Traffic Trace Info
DumpFile: 201208211400.dump
FileSize: 3380.62MB
Id: 201208211400
StartTime: Tue Aug 21 14:00:00 2012
EndTime: Tue Aug 21 14:15:00 2012
TotalTime: 900.05 seconds
TotalCapSize: -1501.55MB CapLen: 96 bytes
# of packets: 51521759 (33399.16MB)
AvgRate: 311.32Mbps stddev:51.87M
IP flow (unique src/dst pair) Information
# of flows: 1874615 (avg. 27.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 2.6% 2.6% 2.1% 1.8% 1.6% 1.6% 1.6% 1.6% 1.4%
IP address Information
# of IPv4 addresses: 1507502
Top 10 bandwidth usage (bytes/total in %):
12.2% 12.2% 8.3% 6.3% 6.0% 5.6% 4.5% 4.2% 4.0% 3.5%
# of IPv6 addresses: 7084
Top 10 bandwidth usage (bytes/total in %):
46.3% 46.3% 14.7% 7.6% 7.4% 6.9% 4.9% 2.7% 2.6% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201208211400.pktlen.png)
detailed numbers
[ 32- 63]: 5705638
[ 64- 127]: 7314157
[ 128- 255]: 2329822
[ 256- 511]: 1112673
[ 512- 1023]: 19879009
[ 1024- 2047]: 15180460
Protocol Breakdown
![[protocol breakdown chart]](201208211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 51521759 (100.00%) 35021558548 (100.00%) 679.74
ip 50458658 ( 97.94%) 33819254527 ( 96.57%) 670.24
tcp 23603437 ( 45.81%) 20985225284 ( 59.92%) 889.07
http(s) 11861844 ( 23.02%) 15379393469 ( 43.91%) 1296.54
http(c) 6348021 ( 12.32%) 1756639465 ( 5.02%) 276.72
squid 37184 ( 0.07%) 24026697 ( 0.07%) 646.16
smtp 56949 ( 0.11%) 20836812 ( 0.06%) 365.89
ftp 14025 ( 0.03%) 2959239 ( 0.01%) 211.00
pop3 4104 ( 0.01%) 2069656 ( 0.01%) 504.30
imap 7695 ( 0.01%) 6904287 ( 0.02%) 897.24
telnet 27063 ( 0.05%) 2016518 ( 0.01%) 74.51
ssh 26410 ( 0.05%) 9109100 ( 0.03%) 344.91
dns 5591 ( 0.01%) 3740405 ( 0.01%) 669.00
bgp 783 ( 0.00%) 125927 ( 0.00%) 160.83
napster 150 ( 0.00%) 14931 ( 0.00%) 99.54
realaud 34 ( 0.00%) 3680 ( 0.00%) 108.24
rtsp 196 ( 0.00%) 11788 ( 0.00%) 60.14
icecast 914 ( 0.00%) 87353 ( 0.00%) 95.57
hotline 11 ( 0.00%) 1411 ( 0.00%) 128.27
other 5212463 ( 10.12%) 3777284546 ( 10.79%) 724.66
udp 23586346 ( 45.78%) 11678981403 ( 33.35%) 495.16
dns 458287 ( 0.89%) 145209600 ( 0.41%) 316.85
rip 21228991 ( 41.20%) 10770437686 ( 30.75%) 507.35
realaud 7 ( 0.00%) 1125 ( 0.00%) 160.71
halflif 60 ( 0.00%) 9486 ( 0.00%) 158.10
starcra 19 ( 0.00%) 1977 ( 0.00%) 104.05
everque 134 ( 0.00%) 28081 ( 0.00%) 209.56
unreal 3 ( 0.00%) 263 ( 0.00%) 87.67
quake 13 ( 0.00%) 1622 ( 0.00%) 124.77
cuseeme 4 ( 0.00%) 432 ( 0.00%) 108.00
other 1898517 ( 3.68%) 763223542 ( 2.18%) 402.01
icmp 1581173 ( 3.07%) 262041337 ( 0.75%) 165.73
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 8960 ( 0.02%) 3855984 ( 0.01%) 430.36
ip6 1623832 ( 3.15%) 877142671 ( 2.50%) 540.17
pim 75 ( 0.00%) 4500 ( 0.00%) 60.00
other 54650 ( 0.11%) 11984078 ( 0.03%) 219.29
frag 145294 ( 0.28%) 186184801 ( 0.53%) 1281.43
ip6 1063099 ( 2.06%) 1202303901 ( 3.43%) 1130.94
tcp6 969705 ( 1.88%) 1178049868 ( 3.36%) 1214.85
http(s) 825443 ( 1.60%) 1099514239 ( 3.14%) 1332.03
http(c) 73399 ( 0.14%) 7271361 ( 0.02%) 99.07
smtp 294 ( 0.00%) 254052 ( 0.00%) 864.12
ftp 150 ( 0.00%) 16336 ( 0.00%) 108.91
ssh 774 ( 0.00%) 111184 ( 0.00%) 143.65
dns 98 ( 0.00%) 28766 ( 0.00%) 293.53
bgp 92 ( 0.00%) 29053 ( 0.00%) 315.79
other 69455 ( 0.13%) 70824877 ( 0.20%) 1019.72
udp6 61081 ( 0.12%) 18734053 ( 0.05%) 306.71
dns 56393 ( 0.11%) 18156348 ( 0.05%) 321.96
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 2 ( 0.00%) 200 ( 0.00%) 100.00
other 4685 ( 0.01%) 577398 ( 0.00%) 123.24
icmp6 30823 ( 0.06%) 4233447 ( 0.01%) 137.35
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1375 ( 0.00%) 1270905 ( 0.00%) 924.29
tcpdump file: 201208211400.dump.gz (988.67 MB)