Traffic Trace Info
DumpFile: 201208261400.dump
FileSize: 3840.43MB
Id: 201208261400
StartTime: Sun Aug 26 14:00:00 2012
EndTime: Sun Aug 26 14:15:01 2012
TotalTime: 900.56 seconds
TotalCapSize: -1201.89MB CapLen: 96 bytes
# of packets: 62017827 (40082.16MB)
AvgRate: 373.38Mbps stddev:61.61M
IP flow (unique src/dst pair) Information
# of flows: 1670187 (avg. 37.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.7% 1.6% 1.6% 1.6% 1.6% 1.4% 1.4% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 1366048
Top 10 bandwidth usage (bytes/total in %):
16.9% 15.3% 15.3% 7.2% 4.5% 4.2% 4.0% 4.0% 3.5% 3.0%
# of IPv6 addresses: 6065
Top 10 bandwidth usage (bytes/total in %):
18.6% 18.5% 14.1% 10.7% 8.1% 6.2% 5.1% 4.9% 4.5% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201208261400.pktlen.png)
detailed numbers
[ 32- 63]: 5366051
[ 64- 127]: 6642831
[ 128- 255]: 3071859
[ 256- 511]: 700143
[ 512- 1023]: 30218761
[ 1024- 2047]: 16018182
Protocol Breakdown
![[protocol breakdown chart]](201208261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 62017827 (100.00%) 42029193526 (100.00%) 677.70
ip 61754240 ( 99.57%) 41831195265 ( 99.53%) 677.38
tcp 21967936 ( 35.42%) 22165880607 ( 52.74%) 1009.01
http(s) 13982595 ( 22.55%) 18895720996 ( 44.96%) 1351.37
http(c) 5911900 ( 9.53%) 1666104598 ( 3.96%) 281.82
squid 572824 ( 0.92%) 617257228 ( 1.47%) 1077.57
smtp 66078 ( 0.11%) 26162219 ( 0.06%) 395.93
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 10255 ( 0.02%) 938424 ( 0.00%) 91.51
pop3 866 ( 0.00%) 300315 ( 0.00%) 346.78
imap 42465 ( 0.07%) 62251653 ( 0.15%) 1465.95
telnet 7209 ( 0.01%) 551122 ( 0.00%) 76.45
ssh 17961 ( 0.03%) 14708867 ( 0.03%) 818.93
dns 1246 ( 0.00%) 222565 ( 0.00%) 178.62
bgp 540 ( 0.00%) 95695 ( 0.00%) 177.21
napster 62 ( 0.00%) 5662 ( 0.00%) 91.32
realaud 146 ( 0.00%) 21486 ( 0.00%) 147.16
rtsp 24 ( 0.00%) 7488 ( 0.00%) 312.00
icecast 640 ( 0.00%) 87022 ( 0.00%) 135.97
hotline 17 ( 0.00%) 1121 ( 0.00%) 65.94
other 1353102 ( 2.18%) 881443780 ( 2.10%) 651.42
udp 36951596 ( 59.58%) 18656755353 ( 44.39%) 504.90
dns 487191 ( 0.79%) 124358791 ( 0.30%) 255.26
rip 32737931 ( 52.79%) 16590884988 ( 39.47%) 506.78
realaud 12 ( 0.00%) 1179 ( 0.00%) 98.25
halflif 107 ( 0.00%) 18325 ( 0.00%) 171.26
starcra 24 ( 0.00%) 1795 ( 0.00%) 74.79
everque 141 ( 0.00%) 21311 ( 0.00%) 151.14
unreal 6 ( 0.00%) 766 ( 0.00%) 127.67
quake 67 ( 0.00%) 4931 ( 0.00%) 73.60
cuseeme 7 ( 0.00%) 623 ( 0.00%) 89.00
other 3725992 ( 6.01%) 1941399098 ( 4.62%) 521.04
icmp 1528610 ( 2.46%) 167404500 ( 0.40%) 109.51
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 4556 ( 0.01%) 1919512 ( 0.00%) 421.32
ip6 1239142 ( 2.00%) 824698463 ( 1.96%) 665.54
pim 80 ( 0.00%) 4800 ( 0.00%) 60.00
other 62135 ( 0.10%) 14512760 ( 0.03%) 233.57
frag 34830 ( 0.06%) 35473363 ( 0.08%) 1018.47
ip6 263587 ( 0.43%) 197998261 ( 0.47%) 751.17
tcp6 194969 ( 0.31%) 177197539 ( 0.42%) 908.85
http(s) 132389 ( 0.21%) 145350610 ( 0.35%) 1097.91
http(c) 36239 ( 0.06%) 3657113 ( 0.01%) 100.92
smtp 407 ( 0.00%) 101880 ( 0.00%) 250.32
ftp 147 ( 0.00%) 16031 ( 0.00%) 109.05
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 33 ( 0.00%) 5981 ( 0.00%) 181.24
bgp 104 ( 0.00%) 27183 ( 0.00%) 261.38
other 25638 ( 0.04%) 28037733 ( 0.07%) 1093.60
udp6 41303 ( 0.07%) 14690678 ( 0.03%) 355.68
dns 36013 ( 0.06%) 10671595 ( 0.03%) 296.33
other 5290 ( 0.01%) 4019083 ( 0.01%) 759.75
icmp6 23378 ( 0.04%) 3130873 ( 0.01%) 133.92
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3823 ( 0.01%) 2963679 ( 0.01%) 775.22
tcpdump file: 201208261400.dump.gz (1086.98 MB)