Traffic Trace Info
DumpFile: 201208151400.dump
FileSize: 3541.96MB
Id: 201208151400
StartTime: Wed Aug 15 14:00:01 2012
EndTime: Wed Aug 15 14:15:00 2012
TotalTime: 899.41 seconds
TotalCapSize: -1366.80MB CapLen: 96 bytes
# of packets: 53264975 (37869.75MB)
AvgRate: 353.22Mbps stddev:62.39M
IP flow (unique src/dst pair) Information
# of flows: 2144426 (avg. 24.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.3% 2.0% 1.7% 1.6% 1.5% 1.4% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 1651145
Top 10 bandwidth usage (bytes/total in %):
18.0% 11.8% 8.2% 8.2% 6.7% 5.5% 5.5% 2.8% 2.8% 2.6%
# of IPv6 addresses: 7085
Top 10 bandwidth usage (bytes/total in %):
30.0% 28.1% 26.0% 12.8% 7.1% 6.3% 5.3% 4.6% 4.0% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201208151400.pktlen.png)
detailed numbers
[ 32- 63]: 8214209
[ 64- 127]: 8377216
[ 128- 255]: 1851598
[ 256- 511]: 770114
[ 512- 1023]: 13341344
[ 1024- 2047]: 20710494
Protocol Breakdown
![[protocol breakdown chart]](201208151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 53264975 (100.00%) 39709314925 (100.00%) 745.51
ip 52196786 ( 97.99%) 38749047036 ( 97.58%) 742.36
tcp 28715331 ( 53.91%) 25276753260 ( 63.65%) 880.25
http(s) 13446574 ( 25.24%) 18134846373 ( 45.67%) 1348.66
http(c) 6634579 ( 12.46%) 1029409386 ( 2.59%) 155.16
squid 103219 ( 0.19%) 42836821 ( 0.11%) 415.01
smtp 75781 ( 0.14%) 24973970 ( 0.06%) 329.55
ftp 151197 ( 0.28%) 137783686 ( 0.35%) 911.29
pop3 1310 ( 0.00%) 480932 ( 0.00%) 367.12
imap 3653 ( 0.01%) 3403741 ( 0.01%) 931.77
telnet 19915 ( 0.04%) 1491816 ( 0.00%) 74.91
ssh 69006 ( 0.13%) 55207996 ( 0.14%) 800.05
dns 2554 ( 0.00%) 300086 ( 0.00%) 117.50
bgp 524 ( 0.00%) 122556 ( 0.00%) 233.89
napster 163 ( 0.00%) 14707 ( 0.00%) 90.23
realaud 40 ( 0.00%) 7123 ( 0.00%) 178.07
rtsp 206 ( 0.00%) 50641 ( 0.00%) 245.83
icecast 1376 ( 0.00%) 158385 ( 0.00%) 115.11
hotline 101 ( 0.00%) 6923 ( 0.00%) 68.54
other 8205132 ( 15.40%) 5845658058 ( 14.72%) 712.44
udp 20223944 ( 37.97%) 12408559301 ( 31.25%) 613.56
dns 395271 ( 0.74%) 121377342 ( 0.31%) 307.07
rip 13133890 ( 24.66%) 6897721020 ( 17.37%) 525.18
realaud 32 ( 0.00%) 3584 ( 0.00%) 112.00
halflif 132 ( 0.00%) 25140 ( 0.00%) 190.45
starcra 81 ( 0.00%) 6718 ( 0.00%) 82.94
everque 6862 ( 0.01%) 6036124 ( 0.02%) 879.65
unreal 81 ( 0.00%) 10083 ( 0.00%) 124.48
quake 189 ( 0.00%) 28105 ( 0.00%) 148.70
cuseeme 19 ( 0.00%) 1571 ( 0.00%) 82.68
other 6687060 ( 12.55%) 5383256374 ( 13.56%) 805.03
icmp 1630549 ( 3.06%) 165865911 ( 0.42%) 101.72
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2090 ( 0.00%) 794860 ( 0.00%) 380.32
ip6 1581119 ( 2.97%) 884421618 ( 2.23%) 559.36
pim 75 ( 0.00%) 4500 ( 0.00%) 60.00
other 43494 ( 0.08%) 12628426 ( 0.03%) 290.35
frag 50207 ( 0.09%) 53457398 ( 0.13%) 1064.74
ip6 1068189 ( 2.01%) 960267889 ( 2.42%) 898.97
tcp6 896700 ( 1.68%) 836257632 ( 2.11%) 932.59
http(s) 661740 ( 1.24%) 794022340 ( 2.00%) 1199.90
http(c) 192623 ( 0.36%) 16443088 ( 0.04%) 85.36
smtp 216 ( 0.00%) 92053 ( 0.00%) 426.17
ftp 2394 ( 0.00%) 251322 ( 0.00%) 104.98
ssh 18 ( 0.00%) 1512 ( 0.00%) 84.00
dns 159 ( 0.00%) 50125 ( 0.00%) 315.25
bgp 208 ( 0.00%) 163281 ( 0.00%) 785.00
other 39342 ( 0.07%) 25233911 ( 0.06%) 641.40
udp6 147765 ( 0.28%) 119749329 ( 0.30%) 810.40
dns 50319 ( 0.09%) 15420448 ( 0.04%) 306.45
starcra 1 ( 0.00%) 99 ( 0.00%) 99.00
quake 1 ( 0.00%) 117 ( 0.00%) 117.00
other 97444 ( 0.18%) 104328665 ( 0.26%) 1070.65
icmp6 22676 ( 0.04%) 3309867 ( 0.01%) 145.96
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 934 ( 0.00%) 935551 ( 0.00%) 1001.66
tcpdump file: 201208151400.dump.gz (1070.91 MB)