Traffic Trace Info
DumpFile: 201208011400.dump
FileSize: 2995.20MB
Id: 201208011400
StartTime: Wed Aug 1 14:00:01 2012
EndTime: Wed Aug 1 14:15:01 2012
TotalTime: 899.66 seconds
TotalCapSize: -1796.44MB CapLen: 96 bytes
# of packets: 45588510 (28260.61MB)
AvgRate: 263.47Mbps stddev:36.55M
IP flow (unique src/dst pair) Information
# of flows: 2021348 (avg. 22.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.8% 2.1% 2.1% 1.8% 1.7% 1.5% 1.4% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 1534867
Top 10 bandwidth usage (bytes/total in %):
12.6% 10.7% 6.2% 5.6% 5.6% 5.4% 4.2% 3.2% 3.2% 2.9%
# of IPv6 addresses: 7745
Top 10 bandwidth usage (bytes/total in %):
20.0% 15.5% 13.3% 13.3% 7.3% 5.5% 3.0% 3.0% 2.7% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201208011400.pktlen.png)
detailed numbers
[ 32- 63]: 6870583
[ 64- 127]: 9013715
[ 128- 255]: 1755330
[ 256- 511]: 769295
[ 512- 1023]: 13149183
[ 1024- 2047]: 14030404
Protocol Breakdown
![[protocol breakdown chart]](201208011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 45588510 (100.00%) 29633400141 (100.00%) 650.02
ip 44949298 ( 98.60%) 29101811149 ( 98.21%) 647.44
tcp 23769218 ( 52.14%) 19410228835 ( 65.50%) 816.61
http(s) 10178923 ( 22.33%) 13210536216 ( 44.58%) 1297.83
http(c) 7154000 ( 15.69%) 1194559317 ( 4.03%) 166.98
squid 66605 ( 0.15%) 52706115 ( 0.18%) 791.32
smtp 62934 ( 0.14%) 18319098 ( 0.06%) 291.08
ftp 19264 ( 0.04%) 1932079 ( 0.01%) 100.29
pop3 5069 ( 0.01%) 1427596 ( 0.00%) 281.63
imap 3926 ( 0.01%) 925090 ( 0.00%) 235.63
telnet 7746 ( 0.02%) 579310 ( 0.00%) 74.79
ssh 167592 ( 0.37%) 30164774 ( 0.10%) 179.99
dns 2566 ( 0.01%) 342506 ( 0.00%) 133.48
bgp 524 ( 0.00%) 115042 ( 0.00%) 219.55
napster 6 ( 0.00%) 834 ( 0.00%) 139.00
realaud 12 ( 0.00%) 1756 ( 0.00%) 146.33
rtsp 17974 ( 0.04%) 20869238 ( 0.07%) 1161.08
icecast 23445 ( 0.05%) 18595041 ( 0.06%) 793.13
hotline 2 ( 0.00%) 148 ( 0.00%) 74.00
other 6058630 ( 13.29%) 4859154675 ( 16.40%) 802.02
udp 18351863 ( 40.26%) 8898388813 ( 30.03%) 484.88
dns 899289 ( 1.97%) 211445414 ( 0.71%) 235.13
rip 14245726 ( 31.25%) 7010822250 ( 23.66%) 492.14
realaud 63 ( 0.00%) 8070 ( 0.00%) 128.10
halflif 157 ( 0.00%) 21056 ( 0.00%) 134.11
starcra 77 ( 0.00%) 7125 ( 0.00%) 92.53
everque 170 ( 0.00%) 24888 ( 0.00%) 146.40
unreal 579 ( 0.00%) 165988 ( 0.00%) 286.68
quake 69 ( 0.00%) 5217 ( 0.00%) 75.61
cuseeme 19 ( 0.00%) 1496 ( 0.00%) 78.74
other 3205490 ( 7.03%) 1675810922 ( 5.66%) 522.79
icmp 1622983 ( 3.56%) 181294259 ( 0.61%) 111.70
ipip 184 ( 0.00%) 19172 ( 0.00%) 104.20
ipsec 26286 ( 0.06%) 3640100 ( 0.01%) 138.48
ip6 1133252 ( 2.49%) 591646820 ( 2.00%) 522.08
pim 92 ( 0.00%) 5520 ( 0.00%) 60.00
other 45420 ( 0.10%) 16587630 ( 0.06%) 365.21
frag 143981 ( 0.32%) 189103790 ( 0.64%) 1313.39
ip6 639212 ( 1.40%) 531588992 ( 1.79%) 831.63
tcp6 489951 ( 1.07%) 434318905 ( 1.47%) 886.45
http(s) 362055 ( 0.79%) 401295529 ( 1.35%) 1108.38
http(c) 95118 ( 0.21%) 8776642 ( 0.03%) 92.27
smtp 571 ( 0.00%) 154197 ( 0.00%) 270.05
ftp 1701 ( 0.00%) 165538 ( 0.00%) 97.32
dns 107 ( 0.00%) 44001 ( 0.00%) 411.22
bgp 91 ( 0.00%) 37324 ( 0.00%) 410.15
other 30308 ( 0.07%) 23845674 ( 0.08%) 786.78
udp6 122846 ( 0.27%) 92761598 ( 0.31%) 755.10
dns 64314 ( 0.14%) 21093692 ( 0.07%) 327.98
halflif 1 ( 0.00%) 94 ( 0.00%) 94.00
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 58530 ( 0.13%) 71667708 ( 0.24%) 1224.46
icmp6 25488 ( 0.06%) 3720891 ( 0.01%) 145.99
ip6 86 ( 0.00%) 11698 ( 0.00%) 136.02
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 811 ( 0.00%) 771820 ( 0.00%) 951.69
tcpdump file: 201208011400.dump.gz (926.77 MB)