Traffic Trace Info
DumpFile: 201208091400.dump
FileSize: 2587.04MB
Id: 201208091400
StartTime: Thu Aug 9 14:00:00 2012
EndTime: Thu Aug 9 14:15:00 2012
TotalTime: 900.14 seconds
TotalCapSize: 1994.65MB CapLen: 96 bytes
# of packets: 38822392 (26544.61MB)
AvgRate: 247.48Mbps stddev:66.92M
IP flow (unique src/dst pair) Information
# of flows: 2047383 (avg. 18.96 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.6% 3.6% 3.4% 1.8% 1.4% 1.3% 1.3% 1.2% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 1587596
Top 10 bandwidth usage (bytes/total in %):
21.9% 11.0% 7.0% 6.8% 5.2% 5.0% 3.7% 3.6% 2.6% 2.6%
# of IPv6 addresses: 6453
Top 10 bandwidth usage (bytes/total in %):
19.4% 18.6% 18.6% 9.3% 6.5% 5.6% 3.4% 3.2% 3.0% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201208091400.pktlen.png)
detailed numbers
[ 32- 63]: 7823595
[ 64- 127]: 6478602
[ 128- 255]: 1482728
[ 256- 511]: 1038302
[ 512- 1023]: 6794266
[ 1024- 2047]: 15204899
Protocol Breakdown
![[protocol breakdown chart]](201208091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38822392 (100.00%) 27834044615 (100.00%) 716.96
ip 38284424 ( 98.61%) 27394029256 ( 98.42%) 715.54
tcp 23951405 ( 61.69%) 20569314667 ( 73.90%) 858.79
http(s) 10995174 ( 28.32%) 14521023056 ( 52.17%) 1320.67
http(c) 7994436 ( 20.59%) 1690239191 ( 6.07%) 211.43
squid 42531 ( 0.11%) 26929295 ( 0.10%) 633.17
smtp 52021 ( 0.13%) 13454894 ( 0.05%) 258.64
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 140748 ( 0.36%) 121812392 ( 0.44%) 865.46
pop3 268658 ( 0.69%) 393165034 ( 1.41%) 1463.44
imap 3770 ( 0.01%) 636004 ( 0.00%) 168.70
telnet 11783 ( 0.03%) 878042 ( 0.00%) 74.52
ssh 162847 ( 0.42%) 70669111 ( 0.25%) 433.96
dns 1600 ( 0.00%) 246305 ( 0.00%) 153.94
bgp 552 ( 0.00%) 114372 ( 0.00%) 207.20
napster 68 ( 0.00%) 8915 ( 0.00%) 131.10
realaud 45 ( 0.00%) 5159 ( 0.00%) 114.64
rtsp 395 ( 0.00%) 370512 ( 0.00%) 938.01
icecast 41731 ( 0.11%) 41766350 ( 0.15%) 1000.85
hotline 62 ( 0.00%) 6686 ( 0.00%) 107.84
other 4234977 ( 10.91%) 3687988915 ( 13.25%) 870.84
udp 11535364 ( 29.71%) 6053429402 ( 21.75%) 524.77
dns 598615 ( 1.54%) 225035075 ( 0.81%) 375.93
rip 6264837 ( 16.14%) 3329731506 ( 11.96%) 531.50
realaud 9 ( 0.00%) 1287 ( 0.00%) 143.00
halflif 150 ( 0.00%) 13371 ( 0.00%) 89.14
starcra 12 ( 0.00%) 3250 ( 0.00%) 270.83
everque 161 ( 0.00%) 30296 ( 0.00%) 188.17
unreal 7 ( 0.00%) 1008 ( 0.00%) 144.00
quake 15 ( 0.00%) 1618 ( 0.00%) 107.87
cuseeme 4 ( 0.00%) 372 ( 0.00%) 93.00
other 4619346 ( 11.90%) 2494831526 ( 8.96%) 540.08
icmp 1623054 ( 4.18%) 163761129 ( 0.59%) 100.90
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 4183 ( 0.01%) 1518362 ( 0.01%) 362.98
ip6 1129244 ( 2.91%) 592631000 ( 2.13%) 524.80
pim 73 ( 0.00%) 4380 ( 0.00%) 60.00
other 40916 ( 0.11%) 13351046 ( 0.05%) 326.30
frag 369950 ( 0.95%) 336453411 ( 1.21%) 909.46
ip6 537968 ( 1.39%) 440015359 ( 1.58%) 817.92
tcp6 462052 ( 1.19%) 419084710 ( 1.51%) 907.01
http(s) 354752 ( 0.91%) 389724711 ( 1.40%) 1098.58
http(c) 85891 ( 0.22%) 8500690 ( 0.03%) 98.97
squid 2 ( 0.00%) 188 ( 0.00%) 94.00
smtp 169 ( 0.00%) 64963 ( 0.00%) 384.40
ftp 172 ( 0.00%) 18334 ( 0.00%) 106.59
pop3 6 ( 0.00%) 444 ( 0.00%) 74.00
ssh 768 ( 0.00%) 217505 ( 0.00%) 283.21
dns 156 ( 0.00%) 56842 ( 0.00%) 364.37
bgp 225 ( 0.00%) 179005 ( 0.00%) 795.58
icecast 1 ( 0.00%) 94 ( 0.00%) 94.00
other 19910 ( 0.05%) 20321934 ( 0.07%) 1020.69
udp6 54045 ( 0.14%) 16857699 ( 0.06%) 311.92
dns 52734 ( 0.14%) 16696351 ( 0.06%) 316.61
starcra 1 ( 0.00%) 102 ( 0.00%) 102.00
other 1310 ( 0.00%) 161246 ( 0.00%) 123.09
icmp6 20810 ( 0.05%) 3124604 ( 0.01%) 150.15
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 947 ( 0.00%) 932854 ( 0.00%) 985.06
tcpdump file: 201208091400.dump.gz (808.21 MB)