Traffic Trace Info
DumpFile: 201208021400.dump
FileSize: 2840.47MB
Id: 201208021400
StartTime: Thu Aug 2 14:00:01 2012
EndTime: Thu Aug 2 14:15:00 2012
TotalTime: 899.88 seconds
TotalCapSize: -1902.23MB CapLen: 96 bytes
# of packets: 42381589 (27848.24MB)
AvgRate: 259.52Mbps stddev:50.48M
IP flow (unique src/dst pair) Information
# of flows: 2080885 (avg. 20.37 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 1.8% 1.7% 1.7% 1.5% 1.0% 1.0% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 1511963
Top 10 bandwidth usage (bytes/total in %):
14.5% 8.2% 5.2% 5.2% 4.3% 4.1% 3.6% 3.6% 2.8% 2.7%
# of IPv6 addresses: 8469
Top 10 bandwidth usage (bytes/total in %):
23.9% 20.9% 13.4% 7.9% 7.0% 2.8% 2.4% 2.3% 2.3% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201208021400.pktlen.png)
detailed numbers
[ 32- 63]: 5422315
[ 64- 127]: 9142732
[ 128- 255]: 1662844
[ 256- 511]: 949876
[ 512- 1023]: 10523920
[ 1024- 2047]: 14679902
Protocol Breakdown
![[protocol breakdown chart]](201208021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42381589 (100.00%) 29201000485 (100.00%) 689.00
ip 41358319 ( 97.59%) 28315286062 ( 96.97%) 684.63
tcp 21661418 ( 51.11%) 18822528888 ( 64.46%) 868.94
http(s) 12044637 ( 28.42%) 16120117642 ( 55.20%) 1338.36
http(c) 6446085 ( 15.21%) 841181602 ( 2.88%) 130.49
squid 114485 ( 0.27%) 23035312 ( 0.08%) 201.21
smtp 78032 ( 0.18%) 21403221 ( 0.07%) 274.29
ftp 15622 ( 0.04%) 1823231 ( 0.01%) 116.71
pop3 4299 ( 0.01%) 1479938 ( 0.01%) 344.25
imap 3253 ( 0.01%) 446824 ( 0.00%) 137.36
telnet 46095 ( 0.11%) 3417582 ( 0.01%) 74.14
ssh 21192 ( 0.05%) 5004575 ( 0.02%) 236.15
dns 3418 ( 0.01%) 372313 ( 0.00%) 108.93
bgp 575 ( 0.00%) 156273 ( 0.00%) 271.78
napster 12498 ( 0.03%) 922325 ( 0.00%) 73.80
realaud 167 ( 0.00%) 16938 ( 0.00%) 101.43
rtsp 4180 ( 0.01%) 5916979 ( 0.02%) 1415.55
icecast 1262 ( 0.00%) 472480 ( 0.00%) 374.39
hotline 69 ( 0.00%) 9579 ( 0.00%) 138.83
other 2865549 ( 6.76%) 1796752074 ( 6.15%) 627.02
udp 16328218 ( 38.53%) 8421008985 ( 28.84%) 515.73
dns 958877 ( 2.26%) 459275170 ( 1.57%) 478.97
rip 11117271 ( 26.23%) 5352438016 ( 18.33%) 481.45
realaud 41 ( 0.00%) 2822 ( 0.00%) 68.83
halflif 95 ( 0.00%) 12031 ( 0.00%) 126.64
starcra 70 ( 0.00%) 8907 ( 0.00%) 127.24
everque 73285 ( 0.17%) 66918209 ( 0.23%) 913.12
unreal 69 ( 0.00%) 6108 ( 0.00%) 88.52
quake 124 ( 0.00%) 9228 ( 0.00%) 74.42
cuseeme 18 ( 0.00%) 1191 ( 0.00%) 66.17
other 4173902 ( 9.85%) 2541924783 ( 8.70%) 609.00
icmp 1600562 ( 3.78%) 149124191 ( 0.51%) 93.17
ipip 186 ( 0.00%) 19380 ( 0.00%) 104.19
ipsec 6946 ( 0.02%) 1478236 ( 0.01%) 212.82
ip6 1721766 ( 4.06%) 907698387 ( 3.11%) 527.19
pim 82 ( 0.00%) 4920 ( 0.00%) 60.00
other 39141 ( 0.09%) 13423075 ( 0.05%) 342.94
frag 350925 ( 0.83%) 371118067 ( 1.27%) 1057.54
ip6 1023270 ( 2.41%) 885714423 ( 3.03%) 865.57
tcp6 892094 ( 2.10%) 821146081 ( 2.81%) 920.47
http(s) 508835 ( 1.20%) 587120462 ( 2.01%) 1153.85
http(c) 118908 ( 0.28%) 11204899 ( 0.04%) 94.23
smtp 330 ( 0.00%) 229999 ( 0.00%) 696.97
ftp 1613 ( 0.00%) 160302 ( 0.00%) 99.38
ssh 78 ( 0.00%) 10044 ( 0.00%) 128.77
dns 125 ( 0.00%) 58143 ( 0.00%) 465.14
bgp 88 ( 0.00%) 24922 ( 0.00%) 283.20
other 262117 ( 0.62%) 222337310 ( 0.76%) 848.24
udp6 101020 ( 0.24%) 59757075 ( 0.20%) 591.54
dns 65989 ( 0.16%) 20635119 ( 0.07%) 312.71
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
unreal 1 ( 0.00%) 118 ( 0.00%) 118.00
other 35029 ( 0.08%) 39121731 ( 0.13%) 1116.84
icmp6 28853 ( 0.07%) 3619735 ( 0.01%) 125.45
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1191 ( 0.00%) 1176276 ( 0.00%) 987.64
tcpdump file: 201208021400.dump.gz (891.37 MB)