0.29%) 42599234 ( 0.37%) 757.44
bgp 142 ( 0.00%) 43739 ( 0.00%) 308.02
napster 13 ( 0.00%) 1267 ( 0.00%) 97.46
realaud 34 ( 0.00%) 4950 ( 0.00%) 145.59
rtsp 278006 ( 1.44%) 52839045 ( 0.46%) 190.06
icecast 2290 ( 0.01%) 1444563 ( 0.01%) 630.81
hotline 2 ( 0.00%) 132 ( 0.00%) 66.00
other 4497890 ( 23.24%) 1993796525 ( 17.21%) 443.27
udp 2926367 ( 15.12%) 1224966743 ( 10.57%) 418.60
dns 878415 ( 4.54%) 133592772 ( 1.15%) 152.08
realaud 7 ( 0.00%) 808 ( 0.00%) 115.43
halflif 86 ( 0.00%) 7129 ( 0.00%) 82.90
starcra 33 ( 0.00%) 5072 ( 0.00%) 153.70
everque 253 ( 0.00%) 38761 ( 0.00%) 153.21
unreal 16 ( 0.00%) 2041 ( 0.00%) 127.56
quake 29 ( 0.00%) 2267 ( 0.00%) 78.17
cuseeme 2 ( 0.00%) 167 ( 0.00%) 83.50
other 2047391 ( 10.58%) 1091197455 ( 9.42%) 532.97
icmp 711243 ( 3.67%) 68878992 ( 0.59%) 96.84
ipip 336 ( 0.00%) 43080 ( 0.00%) 128.21
ipsec 30 ( 0.00%) 3780 ( 0.00%) 126.00
ip6 49074 ( 0.25%) 16508252 ( 0.14%) 336.40
other 1288 ( 0.01%) 187375 ( 0.00%) 145.48
frag 1976 ( 0.01%) 1802307 ( 0.02%) 912.10
ip6 29579 ( 0.15%) 5013871 ( 0.04%) 169.51
tcp6 6556 ( 0.03%) 1170242 ( 0.01%) 178.50
http(s) 127 ( 0.00%) 40828 ( 0.00%) 321.48
http(c) 3766 ( 0.02%) 343989 ( 0.00%) 91.34
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 1169 ( 0.01%) 594144 ( 0.01%) 508.25
ssh 540 ( 0.00%) 74408 ( 0.00%) 137.79
bgp 112 ( 0.00%) 14498 ( 0.00%) 129.45
icecast 1 ( 0.00%) 74 ( 0.00%) 74.00
other 839 ( 0.00%) 102153 ( 0.00%) 121.76
udp6 17755 ( 0.09%) 3250912 ( 0.03%) 183.10
dns 17704 ( 0.09%) 3244570 ( 0.03%) 183.27
other 51 ( 0.00%) 6342 ( 0.00%) 124.35
icmp6 5234 ( 0.03%) 584586 ( 0.01%) 111.69
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4 ( 0.00%) 4051 ( 0.00%) 1012.75
tcpdump file: 200911281400.dump.gz (470.92 MB)