Traffic Trace Info
DumpFile: 201208081400.dump
FileSize: 3161.73MB
Id: 201208081400
StartTime: Wed Aug 8 14:00:00 2012
EndTime: Wed Aug 8 14:15:00 2012
TotalTime: 899.99 seconds
TotalCapSize: -1597.98MB CapLen: 96 bytes
# of packets: 43496625 (26815.73MB)
AvgRate: 249.99Mbps stddev:57.26M
IP flow (unique src/dst pair) Information
# of flows: 1843743 (avg. 23.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 4.5% 3.5% 2.4% 1.6% 1.4% 1.4% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 1469091
Top 10 bandwidth usage (bytes/total in %):
17.9% 5.5% 4.9% 4.9% 4.6% 4.6% 4.3% 4.0% 3.6% 3.6%
# of IPv6 addresses: 7125
Top 10 bandwidth usage (bytes/total in %):
23.1% 15.2% 15.1% 12.8% 12.8% 6.6% 6.4% 5.1% 5.0% 4.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201208081400.pktlen.png)
detailed numbers
[ 32- 63]: 4604739
[ 64- 127]: 16090495
[ 128- 255]: 1317675
[ 256- 511]: 964340
[ 512- 1023]: 4547002
[ 1024- 2047]: 15972374
Protocol Breakdown
![[protocol breakdown chart]](201208081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 43496625 (100.00%) 28118331417 (100.00%) 646.45
ip 42407725 ( 97.50%) 27502474292 ( 97.81%) 648.53
tcp 21021325 ( 48.33%) 20913081769 ( 74.38%) 994.85
http(s) 13394425 ( 30.79%) 18168097076 ( 64.61%) 1356.39
http(c) 5455126 ( 12.54%) 1140046835 ( 4.05%) 208.99
squid 357423 ( 0.82%) 481532172 ( 1.71%) 1347.23
smtp 56995 ( 0.13%) 12993274 ( 0.05%) 227.97
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 13412 ( 0.03%) 1654460 ( 0.01%) 123.36
pop3 5477 ( 0.01%) 873815 ( 0.00%) 159.54
imap 11032 ( 0.03%) 9559950 ( 0.03%) 866.57
telnet 3190 ( 0.01%) 241806 ( 0.00%) 75.80
ssh 116612 ( 0.27%) 46668709 ( 0.17%) 400.21
dns 1990 ( 0.00%) 244160 ( 0.00%) 122.69
bgp 556 ( 0.00%) 130270 ( 0.00%) 234.30
napster 29 ( 0.00%) 4212 ( 0.00%) 145.24
realaud 6 ( 0.00%) 870 ( 0.00%) 145.00
rtsp 16792 ( 0.04%) 24446071 ( 0.09%) 1455.82
icecast 216 ( 0.00%) 51720 ( 0.00%) 239.44
hotline 78 ( 0.00%) 6295 ( 0.00%) 80.71
other 1587959 ( 3.65%) 1026529640 ( 3.65%) 646.45
udp 7874826 ( 18.10%) 3512134295 ( 12.49%) 446.00
dns 642561 ( 1.48%) 292918462 ( 1.04%) 455.86
rip 4576294 ( 10.52%) 2150625722 ( 7.65%) 469.95
realaud 59 ( 0.00%) 7313 ( 0.00%) 123.95
halflif 147 ( 0.00%) 22574 ( 0.00%) 153.56
starcra 23 ( 0.00%) 1919 ( 0.00%) 83.43
everque 127 ( 0.00%) 27882 ( 0.00%) 219.54
unreal 16 ( 0.00%) 2546 ( 0.00%) 159.12
quake 48 ( 0.00%) 4771 ( 0.00%) 99.40
cuseeme 10 ( 0.00%) 709 ( 0.00%) 70.90
other 2655055 ( 6.10%) 1068382473 ( 3.80%) 402.40
icmp 11045356 ( 25.39%) 834094356 ( 2.97%) 75.52
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1934 ( 0.00%) 570772 ( 0.00%) 295.13
ip6 2426870 ( 5.58%) 2230767301 ( 7.93%) 919.20
pim 92 ( 0.00%) 5520 ( 0.00%) 60.00
other 37137 ( 0.09%) 11801009 ( 0.04%) 317.77
frag 255535 ( 0.59%) 289642632 ( 1.03%) 1133.48
ip6 1088900 ( 2.50%) 615857125 ( 2.19%) 565.58
tcp6 1009419 ( 2.32%) 591966490 ( 2.11%) 586.44
http(s) 358357 ( 0.82%) 413030350 ( 1.47%) 1152.57
http(c) 544187 ( 1.25%) 47761553 ( 0.17%) 87.77
smtp 343 ( 0.00%) 166542 ( 0.00%) 485.55
ftp 162 ( 0.00%) 17517 ( 0.00%) 108.13
pop3 15 ( 0.00%) 2800 ( 0.00%) 186.67
ssh 49 ( 0.00%) 8370 ( 0.00%) 170.82
dns 89 ( 0.00%) 33721 ( 0.00%) 378.89
bgp 223 ( 0.00%) 178233 ( 0.00%) 799.25
other 105994 ( 0.24%) 130767404 ( 0.47%) 1233.72
udp6 60034 ( 0.14%) 20116931 ( 0.07%) 335.09
dns 54728 ( 0.13%) 18180177 ( 0.06%) 332.19
unreal 1 ( 0.00%) 104 ( 0.00%) 104.00
quake 2 ( 0.00%) 207 ( 0.00%) 103.50
other 5303 ( 0.01%) 1936443 ( 0.01%) 365.16
icmp6 18340 ( 0.04%) 2821391 ( 0.01%) 153.84
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 993 ( 0.00%) 936821 ( 0.00%) 943.42
tcpdump file: 201208081400.dump.gz (824.40 MB)