Traffic Trace Info
DumpFile: 201208231400.dump
FileSize: 2525.32MB
Id: 201208231400
StartTime: Thu Aug 23 14:00:01 2012
EndTime: Thu Aug 23 14:15:00 2012
TotalTime: 899.79 seconds
TotalCapSize: 1955.30MB CapLen: 96 bytes
# of packets: 37355754 (24506.13MB)
AvgRate: 228.32Mbps stddev:39.43M
IP flow (unique src/dst pair) Information
# of flows: 1877654 (avg. 19.89 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 2.6% 2.3% 1.7% 1.7% 1.6% 1.6% 1.6% 1.5% 1.3%
IP address Information
# of IPv4 addresses: 1385874
Top 10 bandwidth usage (bytes/total in %):
8.2% 7.9% 6.3% 6.3% 5.9% 4.5% 4.5% 4.0% 4.0% 3.9%
# of IPv6 addresses: 6697
Top 10 bandwidth usage (bytes/total in %):
39.1% 31.6% 12.2% 5.0% 4.7% 3.4% 3.4% 3.4% 2.9% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201208231400.pktlen.png)
detailed numbers
[ 32- 63]: 4101177
[ 64- 127]: 8954651
[ 128- 255]: 1893720
[ 256- 511]: 1029899
[ 512- 1023]: 8081692
[ 1024- 2047]: 13294615
Protocol Breakdown
![[protocol breakdown chart]](201208231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37355754 (100.00%) 25696543446 (100.00%) 687.89
ip 36684107 ( 98.20%) 25087064470 ( 97.63%) 683.87
tcp 19093215 ( 51.11%) 16205221175 ( 63.06%) 848.74
http(s) 9565772 ( 25.61%) 11193197701 ( 43.56%) 1170.13
http(c) 6440371 ( 17.24%) 2897378348 ( 11.28%) 449.88
squid 50285 ( 0.13%) 15321664 ( 0.06%) 304.70
smtp 78101 ( 0.21%) 31632473 ( 0.12%) 405.02
ftp 5658 ( 0.02%) 516655 ( 0.00%) 91.31
pop3 5211 ( 0.01%) 3832636 ( 0.01%) 735.49
imap 3696 ( 0.01%) 1305163 ( 0.01%) 353.13
telnet 42483 ( 0.11%) 3165070 ( 0.01%) 74.50
ssh 44138 ( 0.12%) 5467398 ( 0.02%) 123.87
dns 1787 ( 0.00%) 238592 ( 0.00%) 133.52
bgp 564 ( 0.00%) 122916 ( 0.00%) 217.94
napster 26 ( 0.00%) 3709 ( 0.00%) 142.65
realaud 19 ( 0.00%) 2392 ( 0.00%) 125.89
rtsp 23416 ( 0.06%) 31330806 ( 0.12%) 1338.01
icecast 832 ( 0.00%) 134248 ( 0.00%) 161.36
hotline 11 ( 0.00%) 1135 ( 0.00%) 103.18
other 2830845 ( 7.58%) 2021570269 ( 7.87%) 714.12
udp 14469679 ( 38.73%) 8016981023 ( 31.20%) 554.05
dns 391401 ( 1.05%) 92976729 ( 0.36%) 237.55
rip 7860308 ( 21.04%) 3971529468 ( 15.46%) 505.26
realaud 21 ( 0.00%) 1747 ( 0.00%) 83.19
halflif 33 ( 0.00%) 4326 ( 0.00%) 131.09
starcra 42 ( 0.00%) 4962 ( 0.00%) 118.14
everque 377 ( 0.00%) 54748 ( 0.00%) 145.22
unreal 2 ( 0.00%) 120 ( 0.00%) 60.00
quake 92 ( 0.00%) 7812 ( 0.00%) 84.91
other 6144856 ( 16.45%) 3947884173 ( 15.36%) 642.47
icmp 1629670 ( 4.36%) 174539227 ( 0.68%) 107.10
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 9849 ( 0.03%) 2862678 ( 0.01%) 290.66
ip6 1421974 ( 3.81%) 670467506 ( 2.61%) 471.50
pim 92 ( 0.00%) 5520 ( 0.00%) 60.00
other 59444 ( 0.16%) 16968181 ( 0.07%) 285.45
frag 245240 ( 0.66%) 186105781 ( 0.72%) 758.87
ip6 671647 ( 1.80%) 609478976 ( 2.37%) 907.44
tcp6 562156 ( 1.50%) 565604516 ( 2.20%) 1006.13
http(s) 307612 ( 0.82%) 328931553 ( 1.28%) 1069.31
http(c) 64178 ( 0.17%) 6955505 ( 0.03%) 108.38
smtp 2256 ( 0.01%) 2457448 ( 0.01%) 1089.29
ftp 268 ( 0.00%) 29022 ( 0.00%) 108.29
pop3 1 ( 0.00%) 98 ( 0.00%) 98.00
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 55 ( 0.00%) 20009 ( 0.00%) 363.80
bgp 92 ( 0.00%) 29213 ( 0.00%) 317.53
other 187682 ( 0.50%) 227180660 ( 0.88%) 1210.46
udp6 83579 ( 0.22%) 39220195 ( 0.15%) 469.26
dns 57727 ( 0.15%) 18483739 ( 0.07%) 320.19
realaud 1 ( 0.00%) 111 ( 0.00%) 111.00
cuseeme 1 ( 0.00%) 107 ( 0.00%) 107.00
other 25850 ( 0.07%) 20736238 ( 0.08%) 802.18
icmp6 24533 ( 0.07%) 3432148 ( 0.01%) 139.90
ip6 85 ( 0.00%) 11530 ( 0.00%) 135.65
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1264 ( 0.00%) 1206507 ( 0.00%) 954.52
tcpdump file: 201208231400.dump.gz (797.49 MB)