Traffic Trace Info
DumpFile: 201208311400.dump
FileSize: 3719.98MB
Id: 201208311400
StartTime: Fri Aug 31 14:00:01 2012
EndTime: Fri Aug 31 14:15:01 2012
TotalTime: 900.36 seconds
TotalCapSize: -1298.58MB CapLen: 96 bytes
# of packets: 60460683 (34871.27MB)
AvgRate: 324.91Mbps stddev:56.61M
IP flow (unique src/dst pair) Information
# of flows: 1884430 (avg. 32.08 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.6% 2.4% 2.4% 2.4% 2.4% 2.1% 1.5% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 1498753
Top 10 bandwidth usage (bytes/total in %):
19.4% 19.4% 9.2% 8.9% 6.5% 6.2% 6.0% 3.8% 3.2% 2.9%
# of IPv6 addresses: 6901
Top 10 bandwidth usage (bytes/total in %):
15.3% 9.8% 7.2% 6.9% 5.7% 5.6% 4.3% 3.9% 3.8% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201208311400.pktlen.png)
detailed numbers
[ 32- 63]: 4422344
[ 64- 127]: 7603468
[ 128- 255]: 3361241
[ 256- 511]: 984174
[ 512- 1023]: 32659128
[ 1024- 2047]: 11430328
Protocol Breakdown
![[protocol breakdown chart]](201208311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 60460683 (100.00%) 36565180674 (100.00%) 604.78
ip 59845773 ( 98.98%) 36072388531 ( 98.65%) 602.76
tcp 16832074 ( 27.84%) 14284071895 ( 39.06%) 848.62
http(s) 8789395 ( 14.54%) 11093418537 ( 30.34%) 1262.14
http(c) 6215256 ( 10.28%) 2183739880 ( 5.97%) 351.35
squid 130404 ( 0.22%) 52332823 ( 0.14%) 401.31
smtp 66830 ( 0.11%) 16604691 ( 0.05%) 248.46
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 19383 ( 0.03%) 3467952 ( 0.01%) 178.92
pop3 3849 ( 0.01%) 1244704 ( 0.00%) 323.38
imap 4452 ( 0.01%) 2885634 ( 0.01%) 648.17
telnet 8322 ( 0.01%) 636196 ( 0.00%) 76.45
ssh 150725 ( 0.25%) 106321783 ( 0.29%) 705.40
dns 1656 ( 0.00%) 302442 ( 0.00%) 182.63
bgp 571 ( 0.00%) 133521 ( 0.00%) 233.84
napster 15 ( 0.00%) 1184 ( 0.00%) 78.93
realaud 169 ( 0.00%) 23019 ( 0.00%) 136.21
rtsp 53 ( 0.00%) 3188 ( 0.00%) 60.15
icecast 14494 ( 0.02%) 8227989 ( 0.02%) 567.68
hotline 71 ( 0.00%) 6264 ( 0.00%) 88.23
other 1426423 ( 2.36%) 814721722 ( 2.23%) 571.16
udp 40303018 ( 66.66%) 21028727138 ( 57.51%) 521.77
dns 519718 ( 0.86%) 135342181 ( 0.37%) 260.41
rip 35585939 ( 58.86%) 18021069224 ( 49.28%) 506.41
realaud 24 ( 0.00%) 3057 ( 0.00%) 127.38
halflif 54 ( 0.00%) 8718 ( 0.00%) 161.44
starcra 43 ( 0.00%) 6109 ( 0.00%) 142.07
everque 4754 ( 0.01%) 2553957 ( 0.01%) 537.22
unreal 19 ( 0.00%) 3981 ( 0.00%) 209.53
quake 60 ( 0.00%) 4399 ( 0.00%) 73.32
cuseeme 7 ( 0.00%) 931 ( 0.00%) 133.00
other 4185240 ( 6.92%) 2869163166 ( 7.85%) 685.54
icmp 1534902 ( 2.54%) 167233114 ( 0.46%) 108.95
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 14312 ( 0.02%) 2612784 ( 0.01%) 182.56
ip6 1099910 ( 1.82%) 570097231 ( 1.56%) 518.31
pim 73 ( 0.00%) 4380 ( 0.00%) 60.00
other 61300 ( 0.10%) 19622829 ( 0.05%) 320.11
frag 24715 ( 0.04%) 17914852 ( 0.05%) 724.86
ip6 614910 ( 1.02%) 492792143 ( 1.35%) 801.41
tcp6 535484 ( 0.89%) 471253382 ( 1.29%) 880.05
http(s) 403217 ( 0.67%) 448492321 ( 1.23%) 1112.29
http(c) 123256 ( 0.20%) 12749089 ( 0.03%) 103.44
squid 29 ( 0.00%) 6391 ( 0.00%) 220.38
smtp 81 ( 0.00%) 19591 ( 0.00%) 241.86
ftp 227 ( 0.00%) 23074 ( 0.00%) 101.65
ssh 296 ( 0.00%) 29244 ( 0.00%) 98.80
dns 92 ( 0.00%) 33187 ( 0.00%) 360.73
bgp 96 ( 0.00%) 31152 ( 0.00%) 324.50
other 8190 ( 0.01%) 9869333 ( 0.03%) 1205.05
udp6 60538 ( 0.10%) 17582842 ( 0.05%) 290.44
dns 59627 ( 0.10%) 17484826 ( 0.05%) 293.24
everque 1 ( 0.00%) 96 ( 0.00%) 96.00
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 909 ( 0.00%) 97814 ( 0.00%) 107.61
icmp6 17583 ( 0.03%) 2736110 ( 0.01%) 155.61
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1189 ( 0.00%) 1204013 ( 0.00%) 1012.63
tcpdump file: 201208311400.dump.gz (1039.62 MB)