Traffic Trace Info
DumpFile: 201208181400.dump
FileSize: 2726.11MB
Id: 201208181400
StartTime: Sat Aug 18 14:00:00 2012
EndTime: Sat Aug 18 14:15:00 2012
TotalTime: 899.81 seconds
TotalCapSize: -1987.26MB CapLen: 96 bytes
# of packets: 40459460 (25702.74MB)
AvgRate: 239.67Mbps stddev:60.66M
IP flow (unique src/dst pair) Information
# of flows: 2344728 (avg. 17.26 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 3.8% 2.7% 2.1% 2.0% 1.6% 1.5% 1.5% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 1650609
Top 10 bandwidth usage (bytes/total in %):
17.0% 10.5% 10.3% 8.7% 6.4% 4.5% 4.5% 4.4% 4.0% 3.1%
# of IPv6 addresses: 5806
Top 10 bandwidth usage (bytes/total in %):
38.6% 26.7% 12.1% 12.1% 10.8% 7.4% 6.5% 4.3% 3.0% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201208181400.pktlen.png)
detailed numbers
[ 32- 63]: 6406783
[ 64- 127]: 7855690
[ 128- 255]: 1914915
[ 256- 511]: 700922
[ 512- 1023]: 10224367
[ 1024- 2047]: 13356783
Protocol Breakdown
![[protocol breakdown chart]](201208181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40459460 (100.00%) 26951275092 (100.00%) 666.13
ip 39921660 ( 98.67%) 26431803185 ( 98.07%) 662.09
tcp 23192730 ( 57.32%) 18519085059 ( 68.71%) 798.49
http(s) 10039111 ( 24.81%) 13360267743 ( 49.57%) 1330.82
http(c) 5174247 ( 12.79%) 883255092 ( 3.28%) 170.70
squid 33866 ( 0.08%) 18144878 ( 0.07%) 535.78
smtp 46307 ( 0.11%) 6802356 ( 0.03%) 146.90
nntp 23 ( 0.00%) 1398 ( 0.00%) 60.78
ftp 168664 ( 0.42%) 139213320 ( 0.52%) 825.39
pop3 1143 ( 0.00%) 129798 ( 0.00%) 113.56
imap 1306 ( 0.00%) 413331 ( 0.00%) 316.49
telnet 6973 ( 0.02%) 536132 ( 0.00%) 76.89
ssh 2898397 ( 7.16%) 456952500 ( 1.70%) 157.66
dns 1503 ( 0.00%) 222397 ( 0.00%) 147.97
bgp 527 ( 0.00%) 106474 ( 0.00%) 202.04
napster 7 ( 0.00%) 908 ( 0.00%) 129.71
realaud 32 ( 0.00%) 3545 ( 0.00%) 110.78
rtsp 3 ( 0.00%) 180 ( 0.00%) 60.00
icecast 295 ( 0.00%) 48916 ( 0.00%) 165.82
hotline 44 ( 0.00%) 3525 ( 0.00%) 80.11
other 4820260 ( 11.91%) 3652980952 ( 13.55%) 757.84
udp 13246350 ( 32.74%) 6718935625 ( 24.93%) 507.23
dns 665341 ( 1.64%) 321721449 ( 1.19%) 483.54
rip 9671083 ( 23.90%) 5127304758 ( 19.02%) 530.17
realaud 15 ( 0.00%) 1309 ( 0.00%) 87.27
halflif 139 ( 0.00%) 13156 ( 0.00%) 94.65
starcra 29 ( 0.00%) 2887 ( 0.00%) 99.55
everque 158 ( 0.00%) 45999 ( 0.00%) 291.13
unreal 570 ( 0.00%) 34855 ( 0.00%) 61.15
quake 21 ( 0.00%) 2319 ( 0.00%) 110.43
cuseeme 2 ( 0.00%) 187 ( 0.00%) 93.50
other 2908798 ( 7.19%) 1269754220 ( 4.71%) 436.52
icmp 1819146 ( 4.50%) 395273954 ( 1.47%) 217.29
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 745 ( 0.00%) 238982 ( 0.00%) 320.78
ip6 1606006 ( 3.97%) 784708890 ( 2.91%) 488.61
pim 80 ( 0.00%) 4800 ( 0.00%) 60.00
other 56418 ( 0.14%) 13536605 ( 0.05%) 239.93
frag 333340 ( 0.82%) 339176150 ( 1.26%) 1017.51
ip6 537800 ( 1.33%) 519471907 ( 1.93%) 965.92
tcp6 452261 ( 1.12%) 481535398 ( 1.79%) 1064.73
http(s) 289560 ( 0.72%) 328201944 ( 1.22%) 1133.45
http(c) 45166 ( 0.11%) 4673783 ( 0.02%) 103.48
smtp 68 ( 0.00%) 32544 ( 0.00%) 478.59
ftp 166 ( 0.00%) 17847 ( 0.00%) 107.51
ssh 18 ( 0.00%) 1512 ( 0.00%) 84.00
dns 78 ( 0.00%) 32128 ( 0.00%) 411.90
bgp 95 ( 0.00%) 29686 ( 0.00%) 312.48
other 117110 ( 0.29%) 148545954 ( 0.55%) 1268.43
udp6 62350 ( 0.15%) 34037144 ( 0.13%) 545.90
dns 37655 ( 0.09%) 11759602 ( 0.04%) 312.30
unreal 1 ( 0.00%) 110 ( 0.00%) 110.00
other 24694 ( 0.06%) 22277432 ( 0.08%) 902.14
icmp6 22527 ( 0.06%) 3341626 ( 0.01%) 148.34
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 549 ( 0.00%) 542315 ( 0.00%) 987.82
tcpdump file: 201208181400.dump.gz (865.30 MB)