Traffic Trace Info
DumpFile: 201208101400.dump
FileSize: 8417.95MB
Id: 201208101400
StartTime: Fri Aug 10 14:00:01 2012
EndTime: Fri Aug 10 14:15:01 2012
TotalTime: 900.36 seconds
TotalCapSize: -1928.08MB CapLen: 96 bytes
# of packets: 141166159 (33508.85MB)
AvgRate: 312.19Mbps stddev:46.65M
IP flow (unique src/dst pair) Information
# of flows: 70893500 (avg. 1.99 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.3% 2.2% 1.5% 1.4% 1.3% 1.2% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 44095405
Top 10 bandwidth usage (bytes/total in %):
16.8% 11.8% 9.4% 5.3% 5.3% 4.7% 3.8% 3.3% 2.9% 2.7%
# of IPv6 addresses: 6769
Top 10 bandwidth usage (bytes/total in %):
51.6% 15.1% 12.4% 8.4% 5.9% 4.8% 4.4% 4.4% 4.3% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201208101400.pktlen.png)
detailed numbers
[ 32- 63]: 100301413
[ 64- 127]: 10998924
[ 128- 255]: 1969262
[ 256- 511]: 943318
[ 512- 1023]: 13374556
[ 1024- 2047]: 13578686
Protocol Breakdown
![[protocol breakdown chart]](201208101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 141166159 (100.00%) 35136572423 (100.00%) 248.90
ip 140377869 ( 99.44%) 34382407657 ( 97.85%) 244.93
tcp 26247436 ( 18.59%) 19118345790 ( 54.41%) 728.39
http(s) 11181098 ( 7.92%) 14443269919 ( 41.11%) 1291.76
http(c) 7534173 ( 5.34%) 1350752193 ( 3.84%) 179.28
squid 176585 ( 0.13%) 109630623 ( 0.31%) 620.84
smtp 61162 ( 0.04%) 15196992 ( 0.04%) 248.47
ftp 111869 ( 0.08%) 100418926 ( 0.29%) 897.65
pop3 8249 ( 0.01%) 1554301 ( 0.00%) 188.42
imap 3312 ( 0.00%) 678414 ( 0.00%) 204.84
telnet 36207 ( 0.03%) 2685332 ( 0.01%) 74.17
ssh 3431533 ( 2.43%) 664722881 ( 1.89%) 193.71
dns 1573 ( 0.00%) 239962 ( 0.00%) 152.55
bgp 530 ( 0.00%) 113072 ( 0.00%) 213.34
napster 109 ( 0.00%) 13708 ( 0.00%) 125.76
realaud 48 ( 0.00%) 5759 ( 0.00%) 119.98
rtsp 5599 ( 0.00%) 4008770 ( 0.01%) 715.98
icecast 3537 ( 0.00%) 287975 ( 0.00%) 81.42
hotline 51 ( 0.00%) 6190 ( 0.00%) 121.37
other 3691801 ( 2.62%) 2424760773 ( 6.90%) 656.80
udp 16081695 ( 11.39%) 8246407324 ( 23.47%) 512.78
dns 1104499 ( 0.78%) 281909299 ( 0.80%) 255.24
rip 13047269 ( 9.24%) 6889908838 ( 19.61%) 528.07
realaud 12 ( 0.00%) 1426 ( 0.00%) 118.83
halflif 167 ( 0.00%) 21779 ( 0.00%) 130.41
starcra 32 ( 0.00%) 4073 ( 0.00%) 127.28
everque 203 ( 0.00%) 34116 ( 0.00%) 168.06
unreal 213 ( 0.00%) 15963 ( 0.00%) 74.94
quake 25 ( 0.00%) 1997 ( 0.00%) 79.88
cuseeme 19 ( 0.00%) 1690 ( 0.00%) 88.95
other 1929125 ( 1.37%) 1074439156 ( 3.06%) 556.96
icmp 96336270 ( 68.24%) 5858094739 ( 16.67%) 60.81
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 5102 ( 0.00%) 1900612 ( 0.01%) 372.52
ip6 1617434 ( 1.15%) 1069424254 ( 3.04%) 661.19
pim 85 ( 0.00%) 5100 ( 0.00%) 60.00
other 89662 ( 0.06%) 88210568 ( 0.25%) 983.81
frag 138538 ( 0.10%) 155424070 ( 0.44%) 1121.89
ip6 788290 ( 0.56%) 754164766 ( 2.15%) 956.71
tcp6 710913 ( 0.50%) 733897206 ( 2.09%) 1032.33
http(s) 560534 ( 0.40%) 677683385 ( 1.93%) 1209.00
http(c) 117320 ( 0.08%) 11254889 ( 0.03%) 95.93
smtp 341 ( 0.00%) 169724 ( 0.00%) 497.72
ftp 230 ( 0.00%) 24100 ( 0.00%) 104.78
pop3 3 ( 0.00%) 222 ( 0.00%) 74.00
ssh 5 ( 0.00%) 470 ( 0.00%) 94.00
dns 85 ( 0.00%) 34841 ( 0.00%) 409.89
bgp 217 ( 0.00%) 175884 ( 0.00%) 810.53
other 32178 ( 0.02%) 44553691 ( 0.13%) 1384.60
udp6 53342 ( 0.04%) 15853304 ( 0.05%) 297.20
dns 48840 ( 0.03%) 14910159 ( 0.04%) 305.29
other 4502 ( 0.00%) 943145 ( 0.00%) 209.49
icmp6 22838 ( 0.02%) 3334599 ( 0.01%) 146.01
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1085 ( 0.00%) 1064401 ( 0.00%) 981.01
tcpdump file: 201208101400.dump.gz (2914.16 MB)