Traffic Trace Info
DumpFile: 201208111400.dump
FileSize: 2570.27MB
Id: 201208111400
StartTime: Sat Aug 11 14:00:00 2012
EndTime: Sat Aug 11 14:15:00 2012
TotalTime: 900.08 seconds
TotalCapSize: 1963.02MB CapLen: 96 bytes
# of packets: 39796341 (27389.09MB)
AvgRate: 255.30Mbps stddev:50.10M
IP flow (unique src/dst pair) Information
# of flows: 788191 (avg. 50.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 2.7% 2.4% 2.1% 2.0% 1.8% 1.7% 1.7% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 514996
Top 10 bandwidth usage (bytes/total in %):
17.3% 12.0% 11.7% 8.5% 7.7% 7.7% 4.8% 4.1% 4.0% 2.5%
# of IPv6 addresses: 5893
Top 10 bandwidth usage (bytes/total in %):
33.1% 23.6% 16.2% 14.0% 9.1% 5.8% 5.5% 4.8% 3.3% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201208111400.pktlen.png)
detailed numbers
[ 32- 63]: 3363003
[ 64- 127]: 4288405
[ 128- 255]: 1815256
[ 256- 511]: 607651
[ 512- 1023]: 17627604
[ 1024- 2047]: 12094422
Protocol Breakdown
![[protocol breakdown chart]](201208111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39796341 (100.00%) 28719538530 (100.00%) 721.66
ip 39318815 ( 98.80%) 28291507501 ( 98.51%) 719.54
tcp 16013389 ( 40.24%) 15870552060 ( 55.26%) 991.08
http(s) 10142596 ( 25.49%) 13609530514 ( 47.39%) 1341.82
http(c) 3980945 ( 10.00%) 1126193624 ( 3.92%) 282.90
squid 30269 ( 0.08%) 18112508 ( 0.06%) 598.38
smtp 50151 ( 0.13%) 11775438 ( 0.04%) 234.80
ftp 170597 ( 0.43%) 148662688 ( 0.52%) 871.43
pop3 6780 ( 0.02%) 546979 ( 0.00%) 80.68
imap 4014 ( 0.01%) 1043231 ( 0.00%) 259.90
telnet 31660 ( 0.08%) 2341250 ( 0.01%) 73.95
ssh 79697 ( 0.20%) 56308057 ( 0.20%) 706.53
dns 1499 ( 0.00%) 235428 ( 0.00%) 157.06
bgp 524 ( 0.00%) 99679 ( 0.00%) 190.23
napster 306 ( 0.00%) 19152 ( 0.00%) 62.59
realaud 8 ( 0.00%) 903 ( 0.00%) 112.88
icecast 11123 ( 0.03%) 7969651 ( 0.03%) 716.50
hotline 11 ( 0.00%) 1234 ( 0.00%) 112.18
other 1503208 ( 3.78%) 887711664 ( 3.09%) 590.54
udp 21031360 ( 52.85%) 11034965097 ( 38.42%) 524.69
dns 741770 ( 1.86%) 461135585 ( 1.61%) 621.67
rip 17453909 ( 43.86%) 9252491532 ( 32.22%) 530.11
realaud 23 ( 0.00%) 1890 ( 0.00%) 82.17
halflif 84 ( 0.00%) 12706 ( 0.00%) 151.26
starcra 355 ( 0.00%) 48064 ( 0.00%) 135.39
everque 168 ( 0.00%) 36507 ( 0.00%) 217.30
unreal 16 ( 0.00%) 1679 ( 0.00%) 104.94
quake 24 ( 0.00%) 3327 ( 0.00%) 138.62
cuseeme 8 ( 0.00%) 654 ( 0.00%) 81.75
other 2809168 ( 7.06%) 1319509224 ( 4.59%) 469.72
icmp 551401 ( 1.39%) 110687757 ( 0.39%) 200.74
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 11142 ( 0.03%) 6602980 ( 0.02%) 592.62
ip6 1672234 ( 4.20%) 1256504409 ( 4.38%) 751.39
pim 97 ( 0.00%) 5820 ( 0.00%) 60.00
other 39007 ( 0.10%) 12170108 ( 0.04%) 312.00
frag 447505 ( 1.12%) 428172228 ( 1.49%) 956.80
ip6 477526 ( 1.20%) 428031029 ( 1.49%) 896.35
tcp6 415669 ( 1.04%) 412616780 ( 1.44%) 992.66
http(s) 208760 ( 0.52%) 233218747 ( 0.81%) 1117.16
http(c) 50276 ( 0.13%) 5219003 ( 0.02%) 103.81
smtp 395 ( 0.00%) 101607 ( 0.00%) 257.23
ftp 166 ( 0.00%) 17847 ( 0.00%) 107.51
imap 655 ( 0.00%) 337517 ( 0.00%) 515.29
ssh 3 ( 0.00%) 282 ( 0.00%) 94.00
dns 112 ( 0.00%) 41531 ( 0.00%) 370.81
bgp 230 ( 0.00%) 191597 ( 0.00%) 833.03
other 155072 ( 0.39%) 173488649 ( 0.60%) 1118.76
udp6 38817 ( 0.10%) 11535084 ( 0.04%) 297.17
dns 36557 ( 0.09%) 11228596 ( 0.04%) 307.15
cuseeme 1 ( 0.00%) 117 ( 0.00%) 117.00
other 2259 ( 0.01%) 306371 ( 0.00%) 135.62
icmp6 22311 ( 0.06%) 3251321 ( 0.01%) 145.73
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 616 ( 0.00%) 612470 ( 0.00%) 994.27
tcpdump file: 201208111400.dump.gz (737.95 MB)