Traffic Trace Info
DumpFile: 201208301400.dump
FileSize: 4503.08MB
Id: 201208301400
StartTime: Thu Aug 30 14:00:01 2012
EndTime: Thu Aug 30 14:15:00 2012
TotalTime: 899.85 seconds
TotalCapSize: -691.91MB CapLen: 96 bytes
# of packets: 72022682 (42033.41MB)
AvgRate: 391.85Mbps stddev:51.96M
IP flow (unique src/dst pair) Information
# of flows: 1927074 (avg. 37.37 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 3.2% 2.8% 2.8% 2.3% 2.3% 2.2% 2.2% 2.0% 2.0%
IP address Information
# of IPv4 addresses: 1530748
Top 10 bandwidth usage (bytes/total in %):
19.1% 19.0% 8.8% 7.1% 5.8% 5.6% 5.4% 5.1% 4.8% 4.7%
# of IPv6 addresses: 6861
Top 10 bandwidth usage (bytes/total in %):
22.8% 14.1% 8.2% 5.4% 4.3% 4.2% 4.0% 3.0% 3.0% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201208301400.pktlen.png)
detailed numbers
[ 32- 63]: 4476416
[ 64- 127]: 10138886
[ 128- 255]: 3828837
[ 256- 511]: 945791
[ 512- 1023]: 38391964
[ 1024- 2047]: 14240788
Protocol Breakdown
![[protocol breakdown chart]](201208301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 72022682 (100.00%) 44075223902 (100.00%) 611.96
ip 71374842 ( 99.10%) 43486024742 ( 98.66%) 609.26
tcp 23117929 ( 32.10%) 18837044734 ( 42.74%) 814.82
http(s) 11816642 ( 16.41%) 14061492476 ( 31.90%) 1189.97
http(c) 7631347 ( 10.60%) 2574305704 ( 5.84%) 337.33
squid 150543 ( 0.21%) 54742000 ( 0.12%) 363.63
smtp 63330 ( 0.09%) 13288729 ( 0.03%) 209.83
ftp 15042 ( 0.02%) 3780374 ( 0.01%) 251.32
pop3 4392 ( 0.01%) 3118166 ( 0.01%) 709.96
imap 40646 ( 0.06%) 3326274 ( 0.01%) 81.84
telnet 10252 ( 0.01%) 780648 ( 0.00%) 76.15
ssh 282405 ( 0.39%) 54489389 ( 0.12%) 192.95
dns 2002 ( 0.00%) 268431 ( 0.00%) 134.08
bgp 581 ( 0.00%) 139717 ( 0.00%) 240.48
napster 30 ( 0.00%) 4264 ( 0.00%) 142.13
realaud 140 ( 0.00%) 29663 ( 0.00%) 211.88
rtsp 22 ( 0.00%) 1320 ( 0.00%) 60.00
icecast 18679 ( 0.03%) 12066133 ( 0.03%) 645.97
hotline 10 ( 0.00%) 658 ( 0.00%) 65.80
other 3081866 ( 4.28%) 2055210788 ( 4.66%) 666.87
udp 45511115 ( 63.19%) 23788149908 ( 53.97%) 522.69
dns 384378 ( 0.53%) 87023984 ( 0.20%) 226.40
rip 41802918 ( 58.04%) 21169905416 ( 48.03%) 506.42
realaud 15 ( 0.00%) 1854 ( 0.00%) 123.60
halflif 70 ( 0.00%) 14239 ( 0.00%) 203.41
starcra 40 ( 0.00%) 3122 ( 0.00%) 78.05
everque 121 ( 0.00%) 19923 ( 0.00%) 164.65
unreal 17 ( 0.00%) 2719 ( 0.00%) 159.94
quake 26 ( 0.00%) 3130 ( 0.00%) 120.38
cuseeme 3 ( 0.00%) 270 ( 0.00%) 90.00
other 3323417 ( 4.61%) 2531115223 ( 5.74%) 761.60
icmp 1552198 ( 2.16%) 143365084 ( 0.33%) 92.36
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 8681 ( 0.01%) 3944886 ( 0.01%) 454.43
ip6 1116119 ( 1.55%) 693833702 ( 1.57%) 621.65
pim 90 ( 0.00%) 5400 ( 0.00%) 60.00
other 68526 ( 0.10%) 19661868 ( 0.04%) 286.93
frag 434 ( 0.00%) 417930 ( 0.00%) 962.97
ip6 647840 ( 0.90%) 589199160 ( 1.34%) 909.48
tcp6 556371 ( 0.77%) 550528135 ( 1.25%) 989.50
http(s) 446040 ( 0.62%) 522662708 ( 1.19%) 1171.78
http(c) 94914 ( 0.13%) 10105163 ( 0.02%) 106.47
smtp 63 ( 0.00%) 18486 ( 0.00%) 293.43
ftp 226 ( 0.00%) 22988 ( 0.00%) 101.72
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 115 ( 0.00%) 48571 ( 0.00%) 422.36
bgp 92 ( 0.00%) 25906 ( 0.00%) 281.59
other 14909 ( 0.02%) 17643305 ( 0.04%) 1183.40
udp6 72934 ( 0.10%) 34832525 ( 0.08%) 477.59
dns 57253 ( 0.08%) 16626051 ( 0.04%) 290.40
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
everque 1 ( 0.00%) 94 ( 0.00%) 94.00
unreal 1 ( 0.00%) 116 ( 0.00%) 116.00
quake 1 ( 0.00%) 105 ( 0.00%) 105.00
other 15677 ( 0.02%) 18206053 ( 0.04%) 1161.32
icmp6 17280 ( 0.02%) 2658508 ( 0.01%) 153.85
ip6 85 ( 0.00%) 11530 ( 0.00%) 135.65
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1140 ( 0.00%) 1164382 ( 0.00%) 1021.39
tcpdump file: 201208301400.dump.gz (1264.43 MB)