Traffic Trace Info
DumpFile: 201208271400.dump
FileSize: 4599.00MB
Id: 201208271400
StartTime: Mon Aug 27 14:00:00 2012
EndTime: Mon Aug 27 14:15:01 2012
TotalTime: 900.79 seconds
TotalCapSize: -647.71MB CapLen: 96 bytes
# of packets: 75412820 (44648.69MB)
AvgRate: 415.82Mbps stddev:69.11M
IP flow (unique src/dst pair) Information
# of flows: 2005903 (avg. 37.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.5% 5.5% 4.6% 2.8% 2.4% 2.1% 2.1% 2.1% 1.9% 1.9%
IP address Information
# of IPv4 addresses: 1551360
Top 10 bandwidth usage (bytes/total in %):
19.3% 19.3% 13.9% 9.9% 8.9% 7.9% 7.0% 5.4% 5.4% 4.8%
# of IPv6 addresses: 6936
Top 10 bandwidth usage (bytes/total in %):
13.9% 11.0% 7.9% 7.0% 6.5% 6.3% 5.8% 4.5% 3.5% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201208271400.pktlen.png)
detailed numbers
[ 32- 63]: 6639243
[ 64- 127]: 6958598
[ 128- 255]: 4411931
[ 256- 511]: 634578
[ 512- 1023]: 41933461
[ 1024- 2047]: 14835009
Protocol Breakdown
![[protocol breakdown chart]](201208271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 75412820 (100.00%) 46817545510 (100.00%) 620.82
ip 74980999 ( 99.43%) 46468904355 ( 99.26%) 619.74
tcp 22857754 ( 30.31%) 20771121294 ( 44.37%) 908.71
http(s) 9550522 ( 12.66%) 12502155419 ( 26.70%) 1309.05
http(c) 4520692 ( 5.99%) 853812444 ( 1.82%) 188.87
squid 48137 ( 0.06%) 35624174 ( 0.08%) 740.06
smtp 98312 ( 0.13%) 15547047 ( 0.03%) 158.14
nntp 12 ( 0.00%) 732 ( 0.00%) 61.00
ftp 4312 ( 0.01%) 415783 ( 0.00%) 96.42
pop3 2819 ( 0.00%) 1286608 ( 0.00%) 456.41
imap 2870 ( 0.00%) 725434 ( 0.00%) 252.76
telnet 9242 ( 0.01%) 700490 ( 0.00%) 75.79
ssh 13232 ( 0.02%) 9375828 ( 0.02%) 708.57
dns 1529 ( 0.00%) 235654 ( 0.00%) 154.12
bgp 500 ( 0.00%) 91691 ( 0.00%) 183.38
napster 147 ( 0.00%) 17572 ( 0.00%) 119.54
realaud 20 ( 0.00%) 1525 ( 0.00%) 76.25
rtsp 4671 ( 0.01%) 6018432 ( 0.01%) 1288.47
icecast 9915 ( 0.01%) 6008406 ( 0.01%) 605.99
hotline 29 ( 0.00%) 3435 ( 0.00%) 118.45
other 8590787 ( 11.39%) 7339100260 ( 15.68%) 854.30
udp 49054300 ( 65.05%) 24678915820 ( 52.71%) 503.09
dns 478319 ( 0.63%) 123177399 ( 0.26%) 257.52
rip 45952369 ( 60.93%) 23305872234 ( 49.78%) 507.17
realaud 20 ( 0.00%) 1560 ( 0.00%) 78.00
halflif 82 ( 0.00%) 14024 ( 0.00%) 171.02
starcra 16 ( 0.00%) 1883 ( 0.00%) 117.69
everque 1742 ( 0.00%) 1321720 ( 0.00%) 758.74
unreal 13 ( 0.00%) 943 ( 0.00%) 72.54
quake 20 ( 0.00%) 2670 ( 0.00%) 133.50
cuseeme 3 ( 0.00%) 463 ( 0.00%) 154.33
other 2621578 ( 3.48%) 1248475581 ( 2.67%) 476.23
icmp 1614582 ( 2.14%) 160802544 ( 0.34%) 99.59
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 12732 ( 0.02%) 7485352 ( 0.02%) 587.92
ip6 1379104 ( 1.83%) 836201806 ( 1.79%) 606.34
pim 87 ( 0.00%) 5220 ( 0.00%) 60.00
other 62256 ( 0.08%) 14353159 ( 0.03%) 230.55
frag 32742 ( 0.04%) 32593919 ( 0.07%) 995.48
ip6 431821 ( 0.57%) 348641155 ( 0.74%) 807.37
tcp6 318208 ( 0.42%) 289602935 ( 0.62%) 910.11
http(s) 265041 ( 0.35%) 272856608 ( 0.58%) 1029.49
http(c) 36453 ( 0.05%) 3981309 ( 0.01%) 109.22
smtp 71 ( 0.00%) 14753 ( 0.00%) 207.79
ftp 225 ( 0.00%) 22953 ( 0.00%) 102.01
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 116 ( 0.00%) 38998 ( 0.00%) 336.19
bgp 93 ( 0.00%) 25974 ( 0.00%) 279.29
other 16197 ( 0.02%) 12661332 ( 0.03%) 781.71
udp6 91397 ( 0.12%) 54348751 ( 0.12%) 594.64
dns 59518 ( 0.08%) 17792320 ( 0.04%) 298.94
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 1 ( 0.00%) 97 ( 0.00%) 97.00
other 31877 ( 0.04%) 36556227 ( 0.08%) 1146.79
icmp6 20441 ( 0.03%) 3040534 ( 0.01%) 148.75
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1660 ( 0.00%) 1633307 ( 0.00%) 983.92
tcpdump file: 201208271400.dump.gz (1269.43 MB)