Traffic Trace Info
DumpFile: 201208071400.dump
FileSize: 2417.05MB
Id: 201208071400
StartTime: Tue Aug 7 14:00:00 2012
EndTime: Tue Aug 7 14:15:00 2012
TotalTime: 900.21 seconds
TotalCapSize: 1881.30MB CapLen: 96 bytes
# of packets: 35110267 (23930.40MB)
AvgRate: 223.02Mbps stddev:49.99M
IP flow (unique src/dst pair) Information
# of flows: 1690895 (avg. 20.76 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.9% 1.7% 1.6% 1.5% 1.4% 1.4% 1.4% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 1348057
Top 10 bandwidth usage (bytes/total in %):
16.4% 5.5% 4.4% 4.2% 4.1% 3.6% 2.6% 2.4% 2.3% 2.3%
# of IPv6 addresses: 7280
Top 10 bandwidth usage (bytes/total in %):
48.4% 41.2% 9.0% 9.0% 4.7% 4.2% 4.0% 2.8% 2.8% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201208071400.pktlen.png)
detailed numbers
[ 32- 63]: 6853026
[ 64- 127]: 7070806
[ 128- 255]: 1168993
[ 256- 511]: 1140890
[ 512- 1023]: 4786488
[ 1024- 2047]: 14090064
Protocol Breakdown
![[protocol breakdown chart]](201208071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35110267 (100.00%) 25092844764 (100.00%) 714.69
ip 33939942 ( 96.67%) 23918122466 ( 95.32%) 704.72
tcp 19922981 ( 56.74%) 17174176626 ( 68.44%) 862.03
http(s) 10567686 ( 30.10%) 13868626709 ( 55.27%) 1312.36
http(c) 7272423 ( 20.71%) 1832366106 ( 7.30%) 251.96
squid 109532 ( 0.31%) 91676602 ( 0.37%) 836.98
smtp 62919 ( 0.18%) 18951506 ( 0.08%) 301.20
nntp 12 ( 0.00%) 740 ( 0.00%) 61.67
ftp 178662 ( 0.51%) 158165623 ( 0.63%) 885.28
pop3 8477 ( 0.02%) 3256579 ( 0.01%) 384.17
imap 2797 ( 0.01%) 337154 ( 0.00%) 120.54
telnet 11829 ( 0.03%) 878905 ( 0.00%) 74.30
ssh 8760 ( 0.02%) 2606338 ( 0.01%) 297.53
dns 1958 ( 0.01%) 270141 ( 0.00%) 137.97
bgp 495 ( 0.00%) 101773 ( 0.00%) 205.60
napster 395 ( 0.00%) 26229 ( 0.00%) 66.40
realaud 28 ( 0.00%) 3637 ( 0.00%) 129.89
rtsp 9548 ( 0.03%) 12445973 ( 0.05%) 1303.52
icecast 1017 ( 0.00%) 122717 ( 0.00%) 120.67
hotline 125 ( 0.00%) 100918 ( 0.00%) 807.34
other 1686318 ( 4.80%) 1184238976 ( 4.72%) 702.26
udp 9654521 ( 27.50%) 5441479576 ( 21.69%) 563.62
dns 1196235 ( 3.41%) 478254028 ( 1.91%) 399.80
rip 4516417 ( 12.86%) 2195688910 ( 8.75%) 486.16
realaud 19 ( 0.00%) 1309 ( 0.00%) 68.89
halflif 213 ( 0.00%) 31099 ( 0.00%) 146.00
starcra 58 ( 0.00%) 12523 ( 0.00%) 215.91
everque 175 ( 0.00%) 34223 ( 0.00%) 195.56
unreal 45 ( 0.00%) 3657 ( 0.00%) 81.27
quake 104 ( 0.00%) 11261 ( 0.00%) 108.28
cuseeme 14 ( 0.00%) 1012 ( 0.00%) 72.29
other 3892831 ( 11.09%) 2764493687 ( 11.02%) 710.15
icmp 2380492 ( 6.78%) 203148121 ( 0.81%) 85.34
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 29928 ( 0.09%) 4275824 ( 0.02%) 142.87
ip6 1850244 ( 5.27%) 1041137584 ( 4.15%) 562.70
pim 97 ( 0.00%) 5820 ( 0.00%) 60.00
other 101495 ( 0.29%) 53879755 ( 0.21%) 530.86
frag 466908 ( 1.33%) 453974481 ( 1.81%) 972.30
ip6 1170325 ( 3.33%) 1174722298 ( 4.68%) 1003.76
tcp6 1061825 ( 3.02%) 1147494169 ( 4.57%) 1080.68
http(s) 438463 ( 1.25%) 476930153 ( 1.90%) 1087.73
http(c) 109364 ( 0.31%) 12460075 ( 0.05%) 113.93
smtp 627 ( 0.00%) 184034 ( 0.00%) 293.52
ftp 168 ( 0.00%) 18060 ( 0.00%) 107.50
pop3 15 ( 0.00%) 1949 ( 0.00%) 129.93
ssh 113 ( 0.00%) 18708 ( 0.00%) 165.56
dns 148 ( 0.00%) 58601 ( 0.00%) 395.95
bgp 214 ( 0.00%) 169425 ( 0.00%) 791.71
other 512713 ( 1.46%) 657653164 ( 2.62%) 1282.69
udp6 80309 ( 0.23%) 22012598 ( 0.09%) 274.10
dns 62274 ( 0.18%) 20386709 ( 0.08%) 327.37
starcra 1 ( 0.00%) 112 ( 0.00%) 112.00
quake 1 ( 0.00%) 118 ( 0.00%) 118.00
other 18033 ( 0.05%) 1625659 ( 0.01%) 90.15
icmp6 26710 ( 0.08%) 3880345 ( 0.02%) 145.28
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1366 ( 0.00%) 1319558 ( 0.01%) 966.00
tcpdump file: 201208071400.dump.gz (752.94 MB)