Traffic Trace Info
DumpFile: 201208051400.dump
FileSize: 2693.76MB
Id: 201208051400
StartTime: Sun Aug 5 14:00:00 2012
EndTime: Sun Aug 5 14:15:01 2012
TotalTime: 900.48 seconds
TotalCapSize: -2021.13MB CapLen: 96 bytes
# of packets: 40558957 (29997.97MB)
AvgRate: 279.46Mbps stddev:64.06M
IP flow (unique src/dst pair) Information
# of flows: 792750 (avg. 51.16 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.0% 1.9% 1.8% 1.6% 1.3% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 471534
Top 10 bandwidth usage (bytes/total in %):
30.8% 9.3% 7.6% 4.0% 4.0% 4.0% 3.3% 3.1% 2.9% 2.7%
# of IPv6 addresses: 5772
Top 10 bandwidth usage (bytes/total in %):
21.1% 20.5% 9.3% 8.8% 8.5% 6.8% 6.0% 5.9% 5.3% 5.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201208051400.pktlen.png)
detailed numbers
[ 32- 63]: 5665831
[ 64- 127]: 5768916
[ 128- 255]: 1526846
[ 256- 511]: 549402
[ 512- 1023]: 10555827
[ 1024- 2047]: 16492135
Protocol Breakdown
![[protocol breakdown chart]](201208051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40558957 (100.00%) 31455152271 (100.00%) 775.54
ip 40095436 ( 98.86%) 31110138685 ( 98.90%) 775.90
tcp 24977187 ( 61.58%) 23528077093 ( 74.80%) 941.98
http(s) 12491282 ( 30.80%) 17436670478 ( 55.43%) 1395.91
http(c) 5267680 ( 12.99%) 511145636 ( 1.62%) 97.03
squid 32332 ( 0.08%) 9210602 ( 0.03%) 284.88
smtp 39213 ( 0.10%) 8313595 ( 0.03%) 212.01
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 20705 ( 0.05%) 2154233 ( 0.01%) 104.04
pop3 2886 ( 0.01%) 439639 ( 0.00%) 152.34
imap 3795 ( 0.01%) 399825 ( 0.00%) 105.36
telnet 6744 ( 0.02%) 500329 ( 0.00%) 74.19
ssh 14922 ( 0.04%) 2895889 ( 0.01%) 194.07
dns 1446 ( 0.00%) 229681 ( 0.00%) 158.84
bgp 537 ( 0.00%) 113889 ( 0.00%) 212.08
napster 86 ( 0.00%) 7191 ( 0.00%) 83.62
realaud 16 ( 0.00%) 2084 ( 0.00%) 130.25
icecast 11838 ( 0.03%) 8164308 ( 0.03%) 689.67
hotline 113 ( 0.00%) 12483 ( 0.00%) 110.47
other 7083586 ( 17.46%) 5547816865 ( 17.64%) 783.19
udp 13343837 ( 32.90%) 6529246582 ( 20.76%) 489.31
dns 732139 ( 1.81%) 448756243 ( 1.43%) 612.94
rip 10977648 ( 27.07%) 5435071972 ( 17.28%) 495.10
realaud 386 ( 0.00%) 31550 ( 0.00%) 81.74
halflif 88 ( 0.00%) 11001 ( 0.00%) 125.01
starcra 79 ( 0.00%) 7181 ( 0.00%) 90.90
everque 155 ( 0.00%) 22296 ( 0.00%) 143.85
unreal 22 ( 0.00%) 2799 ( 0.00%) 127.23
quake 59 ( 0.00%) 4461 ( 0.00%) 75.61
cuseeme 13 ( 0.00%) 858 ( 0.00%) 66.00
other 1633074 ( 4.03%) 645275036 ( 2.05%) 395.13
icmp 496434 ( 1.22%) 105461515 ( 0.34%) 212.44
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 451 ( 0.00%) 156130 ( 0.00%) 346.19
ip6 1211216 ( 2.99%) 929435207 ( 2.95%) 767.36
pim 219 ( 0.00%) 13140 ( 0.00%) 60.00
other 65908 ( 0.16%) 17729858 ( 0.06%) 269.01
frag 387775 ( 0.96%) 414221324 ( 1.32%) 1068.20
ip6 463521 ( 1.14%) 345013586 ( 1.10%) 744.33
tcp6 383039 ( 0.94%) 308969310 ( 0.98%) 806.63
http(s) 248933 ( 0.61%) 286663731 ( 0.91%) 1151.57
http(c) 50819 ( 0.13%) 4561729 ( 0.01%) 89.76
smtp 53 ( 0.00%) 16075 ( 0.00%) 303.30
ftp 190 ( 0.00%) 19942 ( 0.00%) 104.96
dns 52 ( 0.00%) 19581 ( 0.00%) 376.56
bgp 237 ( 0.00%) 183960 ( 0.00%) 776.20
other 82755 ( 0.20%) 17504292 ( 0.06%) 211.52
udp6 42497 ( 0.10%) 13961689 ( 0.04%) 328.53
dns 39157 ( 0.10%) 12599468 ( 0.04%) 321.77
realaud 1 ( 0.00%) 112 ( 0.00%) 112.00
halflif 1 ( 0.00%) 108 ( 0.00%) 108.00
other 3338 ( 0.01%) 1362001 ( 0.00%) 408.03
icmp6 22645 ( 0.06%) 3310553 ( 0.01%) 146.19
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 15226 ( 0.04%) 18756542 ( 0.06%) 1231.88
tcpdump file: 201208051400.dump.gz (812.53 MB)