Traffic Trace Info
DumpFile: 201208061400.dump
FileSize: 2471.21MB
Id: 201208061400
StartTime: Mon Aug 6 14:00:00 2012
EndTime: Mon Aug 6 14:15:00 2012
TotalTime: 900.04 seconds
TotalCapSize: 1937.08MB CapLen: 96 bytes
# of packets: 35004249 (27264.50MB)
AvgRate: 254.15Mbps stddev:56.82M
IP flow (unique src/dst pair) Information
# of flows: 644524 (avg. 54.31 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 3.1% 3.1% 2.2% 1.4% 1.2% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 347262
Top 10 bandwidth usage (bytes/total in %):
20.6% 8.2% 7.3% 4.6% 4.5% 4.4% 4.1% 3.2% 3.2% 3.1%
# of IPv6 addresses: 7113
Top 10 bandwidth usage (bytes/total in %):
16.8% 15.0% 10.1% 5.9% 5.7% 5.7% 5.7% 5.0% 3.8% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201208061400.pktlen.png)
detailed numbers
[ 32- 63]: 5527705
[ 64- 127]: 6852844
[ 128- 255]: 1163461
[ 256- 511]: 732972
[ 512- 1023]: 3636210
[ 1024- 2047]: 17091057
Protocol Breakdown
![[protocol breakdown chart]](201208061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35004249 (100.00%) 28588897963 (100.00%) 816.73
ip 34220778 ( 97.76%) 27969874689 ( 97.83%) 817.34
tcp 26111825 ( 74.60%) 23605964365 ( 82.57%) 904.03
http(s) 12137525 ( 34.67%) 15676925879 ( 54.84%) 1291.61
http(c) 7519723 ( 21.48%) 2498537282 ( 8.74%) 332.26
squid 42153 ( 0.12%) 21615207 ( 0.08%) 512.78
smtp 71699 ( 0.20%) 33294504 ( 0.12%) 464.36
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 20992 ( 0.06%) 8329071 ( 0.03%) 396.77
pop3 10867 ( 0.03%) 5237457 ( 0.02%) 481.96
imap 3030 ( 0.01%) 375686 ( 0.00%) 123.99
telnet 3094 ( 0.01%) 235122 ( 0.00%) 75.99
ssh 441511 ( 1.26%) 410529081 ( 1.44%) 929.83
dns 2425 ( 0.01%) 285170 ( 0.00%) 117.60
bgp 500 ( 0.00%) 105221 ( 0.00%) 210.44
napster 11 ( 0.00%) 1239 ( 0.00%) 112.64
realaud 50 ( 0.00%) 4570 ( 0.00%) 91.40
rtsp 2335 ( 0.01%) 2208819 ( 0.01%) 945.96
icecast 1103 ( 0.00%) 124862 ( 0.00%) 113.20
hotline 6 ( 0.00%) 372 ( 0.00%) 62.00
other 5854789 ( 16.73%) 4948154075 ( 17.31%) 845.15
udp 6006058 ( 17.16%) 3330343026 ( 11.65%) 554.50
dns 590146 ( 1.69%) 172645871 ( 0.60%) 292.55
rip 3097453 ( 8.85%) 1477749618 ( 5.17%) 477.09
realaud 29 ( 0.00%) 3084 ( 0.00%) 106.34
halflif 64 ( 0.00%) 14698 ( 0.00%) 229.66
starcra 23 ( 0.00%) 1636 ( 0.00%) 71.13
everque 216 ( 0.00%) 35279 ( 0.00%) 163.33
unreal 921 ( 0.00%) 64857 ( 0.00%) 70.42
quake 33 ( 0.00%) 2464 ( 0.00%) 74.67
cuseeme 8 ( 0.00%) 890 ( 0.00%) 111.25
other 2317072 ( 6.62%) 1679778899 ( 5.88%) 724.96
icmp 430109 ( 1.23%) 76429940 ( 0.27%) 177.70
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 7742 ( 0.02%) 1200372 ( 0.00%) 155.05
ip6 1552599 ( 4.44%) 899793010 ( 3.15%) 579.54
pim 80 ( 0.00%) 4800 ( 0.00%) 60.00
other 112180 ( 0.32%) 56119906 ( 0.20%) 500.27
frag 66890 ( 0.19%) 78511848 ( 0.27%) 1173.75
ip6 783471 ( 2.24%) 619023274 ( 2.17%) 790.10
tcp6 603208 ( 1.72%) 497426912 ( 1.74%) 824.64
http(s) 324218 ( 0.93%) 368560540 ( 1.29%) 1136.77
http(c) 150898 ( 0.43%) 14182971 ( 0.05%) 93.99
smtp 218 ( 0.00%) 75514 ( 0.00%) 346.39
ftp 193 ( 0.00%) 20228 ( 0.00%) 104.81
dns 112 ( 0.00%) 41885 ( 0.00%) 373.97
bgp 222 ( 0.00%) 179813 ( 0.00%) 809.97
other 127347 ( 0.36%) 114365961 ( 0.40%) 898.07
udp6 138351 ( 0.40%) 100247582 ( 0.35%) 724.59
dns 60753 ( 0.17%) 19829241 ( 0.07%) 326.39
quake 1 ( 0.00%) 116 ( 0.00%) 116.00
other 77597 ( 0.22%) 80418225 ( 0.28%) 1036.36
icmp6 27097 ( 0.08%) 3876424 ( 0.01%) 143.06
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 14699 ( 0.04%) 17456560 ( 0.06%) 1187.60
tcpdump file: 201208061400.dump.gz (771.35 MB)