Traffic Trace Info
DumpFile: 201208241400.dump
FileSize: 3707.03MB
Id: 201208241400
StartTime: Fri Aug 24 14:00:00 2012
EndTime: Fri Aug 24 14:15:00 2012
TotalTime: 900.05 seconds
TotalCapSize: -1295.12MB CapLen: 96 bytes
# of packets: 59384811 (34731.23MB)
AvgRate: 323.73Mbps stddev:43.54M
IP flow (unique src/dst pair) Information
# of flows: 1921140 (avg. 30.91 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 3.2% 2.5% 2.5% 2.5% 2.1% 2.1% 1.5% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 1495672
Top 10 bandwidth usage (bytes/total in %):
18.1% 18.1% 10.4% 8.6% 7.4% 6.5% 5.4% 4.3% 3.7% 3.4%
# of IPv6 addresses: 6575
Top 10 bandwidth usage (bytes/total in %):
43.1% 43.1% 10.5% 6.3% 4.3% 4.1% 4.0% 3.0% 2.8% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201208241400.pktlen.png)
detailed numbers
[ 32- 63]: 5284327
[ 64- 127]: 7001136
[ 128- 255]: 3298468
[ 256- 511]: 781059
[ 512- 1023]: 31039236
[ 1024- 2047]: 11980585
Protocol Breakdown
![[protocol breakdown chart]](201208241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 59384811 (100.00%) 36418335458 (100.00%) 613.26
ip 58682881 ( 98.82%) 35762115926 ( 98.20%) 609.41
tcp 18911948 ( 31.85%) 16527643898 ( 45.38%) 873.93
http(s) 9911512 ( 16.69%) 12807246546 ( 35.17%) 1292.16
http(c) 5875050 ( 9.89%) 1489048473 ( 4.09%) 253.45
squid 70838 ( 0.12%) 56788872 ( 0.16%) 801.67
smtp 53728 ( 0.09%) 17141964 ( 0.05%) 319.05
ftp 7342 ( 0.01%) 614757 ( 0.00%) 83.73
pop3 2831 ( 0.00%) 1361065 ( 0.00%) 480.77
imap 3764 ( 0.01%) 1643224 ( 0.00%) 436.56
telnet 6661 ( 0.01%) 514276 ( 0.00%) 77.21
ssh 73773 ( 0.12%) 6658138 ( 0.02%) 90.25
dns 2408 ( 0.00%) 282838 ( 0.00%) 117.46
bgp 539 ( 0.00%) 107034 ( 0.00%) 198.58
napster 53 ( 0.00%) 7480 ( 0.00%) 141.13
realaud 19 ( 0.00%) 2787 ( 0.00%) 146.68
rtsp 4101 ( 0.01%) 5808816 ( 0.02%) 1416.44
icecast 48752 ( 0.08%) 37345519 ( 0.10%) 766.03
other 2850577 ( 4.80%) 2103072109 ( 5.77%) 737.77
udp 36736463 ( 61.86%) 18283138447 ( 50.20%) 497.68
dns 415600 ( 0.70%) 114033470 ( 0.31%) 274.38
rip 33728635 ( 56.80%) 17114539454 ( 46.99%) 507.42
realaud 6 ( 0.00%) 512 ( 0.00%) 85.33
halflif 102 ( 0.00%) 24752 ( 0.00%) 242.67
starcra 65 ( 0.00%) 7503 ( 0.00%) 115.43
everque 223 ( 0.00%) 45746 ( 0.00%) 205.14
unreal 12 ( 0.00%) 4886 ( 0.00%) 407.17
quake 19 ( 0.00%) 2985 ( 0.00%) 157.11
cuseeme 7 ( 0.00%) 642 ( 0.00%) 91.71
other 2591579 ( 4.36%) 1054382900 ( 2.90%) 406.85
icmp 1604059 ( 2.70%) 179353545 ( 0.49%) 111.81
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 38256 ( 0.06%) 8466480 ( 0.02%) 221.31
ip6 1328058 ( 2.24%) 746640058 ( 2.05%) 562.20
pim 87 ( 0.00%) 5220 ( 0.00%) 60.00
other 63826 ( 0.11%) 16849118 ( 0.05%) 263.99
frag 25985 ( 0.04%) 29776544 ( 0.08%) 1145.91
ip6 701930 ( 1.18%) 656219532 ( 1.80%) 934.88
tcp6 620912 ( 1.05%) 631865555 ( 1.74%) 1017.64
http(s) 485185 ( 0.82%) 600482128 ( 1.65%) 1237.64
http(c) 114720 ( 0.19%) 10916490 ( 0.03%) 95.16
smtp 365 ( 0.00%) 222909 ( 0.00%) 610.71
ftp 633 ( 0.00%) 80440 ( 0.00%) 127.08
pop3 1 ( 0.00%) 98 ( 0.00%) 98.00
ssh 45 ( 0.00%) 5958 ( 0.00%) 132.40
dns 59 ( 0.00%) 22834 ( 0.00%) 387.02
bgp 100 ( 0.00%) 34876 ( 0.00%) 348.76
other 19804 ( 0.03%) 20099822 ( 0.06%) 1014.94
udp6 60614 ( 0.10%) 20085827 ( 0.06%) 331.37
dns 55494 ( 0.09%) 17103492 ( 0.05%) 308.20
everque 1 ( 0.00%) 111 ( 0.00%) 111.00
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
other 5118 ( 0.01%) 2982116 ( 0.01%) 582.67
icmp6 18916 ( 0.03%) 2942915 ( 0.01%) 155.58
ip6 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1372 ( 0.00%) 1309507 ( 0.00%) 954.45
tcpdump file: 201208241400.dump.gz (1051.42 MB)