Traffic Trace Info
DumpFile: 201208291400.dump
FileSize: 3545.39MB
Id: 201208291400
StartTime: Wed Aug 29 14:00:01 2012
EndTime: Wed Aug 29 14:15:00 2012
TotalTime: 899.23 seconds
TotalCapSize: -1401.24MB CapLen: 96 bytes
# of packets: 55746739 (34029.53MB)
AvgRate: 317.42Mbps stddev:48.28M
IP flow (unique src/dst pair) Information
# of flows: 1867164 (avg. 29.86 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.5% 2.2% 1.9% 1.9% 1.7% 1.5% 1.5% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 1491091
Top 10 bandwidth usage (bytes/total in %):
15.6% 15.6% 7.1% 6.2% 6.2% 6.1% 4.8% 4.2% 3.9% 3.4%
# of IPv6 addresses: 7231
Top 10 bandwidth usage (bytes/total in %):
36.5% 24.9% 21.4% 13.1% 11.8% 7.6% 5.9% 3.9% 3.0% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201208291400.pktlen.png)
detailed numbers
[ 32- 63]: 4286014
[ 64- 127]: 7687245
[ 128- 255]: 2877088
[ 256- 511]: 852521
[ 512- 1023]: 27075839
[ 1024- 2047]: 12968032
Protocol Breakdown
![[protocol breakdown chart]](201208291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 55746739 (100.00%) 35682547271 (100.00%) 640.08
ip 54924034 ( 98.52%) 34838667773 ( 97.64%) 634.31
tcp 19593033 ( 35.15%) 17182530806 ( 48.15%) 876.97
http(s) 10434848 ( 18.72%) 13382584898 ( 37.50%) 1282.49
http(c) 5339779 ( 9.58%) 1135462166 ( 3.18%) 212.64
squid 62213 ( 0.11%) 20719489 ( 0.06%) 333.04
smtp 67621 ( 0.12%) 15756799 ( 0.04%) 233.02
ftp 14772 ( 0.03%) 3946075 ( 0.01%) 267.13
pop3 8184 ( 0.01%) 8382575 ( 0.02%) 1024.26
imap 4207 ( 0.01%) 3869728 ( 0.01%) 919.83
telnet 9559 ( 0.02%) 728951 ( 0.00%) 76.26
ssh 63236 ( 0.11%) 10393340 ( 0.03%) 164.36
dns 1868 ( 0.00%) 651667 ( 0.00%) 348.86
bgp 546 ( 0.00%) 117345 ( 0.00%) 214.92
napster 154 ( 0.00%) 12397 ( 0.00%) 80.50
realaud 51 ( 0.00%) 5508 ( 0.00%) 108.00
rtsp 36 ( 0.00%) 2202 ( 0.00%) 61.17
icecast 794 ( 0.00%) 92274 ( 0.00%) 116.21
hotline 17 ( 0.00%) 1834 ( 0.00%) 107.88
other 3585148 ( 6.43%) 2599803558 ( 7.29%) 725.16
udp 32282906 ( 57.91%) 16447302600 ( 46.09%) 509.47
dns 475360 ( 0.85%) 139922312 ( 0.39%) 294.35
rip 29163794 ( 52.31%) 14843109404 ( 41.60%) 508.96
realaud 16 ( 0.00%) 5049 ( 0.00%) 315.56
halflif 51 ( 0.00%) 10288 ( 0.00%) 201.73
starcra 34 ( 0.00%) 2788 ( 0.00%) 82.00
everque 143 ( 0.00%) 21866 ( 0.00%) 152.91
unreal 5 ( 0.00%) 717 ( 0.00%) 143.40
quake 13 ( 0.00%) 1934 ( 0.00%) 148.77
other 2643071 ( 4.74%) 1464129353 ( 4.10%) 553.95
icmp 1518590 ( 2.72%) 169626628 ( 0.48%) 111.70
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 19571 ( 0.04%) 5097474 ( 0.01%) 260.46
ip6 1453063 ( 2.61%) 1018174190 ( 2.85%) 700.71
pim 90 ( 0.00%) 5400 ( 0.00%) 60.00
other 56596 ( 0.10%) 15911405 ( 0.04%) 281.14
frag 57079 ( 0.10%) 51712540 ( 0.14%) 905.98
ip6 822705 ( 1.48%) 843879498 ( 2.36%) 1025.74
tcp6 738329 ( 1.32%) 821200060 ( 2.30%) 1112.24
http(s) 638283 ( 1.14%) 797817947 ( 2.24%) 1249.94
http(c) 82572 ( 0.15%) 9572145 ( 0.03%) 115.92
smtp 184 ( 0.00%) 99709 ( 0.00%) 541.90
ftp 223 ( 0.00%) 22730 ( 0.00%) 101.93
pop3 2 ( 0.00%) 148 ( 0.00%) 74.00
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 122 ( 0.00%) 42784 ( 0.00%) 350.69
bgp 90 ( 0.00%) 25394 ( 0.00%) 282.16
other 16841 ( 0.03%) 13618195 ( 0.04%) 808.63
udp6 63426 ( 0.11%) 18041190 ( 0.05%) 284.44
dns 61769 ( 0.11%) 17824008 ( 0.05%) 288.56
unreal 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 2 ( 0.00%) 207 ( 0.00%) 103.50
other 1654 ( 0.00%) 216869 ( 0.00%) 131.12
icmp6 18998 ( 0.03%) 2747200 ( 0.01%) 144.60
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1838 ( 0.00%) 1875556 ( 0.01%) 1020.43
tcpdump file: 201208291400.dump.gz (1013.58 MB)