Traffic Trace Info
DumpFile: 201208041400.dump
FileSize: 6675.59MB
Id: 201208041400
StartTime: Sat Aug 4 14:00:01 2012
EndTime: Sat Aug 4 14:15:01 2012
TotalTime: 899.98 seconds
TotalCapSize: 859.67MB CapLen: 96 bytes
# of packets: 112715901 (28532.92MB)
AvgRate: 265.88Mbps stddev:56.58M
IP flow (unique src/dst pair) Information
# of flows: 61291298 (avg. 1.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 2.2% 1.6% 1.2% 1.1% 1.1% 1.0% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 38161287
Top 10 bandwidth usage (bytes/total in %):
21.2% 16.4% 7.7% 4.7% 4.3% 4.3% 4.2% 3.7% 3.4% 3.4%
# of IPv6 addresses: 6077
Top 10 bandwidth usage (bytes/total in %):
31.1% 26.8% 26.8% 16.7% 6.1% 4.3% 4.1% 3.2% 2.8% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201208041400.pktlen.png)
detailed numbers
[ 32- 63]: 81965434
[ 64- 127]: 7126606
[ 128- 255]: 1223639
[ 256- 511]: 476357
[ 512- 1023]: 9083443
[ 1024- 2047]: 12840422
Protocol Breakdown
![[protocol breakdown chart]](201208041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 112715901 (100.00%) 29918937552 (100.00%) 265.44
ip 112044811 ( 99.40%) 29355134543 ( 98.12%) 261.99
tcp 18455834 ( 16.37%) 18156793668 ( 60.69%) 983.80
http(s) 11543054 ( 10.24%) 15832966403 ( 52.92%) 1371.64
http(c) 4426242 ( 3.93%) 751896569 ( 2.51%) 169.87
squid 33291 ( 0.03%) 22406534 ( 0.07%) 673.05
smtp 50241 ( 0.04%) 10118209 ( 0.03%) 201.39
nntp 23 ( 0.00%) 1382 ( 0.00%) 60.09
ftp 174790 ( 0.16%) 153121232 ( 0.51%) 876.03
pop3 2553 ( 0.00%) 431260 ( 0.00%) 168.92
imap 4694 ( 0.00%) 2171909 ( 0.01%) 462.70
telnet 6788 ( 0.01%) 507901 ( 0.00%) 74.82
ssh 13331 ( 0.01%) 3092558 ( 0.01%) 231.98
dns 1646 ( 0.00%) 250602 ( 0.00%) 152.25
bgp 541 ( 0.00%) 120180 ( 0.00%) 222.14
napster 113 ( 0.00%) 11102 ( 0.00%) 98.25
realaud 63 ( 0.00%) 6663 ( 0.00%) 105.76
rtsp 26 ( 0.00%) 1560 ( 0.00%) 60.00
icecast 16033 ( 0.01%) 7507688 ( 0.03%) 468.26
hotline 17 ( 0.00%) 2126 ( 0.00%) 125.06
other 2182384 ( 1.94%) 1372179550 ( 4.59%) 628.75
udp 11741781 ( 10.42%) 5454994981 ( 18.23%) 464.58
dns 357244 ( 0.32%) 78476962 ( 0.26%) 219.67
rip 9863615 ( 8.75%) 4842861916 ( 16.19%) 490.98
realaud 36 ( 0.00%) 2450 ( 0.00%) 68.06
halflif 88 ( 0.00%) 8580 ( 0.00%) 97.50
starcra 61 ( 0.00%) 4509 ( 0.00%) 73.92
everque 190 ( 0.00%) 28249 ( 0.00%) 148.68
unreal 1016 ( 0.00%) 71511 ( 0.00%) 70.38
quake 40 ( 0.00%) 3309 ( 0.00%) 82.72
cuseeme 17 ( 0.00%) 1143 ( 0.00%) 67.24
other 1519283 ( 1.35%) 533482403 ( 1.78%) 351.14
icmp 80457317 ( 71.38%) 4897416824 ( 16.37%) 60.87
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 283 ( 0.00%) 88770 ( 0.00%) 313.67
ip6 1241503 ( 1.10%) 768949614 ( 2.57%) 619.37
pim 241 ( 0.00%) 14460 ( 0.00%) 60.00
other 147668 ( 0.13%) 76857066 ( 0.26%) 520.47
frag 35862 ( 0.03%) 43556421 ( 0.15%) 1214.56
ip6 671090 ( 0.60%) 563803009 ( 1.88%) 840.13
tcp6 589660 ( 0.52%) 529615850 ( 1.77%) 898.17
http(s) 232499 ( 0.21%) 252110857 ( 0.84%) 1084.35
http(c) 86333 ( 0.08%) 7930099 ( 0.03%) 91.85
smtp 276 ( 0.00%) 84518 ( 0.00%) 306.22
ftp 237 ( 0.00%) 25481 ( 0.00%) 107.51
imap 893 ( 0.00%) 416343 ( 0.00%) 466.23
dns 50 ( 0.00%) 18350 ( 0.00%) 367.00
bgp 269 ( 0.00%) 211282 ( 0.00%) 785.43
other 269103 ( 0.24%) 268818920 ( 0.90%) 998.94
udp6 46172 ( 0.04%) 14883271 ( 0.05%) 322.34
dns 43113 ( 0.04%) 13880569 ( 0.05%) 321.96
other 3059 ( 0.00%) 1002702 ( 0.00%) 327.79
icmp6 22262 ( 0.02%) 3244500 ( 0.01%) 145.74
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 12883 ( 0.01%) 16044014 ( 0.05%) 1245.36
tcpdump file: 201208041400.dump.gz (2257.20 MB)