Traffic Trace Info
DumpFile: 201208201400.dump
FileSize: 3688.43MB
Id: 201208201400
StartTime: Mon Aug 20 14:00:00 2012
EndTime: Mon Aug 20 14:15:00 2012
TotalTime: 900.05 seconds
TotalCapSize: -1295.35MB CapLen: 96 bytes
# of packets: 58181171 (36085.36MB)
AvgRate: 336.33Mbps stddev:50.21M
IP flow (unique src/dst pair) Information
# of flows: 1982550 (avg. 29.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.5% 2.5% 2.2% 2.2% 1.6% 1.6% 1.3% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 1507624
Top 10 bandwidth usage (bytes/total in %):
15.2% 15.2% 12.4% 7.6% 6.4% 5.7% 4.0% 3.7% 3.0% 2.9%
# of IPv6 addresses: 6886
Top 10 bandwidth usage (bytes/total in %):
20.8% 17.5% 7.8% 7.0% 6.6% 4.5% 3.5% 3.1% 2.9% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201208201400.pktlen.png)
detailed numbers
[ 32- 63]: 6701649
[ 64- 127]: 6955990
[ 128- 255]: 3044297
[ 256- 511]: 874073
[ 512- 1023]: 25815659
[ 1024- 2047]: 14789503
Protocol Breakdown
![[protocol breakdown chart]](201208201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 58181171 (100.00%) 37838244707 (100.00%) 650.35
ip 57710138 ( 99.19%) 37452517649 ( 98.98%) 648.98
tcp 24480827 ( 42.08%) 21486576944 ( 56.79%) 877.69
http(s) 12239323 ( 21.04%) 16126448157 ( 42.62%) 1317.59
http(c) 6683218 ( 11.49%) 1378431278 ( 3.64%) 206.25
squid 118462 ( 0.20%) 89847685 ( 0.24%) 758.45
smtp 82983 ( 0.14%) 36289731 ( 0.10%) 437.32
ftp 13984 ( 0.02%) 3059282 ( 0.01%) 218.77
pop3 5627 ( 0.01%) 4843294 ( 0.01%) 860.72
imap 3167 ( 0.01%) 1134609 ( 0.00%) 358.26
telnet 7405 ( 0.01%) 566004 ( 0.00%) 76.44
ssh 1286647 ( 2.21%) 1098878411 ( 2.90%) 854.06
dns 3730 ( 0.01%) 2076307 ( 0.01%) 556.65
bgp 526 ( 0.00%) 111176 ( 0.00%) 211.36
napster 8 ( 0.00%) 929 ( 0.00%) 116.12
realaud 22 ( 0.00%) 2514 ( 0.00%) 114.27
rtsp 2 ( 0.00%) 148 ( 0.00%) 74.00
icecast 2116 ( 0.00%) 183046 ( 0.00%) 86.51
other 4033607 ( 6.93%) 2744704373 ( 7.25%) 680.46
udp 30631115 ( 52.65%) 15266730239 ( 40.35%) 498.41
dns 500189 ( 0.86%) 226526467 ( 0.60%) 452.88
rip 28280140 ( 48.61%) 14229368920 ( 37.61%) 503.16
realaud 8 ( 0.00%) 1468 ( 0.00%) 183.50
halflif 41 ( 0.00%) 5567 ( 0.00%) 135.78
starcra 67 ( 0.00%) 29480 ( 0.00%) 440.00
everque 150 ( 0.00%) 29133 ( 0.00%) 194.22
unreal 12 ( 0.00%) 1779 ( 0.00%) 148.25
quake 771 ( 0.00%) 64173 ( 0.00%) 83.23
cuseeme 51 ( 0.00%) 43890 ( 0.00%) 860.59
other 1849456 ( 3.18%) 810611431 ( 2.14%) 438.30
icmp 1515979 ( 2.61%) 139842691 ( 0.37%) 92.25
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 3680 ( 0.01%) 691088 ( 0.00%) 187.80
ip6 1020209 ( 1.75%) 544793142 ( 1.44%) 534.00
pim 92 ( 0.00%) 5520 ( 0.00%) 60.00
other 58052 ( 0.10%) 13858865 ( 0.04%) 238.73
frag 180597 ( 0.31%) 219134296 ( 0.58%) 1213.39
ip6 471031 ( 0.81%) 385726938 ( 1.02%) 818.90
tcp6 390020 ( 0.67%) 363909040 ( 0.96%) 933.05
http(s) 304427 ( 0.52%) 322534951 ( 0.85%) 1059.48
http(c) 55873 ( 0.10%) 5876688 ( 0.02%) 105.18
smtp 323 ( 0.00%) 144154 ( 0.00%) 446.30
ftp 152 ( 0.00%) 16583 ( 0.00%) 109.10
ssh 18 ( 0.00%) 1512 ( 0.00%) 84.00
dns 120 ( 0.00%) 46636 ( 0.00%) 388.63
bgp 102 ( 0.00%) 34763 ( 0.00%) 340.81
other 29005 ( 0.05%) 35253753 ( 0.09%) 1215.44
udp6 56866 ( 0.10%) 17488924 ( 0.05%) 307.55
dns 55684 ( 0.10%) 17360241 ( 0.05%) 311.76
realaud 1 ( 0.00%) 106 ( 0.00%) 106.00
halflif 1 ( 0.00%) 113 ( 0.00%) 113.00
everque 1 ( 0.00%) 113 ( 0.00%) 113.00
other 1179 ( 0.00%) 128351 ( 0.00%) 108.86
icmp6 22949 ( 0.04%) 3220975 ( 0.01%) 140.35
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1084 ( 0.00%) 1092743 ( 0.00%) 1008.07
tcpdump file: 201208201400.dump.gz (1069.77 MB)