Traffic Trace Info
DumpFile: 201208121400.dump
FileSize: 2111.50MB
Id: 201208121400
StartTime: Sun Aug 12 14:00:00 2012
EndTime: Sun Aug 12 14:15:00 2012
TotalTime: 900.36 seconds
TotalCapSize: 1629.73MB CapLen: 96 bytes
# of packets: 31573007 (21797.42MB)
AvgRate: 203.05Mbps stddev:44.63M
IP flow (unique src/dst pair) Information
# of flows: 787405 (avg. 40.10 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 3.1% 2.9% 2.0% 1.7% 1.2% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 521168
Top 10 bandwidth usage (bytes/total in %):
18.8% 11.3% 7.6% 6.6% 6.6% 6.1% 4.6% 4.4% 3.2% 2.6%
# of IPv6 addresses: 6215
Top 10 bandwidth usage (bytes/total in %):
20.4% 6.5% 6.3% 5.3% 5.1% 5.0% 4.7% 4.6% 4.0% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201208121400.pktlen.png)
detailed numbers
[ 32- 63]: 4282017
[ 64- 127]: 4876328
[ 128- 255]: 1568571
[ 256- 511]: 550263
[ 512- 1023]: 8992567
[ 1024- 2047]: 11303261
Protocol Breakdown
![[protocol breakdown chart]](201208121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31573007 (100.00%) 22856256365 (100.00%) 723.92
ip 31268490 ( 99.04%) 22639459964 ( 99.05%) 724.03
tcp 17768743 ( 56.28%) 16126301965 ( 70.56%) 907.57
http(s) 9226225 ( 29.22%) 12508702729 ( 54.73%) 1355.78
http(c) 5164545 ( 16.36%) 962561090 ( 4.21%) 186.38
squid 44340 ( 0.14%) 17299325 ( 0.08%) 390.15
smtp 45443 ( 0.14%) 7496192 ( 0.03%) 164.96
ftp 91724 ( 0.29%) 72684759 ( 0.32%) 792.43
pop3 2257 ( 0.01%) 840792 ( 0.00%) 372.53
imap 2393 ( 0.01%) 233313 ( 0.00%) 97.50
telnet 8301 ( 0.03%) 619729 ( 0.00%) 74.66
ssh 72126 ( 0.23%) 51151404 ( 0.22%) 709.20
dns 1505 ( 0.00%) 231326 ( 0.00%) 153.70
bgp 531 ( 0.00%) 113026 ( 0.00%) 212.85
napster 12 ( 0.00%) 1120 ( 0.00%) 93.33
realaud 38971 ( 0.12%) 2872718 ( 0.01%) 73.71
icecast 24892 ( 0.08%) 7912962 ( 0.03%) 317.89
hotline 440 ( 0.00%) 28046 ( 0.00%) 63.74
other 3045034 ( 9.64%) 2493553194 ( 10.91%) 818.89
udp 11488067 ( 36.39%) 5679788370 ( 24.85%) 494.41
dns 579432 ( 1.84%) 208830598 ( 0.91%) 360.41
rip 8931768 ( 28.29%) 4686908081 ( 20.51%) 524.75
realaud 38 ( 0.00%) 2845 ( 0.00%) 74.87
halflif 77 ( 0.00%) 8197 ( 0.00%) 106.45
starcra 32 ( 0.00%) 6359 ( 0.00%) 198.72
everque 131 ( 0.00%) 21232 ( 0.00%) 162.08
unreal 714 ( 0.00%) 50647 ( 0.00%) 70.93
quake 12 ( 0.00%) 1742 ( 0.00%) 145.17
cuseeme 6 ( 0.00%) 467 ( 0.00%) 77.83
other 1974693 ( 6.25%) 783861784 ( 3.43%) 396.95
icmp 536265 ( 1.70%) 98740944 ( 0.43%) 184.13
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 3916 ( 0.01%) 1392952 ( 0.01%) 355.71
ip6 1425291 ( 4.51%) 720933714 ( 3.15%) 505.82
pim 87 ( 0.00%) 5220 ( 0.00%) 60.00
other 45936 ( 0.15%) 12277529 ( 0.05%) 267.27
frag 124979 ( 0.40%) 111201977 ( 0.49%) 889.77
ip6 304517 ( 0.96%) 216796401 ( 0.95%) 711.94
tcp6 245542 ( 0.78%) 202999929 ( 0.89%) 826.74
http(s) 172762 ( 0.55%) 173549838 ( 0.76%) 1004.56
http(c) 51936 ( 0.16%) 5881050 ( 0.03%) 113.24
smtp 164 ( 0.00%) 171305 ( 0.00%) 1044.54
ftp 241 ( 0.00%) 29310 ( 0.00%) 121.62
ssh 3 ( 0.00%) 282 ( 0.00%) 94.00
dns 76 ( 0.00%) 30187 ( 0.00%) 397.20
bgp 219 ( 0.00%) 178589 ( 0.00%) 815.47
other 20141 ( 0.06%) 23159368 ( 0.10%) 1149.86
udp6 33882 ( 0.11%) 9946923 ( 0.04%) 293.58
dns 31703 ( 0.10%) 9521257 ( 0.04%) 300.33
realaud 1 ( 0.00%) 92 ( 0.00%) 92.00
everque 1 ( 0.00%) 96 ( 0.00%) 96.00
other 2177 ( 0.01%) 425478 ( 0.00%) 195.44
icmp6 24501 ( 0.08%) 3363176 ( 0.01%) 137.27
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 477 ( 0.00%) 470713 ( 0.00%) 986.82
tcpdump file: 201208121400.dump.gz (629.19 MB)