Traffic Trace Info
DumpFile: 200911291400.dump
FileSize: 786.52MB
Id: 200911291400
StartTime: Sun Nov 29 14:00:00 2009
EndTime: Sun Nov 29 14:15:00 2009
TotalTime: 900.13 seconds
TotalCapSize: 617.27MB CapLen: 96 bytes
# of packets: 11091362 (4987.37MB)
AvgRate: 46.48Mbps stddev:7.73M
IP flow (unique src/dst pair) Information
# of flows: 705586 (avg. 15.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 5.8% 5.0% 2.3% 2.2% 2.1% 1.5% 1.5% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 402095
Top 10 bandwidth usage (bytes/total in %):
9.4% 9.3% 7.5% 7.1% 6.3% 6.0% 5.2% 5.0% 4.7% 4.1%
# of IPv6 addresses: 794
Top 10 bandwidth usage (bytes/total in %):
36.0% 8.5% 7.0% 7.0% 5.1% 5.0% 4.9% 3.8% 3.8% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200911291400.pktlen.png)
detailed numbers
[ 32- 63]: 3360220
[ 64- 127]: 3480347
[ 128- 255]: 640730
[ 256- 511]: 392856
[ 512- 1023]: 271533
[ 1024- 2047]: 2945676
Protocol Breakdown
![[protocol breakdown chart]](200911291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 11091362 (100.00%) 5229633364 (100.00%) 471.51
ip 11059548 ( 99.71%) 5224636206 ( 99.90%) 472.41
tcp 8915095 ( 80.38%) 4911654849 ( 93.92%) 550.94
http(s) 2363347 ( 21.31%) 2993249539 ( 57.24%) 1266.53
http(c) 2103021 ( 18.96%) 475359080 ( 9.09%) 226.04
squid 647519 ( 5.84%) 87445877 ( 1.67%) 135.05
smtp 123157 ( 1.11%) 23769062 ( 0.45%) 193.00
ftp 16865 ( 0.15%) 1357896 ( 0.03%) 80.52
pop3 16374 ( 0.15%) 15465747 ( 0.30%) 944.53
imap 904 ( 0.01%) 291922 ( 0.01%) 322.92
telnet 7116 ( 0.06%) 502964 ( 0.01%) 70.68
ssh 488401 ( 4.40%) 89272798 ( 1.71%) 182.79
dns 5726 ( 0.05%) 7340623 ( 0.14%) 1281.98
bgp 130 ( 0.00%) 44350 ( 0.00%) 341.15
napster 13 ( 0.00%) 1761 ( 0.00%) 135.46
realaud 17 ( 0.00%) 1781 ( 0.00%) 104.76
rtsp 94287 ( 0.85%) 116849960 ( 2.23%) 1239.30
icecast 296 ( 0.00%) 20110 ( 0.00%) 67.94
hotline 2 ( 0.00%) 124 ( 0.00%) 62.00
other 3043702 ( 27.44%) 1100428175 ( 21.04%) 361.54
udp 1554223 ( 14.01%) 259322039 ( 4.96%) 166.85
dns 1177673 ( 10.62%) 155067731 ( 2.97%) 131.67
realaud 25 ( 0.00%) 2724 ( 0.00%) 108.96
halflif 80 ( 0.00%) 5533 ( 0.00%) 69.16
starcra 28 ( 0.00%) 2460 ( 0.00%) 87.86
everque 214 ( 0.00%) 35374 ( 0.00%) 165.30
unreal 9 ( 0.00%) 1006 ( 0.00%) 111.78
quake 20 ( 0.00%) 1562 ( 0.00%) 78.10
cuseeme 7 ( 0.00%) 511 ( 0.00%) 73.00
other 375766 ( 3.39%) 103883116 ( 1.99%) 276.46
icmp 532418 ( 4.80%) 39836811 ( 0.76%) 74.82
ipip 317 ( 0.00%) 38902 ( 0.00%) 122.72
ipsec 7388 ( 0.07%) 4995288 ( 0.10%) 676.14
ip6 47557 ( 0.43%) 8231367 ( 0.16%) 173.08
other 2550 ( 0.02%) 556950 ( 0.01%) 218.41
frag 5515 ( 0.05%) 1631853 ( 0.03%) 295.89
ip6 31814 ( 0.29%) 4997158 ( 0.10%) 157.07
tcp6 9678 ( 0.09%) 1255976 ( 0.02%) 129.78
http(s) 71 ( 0.00%) 37878 ( 0.00%) 533.49
http(c) 8303 ( 0.07%) 676776 ( 0.01%) 81.51
squid 14 ( 0.00%) 1318 ( 0.00%) 94.14
smtp 694 ( 0.01%) 458034 ( 0.01%) 659.99
ssh 43 ( 0.00%) 4370 ( 0.00%) 101.63
dns 5 ( 0.00%) 426 ( 0.00%) 85.20
bgp 111 ( 0.00%) 14818 ( 0.00%) 133.50
other 437 ( 0.00%) 62356 ( 0.00%) 142.69
udp6 17082 ( 0.15%) 3157952 ( 0.06%) 184.87
dns 17026 ( 0.15%) 3151932 ( 0.06%) 185.12
other 56 ( 0.00%) 6020 ( 0.00%) 107.50
icmp6 5001 ( 0.05%) 557707 ( 0.01%) 111.52
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 22 ( 0.00%) 21307 ( 0.00%) 968.50
tcpdump file: 200911291400.dump.gz (286.80 MB)