Traffic Trace Info
DumpFile: 200911301400.dump
FileSize: 1802.63MB
Id: 200911301400
StartTime: Mon Nov 30 14:00:01 2009
EndTime: Mon Nov 30 14:15:01 2009
TotalTime: 899.73 seconds
TotalCapSize: 1416.08MB CapLen: 96 bytes
# of packets: 25332423 (15803.91MB)
AvgRate: 147.35Mbps stddev:16.13M
IP flow (unique src/dst pair) Information
# of flows: 906381 (avg. 27.95 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 3.7% 2.3% 1.5% 1.5% 1.3% 1.2% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 526247
Top 10 bandwidth usage (bytes/total in %):
10.8% 10.4% 8.0% 4.5% 3.7% 3.6% 2.4% 2.4% 2.0% 2.0%
# of IPv6 addresses: 944
Top 10 bandwidth usage (bytes/total in %):
23.9% 9.0% 8.5% 7.9% 5.5% 4.4% 4.4% 4.3% 4.1% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200911301400.pktlen.png)
detailed numbers
[ 32- 63]: 6698766
[ 64- 127]: 6323584
[ 128- 255]: 873879
[ 256- 511]: 664850
[ 512- 1023]: 547814
[ 1024- 2047]: 10223530
Protocol Breakdown
![[protocol breakdown chart]](200911301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25332423 (100.00%) 16571597959 (100.00%) 654.17
ip 25293958 ( 99.85%) 16564068856 ( 99.95%) 654.86
tcp 21959571 ( 86.69%) 15615574790 ( 94.23%) 711.11
http(s) 8125044 ( 32.07%) 10089812976 ( 60.89%) 1241.82
http(c) 7228863 ( 28.54%) 1848058342 ( 11.15%) 255.65
squid 630742 ( 2.49%) 138016830 ( 0.83%) 218.82
smtp 203007 ( 0.80%) 67126114 ( 0.41%) 330.66
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 49690 ( 0.20%) 18912187 ( 0.11%) 380.60
pop3 19435 ( 0.08%) 3673205 ( 0.02%) 189.00
imap 5230 ( 0.02%) 1945804 ( 0.01%) 372.05
telnet 10346 ( 0.04%) 737442 ( 0.00%) 71.28
ssh 63408 ( 0.25%) 15427133 ( 0.09%) 243.30
dns 6086 ( 0.02%) 7301543 ( 0.04%) 1199.73
bgp 166 ( 0.00%) 70365 ( 0.00%) 423.89
napster 53 ( 0.00%) 3714 ( 0.00%) 70.08
realaud 11 ( 0.00%) 1857 ( 0.00%) 168.82
rtsp 250765 ( 0.99%) 18185209 ( 0.11%) 72.52
icecast 10360 ( 0.04%) 695874 ( 0.00%) 67.17
hotline 10 ( 0.00%) 2047 ( 0.00%) 204.70
other 5356351 ( 21.14%) 3405603906 ( 20.55%) 635.81
udp 2642010 ( 10.43%) 884485204 ( 5.34%) 334.78
dns 1275012 ( 5.03%) 180143896 ( 1.09%) 141.29
realaud 10 ( 0.00%) 953 ( 0.00%) 95.30
halflif 118 ( 0.00%) 8851 ( 0.00%) 75.01
starcra 418 ( 0.00%) 39270 ( 0.00%) 93.95
everque 616 ( 0.00%) 164251 ( 0.00%) 266.64
unreal 38 ( 0.00%) 5070 ( 0.00%) 133.42
quake 35 ( 0.00%) 3832 ( 0.00%) 109.49
cuseeme 4 ( 0.00%) 326 ( 0.00%) 81.50
other 1365343 ( 5.39%) 703751493 ( 4.25%) 515.44
icmp 632446 ( 2.50%) 48881311 ( 0.29%) 77.29
ipip 348 ( 0.00%) 41796 ( 0.00%) 120.10
ipsec 30 ( 0.00%) 3780 ( 0.00%) 126.00
ip6 43053 ( 0.17%) 8764531 ( 0.05%) 203.58
other 16500 ( 0.07%) 6317444 ( 0.04%) 382.88
frag 1577 ( 0.01%) 1749646 ( 0.01%) 1109.48
ip6 38465 ( 0.15%) 7529103 ( 0.05%) 195.74
tcp6 12222 ( 0.05%) 2701672 ( 0.02%) 221.05
http(s) 772 ( 0.00%) 927050 ( 0.01%) 1200.84
http(c) 3767 ( 0.01%) 342460 ( 0.00%) 90.91
smtp 1391 ( 0.01%) 713161 ( 0.00%) 512.70
ftp 17 ( 0.00%) 1495 ( 0.00%) 87.94
pop3 2032 ( 0.01%) 151124 ( 0.00%) 74.37
ssh 1859 ( 0.01%) 334770 ( 0.00%) 180.08
dns 27 ( 0.00%) 7404 ( 0.00%) 274.22
bgp 110 ( 0.00%) 14342 ( 0.00%) 130.38
other 2247 ( 0.01%) 209866 ( 0.00%) 93.40
udp6 21184 ( 0.08%) 4255145 ( 0.03%) 200.87
dns 21119 ( 0.08%) 4246847 ( 0.03%) 201.09
other 65 ( 0.00%) 8298 ( 0.00%) 127.66
icmp6 5013 ( 0.02%) 555329 ( 0.00%) 110.78
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 16 ( 0.00%) 12877 ( 0.00%) 804.81
tcpdump file: 200911301400.dump.gz (627.53 MB)