Traffic Trace Info
DumpFile: 201208251400.dump
FileSize: 3661.34MB
Id: 201208251400
StartTime: Sat Aug 25 14:00:00 2012
EndTime: Sat Aug 25 14:15:01 2012
TotalTime: 900.76 seconds
TotalCapSize: -1322.44MB CapLen: 96 bytes
# of packets: 58180563 (37676.00MB)
AvgRate: 350.91Mbps stddev:55.92M
IP flow (unique src/dst pair) Information
# of flows: 1781502 (avg. 32.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 2.3% 2.3% 1.6% 1.5% 1.5% 1.3% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 1436424
Top 10 bandwidth usage (bytes/total in %):
16.3% 14.5% 14.5% 6.3% 6.3% 6.3% 6.0% 3.9% 3.8% 2.7%
# of IPv6 addresses: 5887
Top 10 bandwidth usage (bytes/total in %):
29.7% 22.3% 15.2% 15.2% 5.2% 4.8% 3.9% 3.8% 3.8% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201208251400.pktlen.png)
detailed numbers
[ 32- 63]: 5862424
[ 64- 127]: 6265639
[ 128- 255]: 2919292
[ 256- 511]: 617053
[ 512- 1023]: 27123958
[ 1024- 2047]: 15392197
Protocol Breakdown
![[protocol breakdown chart]](201208251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 58180563 (100.00%) 39506147480 (100.00%) 679.03
ip 57729752 ( 99.23%) 39083909491 ( 98.93%) 677.02
tcp 22551118 ( 38.76%) 22303239843 ( 56.46%) 989.01
http(s) 14391907 ( 24.74%) 19431371658 ( 49.19%) 1350.16
http(c) 5705430 ( 9.81%) 1335827857 ( 3.38%) 234.13
squid 28561 ( 0.05%) 14022501 ( 0.04%) 490.97
smtp 48640 ( 0.08%) 12281730 ( 0.03%) 252.50
ftp 5021 ( 0.01%) 423726 ( 0.00%) 84.39
pop3 1413 ( 0.00%) 379557 ( 0.00%) 268.62
imap 1830 ( 0.00%) 1030464 ( 0.00%) 563.10
telnet 7442 ( 0.01%) 571950 ( 0.00%) 76.85
ssh 21570 ( 0.04%) 18755411 ( 0.05%) 869.51
dns 1489 ( 0.00%) 243827 ( 0.00%) 163.75
bgp 520 ( 0.00%) 95722 ( 0.00%) 184.08
napster 1 ( 0.00%) 66 ( 0.00%) 66.00
realaud 554 ( 0.00%) 69251 ( 0.00%) 125.00
icecast 393 ( 0.00%) 71090 ( 0.00%) 180.89
hotline 31 ( 0.00%) 2839 ( 0.00%) 91.58
other 2336316 ( 4.02%) 1488092194 ( 3.77%) 636.94
udp 32232608 ( 55.40%) 15985425823 ( 40.46%) 495.94
dns 336339 ( 0.58%) 99871085 ( 0.25%) 296.94
rip 29176174 ( 50.15%) 14827721488 ( 37.53%) 508.21
realaud 5 ( 0.00%) 475 ( 0.00%) 95.00
halflif 388 ( 0.00%) 311141 ( 0.00%) 801.91
starcra 27 ( 0.00%) 6202 ( 0.00%) 229.70
everque 259 ( 0.00%) 56542 ( 0.00%) 218.31
unreal 5 ( 0.00%) 1239 ( 0.00%) 247.80
quake 26 ( 0.00%) 6885 ( 0.00%) 264.81
cuseeme 2 ( 0.00%) 250 ( 0.00%) 125.00
other 2719275 ( 4.67%) 1057395301 ( 2.68%) 388.85
icmp 1585482 ( 2.73%) 162919683 ( 0.41%) 102.76
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 4490 ( 0.01%) 1908044 ( 0.00%) 424.95
ip6 1298483 ( 2.23%) 614249989 ( 1.55%) 473.05
pim 82 ( 0.00%) 4920 ( 0.00%) 60.00
other 57304 ( 0.10%) 16141919 ( 0.04%) 281.69
frag 65310 ( 0.11%) 59821657 ( 0.15%) 915.96
ip6 450811 ( 0.77%) 422237989 ( 1.07%) 936.62
tcp6 331514 ( 0.57%) 339567495 ( 0.86%) 1024.29
http(s) 212028 ( 0.36%) 227189081 ( 0.58%) 1071.51
http(c) 28754 ( 0.05%) 3604907 ( 0.01%) 125.37
smtp 309 ( 0.00%) 91525 ( 0.00%) 296.20
ftp 188 ( 0.00%) 19992 ( 0.00%) 106.34
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 42 ( 0.00%) 13156 ( 0.00%) 313.24
bgp 108 ( 0.00%) 38124 ( 0.00%) 353.00
other 90073 ( 0.15%) 108609702 ( 0.27%) 1205.80
udp6 100031 ( 0.17%) 78985655 ( 0.20%) 789.61
dns 44091 ( 0.08%) 13029355 ( 0.03%) 295.51
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
other 55939 ( 0.10%) 65956193 ( 0.17%) 1179.07
icmp6 18334 ( 0.03%) 2864324 ( 0.01%) 156.23
ip6 85 ( 0.00%) 11530 ( 0.00%) 135.65
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 817 ( 0.00%) 804905 ( 0.00%) 985.20
tcpdump file: 201208251400.dump.gz (1043.24 MB)