Traffic Trace Info
DumpFile: 201208031400.dump
FileSize: 2498.26MB
Id: 201208031400
StartTime: Fri Aug 3 14:00:00 2012
EndTime: Fri Aug 3 14:15:00 2012
TotalTime: 899.72 seconds
TotalCapSize: 1944.59MB CapLen: 96 bytes
# of packets: 36284565 (26116.41MB)
AvgRate: 243.53Mbps stddev:53.51M
IP flow (unique src/dst pair) Information
# of flows: 1961733 (avg. 18.50 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 2.6% 1.6% 1.5% 1.5% 1.2% 1.1% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 1463177
Top 10 bandwidth usage (bytes/total in %):
20.2% 7.9% 7.5% 6.7% 4.4% 4.1% 4.0% 4.0% 3.6% 3.4%
# of IPv6 addresses: 8062
Top 10 bandwidth usage (bytes/total in %):
48.1% 39.4% 17.9% 11.8% 4.5% 2.6% 2.3% 2.1% 1.9% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201208031400.pktlen.png)
detailed numbers
[ 32- 63]: 5542197
[ 64- 127]: 6565031
[ 128- 255]: 1636318
[ 256- 511]: 758394
[ 512- 1023]: 6766597
[ 1024- 2047]: 15016028
Protocol Breakdown
![[protocol breakdown chart]](201208031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36284565 (100.00%) 27385039523 (100.00%) 754.73
ip 35251278 ( 97.15%) 26347551655 ( 96.21%) 747.42
tcp 21995439 ( 60.62%) 20378588717 ( 74.42%) 926.49
http(s) 12063058 ( 33.25%) 16072777782 ( 58.69%) 1332.40
http(c) 5146989 ( 14.19%) 614009119 ( 2.24%) 119.29
squid 53342 ( 0.15%) 24936401 ( 0.09%) 467.48
smtp 82743 ( 0.23%) 25152548 ( 0.09%) 303.98
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 13622 ( 0.04%) 1650193 ( 0.01%) 121.14
pop3 7314 ( 0.02%) 1625591 ( 0.01%) 222.26
imap 2963 ( 0.01%) 567685 ( 0.00%) 191.59
telnet 6668 ( 0.02%) 497705 ( 0.00%) 74.64
ssh 265155 ( 0.73%) 41067887 ( 0.15%) 154.88
dns 2941 ( 0.01%) 339325 ( 0.00%) 115.38
bgp 515 ( 0.00%) 122230 ( 0.00%) 237.34
napster 104 ( 0.00%) 7065 ( 0.00%) 67.93
realaud 9205 ( 0.03%) 678702 ( 0.00%) 73.73
rtsp 49 ( 0.00%) 2940 ( 0.00%) 60.00
icecast 56958 ( 0.16%) 18311263 ( 0.07%) 321.49
hotline 6 ( 0.00%) 1185 ( 0.00%) 197.50
other 4283801 ( 11.81%) 3576840730 ( 13.06%) 834.97
udp 9934935 ( 27.38%) 4721141591 ( 17.24%) 475.21
dns 614976 ( 1.69%) 192951592 ( 0.70%) 313.75
rip 6909570 ( 19.04%) 3308878764 ( 12.08%) 478.88
realaud 45 ( 0.00%) 3754 ( 0.00%) 83.42
halflif 100 ( 0.00%) 9793 ( 0.00%) 97.93
starcra 56 ( 0.00%) 8494 ( 0.00%) 151.68
everque 220 ( 0.00%) 44777 ( 0.00%) 203.53
unreal 288 ( 0.00%) 20462 ( 0.00%) 71.05
quake 71 ( 0.00%) 9114 ( 0.00%) 128.37
cuseeme 13 ( 0.00%) 969 ( 0.00%) 74.54
other 2409462 ( 6.64%) 1219162742 ( 4.45%) 505.99
icmp 1589969 ( 4.38%) 153643444 ( 0.56%) 96.63
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2423 ( 0.01%) 1863090 ( 0.01%) 768.92
ip6 1603551 ( 4.42%) 1030636098 ( 3.76%) 642.72
pim 82 ( 0.00%) 4920 ( 0.00%) 60.00
other 124695 ( 0.34%) 61654635 ( 0.23%) 494.44
frag 113825 ( 0.31%) 143222086 ( 0.52%) 1258.27
ip6 1033287 ( 2.85%) 1037487868 ( 3.79%) 1004.07
tcp6 890020 ( 2.45%) 967713101 ( 3.53%) 1087.29
http(s) 438916 ( 1.21%) 505961232 ( 1.85%) 1152.75
http(c) 139745 ( 0.39%) 13179596 ( 0.05%) 94.31
squid 1 ( 0.00%) 94 ( 0.00%) 94.00
smtp 19256 ( 0.05%) 23928831 ( 0.09%) 1242.67
ftp 667 ( 0.00%) 68434 ( 0.00%) 102.60
dns 102 ( 0.00%) 43626 ( 0.00%) 427.71
bgp 96 ( 0.00%) 31283 ( 0.00%) 325.86
other 291237 ( 0.80%) 424500005 ( 1.55%) 1457.58
udp6 88537 ( 0.24%) 42445978 ( 0.15%) 479.42
dns 62853 ( 0.17%) 20905412 ( 0.08%) 332.61
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
other 25682 ( 0.07%) 21540351 ( 0.08%) 838.73
icmp6 27011 ( 0.07%) 3550938 ( 0.01%) 131.46
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 27607 ( 0.08%) 23762595 ( 0.09%) 860.75
tcpdump file: 201208031400.dump.gz (772.68 MB)