Traffic Trace Info
DumpFile: 201209011400.dump
FileSize: 2429.99MB
Id: 201209011400
StartTime: Sat Sep 1 14:00:00 2012
EndTime: Sat Sep 1 14:15:01 2012
TotalTime: 900.57 seconds
TotalCapSize: 1856.41MB CapLen: 96 bytes
# of packets: 37589238 (21535.60MB)
AvgRate: 200.62Mbps stddev:44.01M
IP flow (unique src/dst pair) Information
# of flows: 1859898 (avg. 20.21 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.7% 2.2% 1.4% 1.4% 1.3% 1.3% 1.3% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 1478585
Top 10 bandwidth usage (bytes/total in %):
15.6% 13.6% 13.6% 7.0% 6.1% 3.4% 3.3% 3.0% 2.9% 2.7%
# of IPv6 addresses: 5827
Top 10 bandwidth usage (bytes/total in %):
32.4% 29.6% 29.6% 19.2% 3.3% 3.3% 3.2% 2.9% 2.8% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201209011400.pktlen.png)
detailed numbers
[ 32- 63]: 5896877
[ 64- 127]: 6041285
[ 128- 255]: 1816969
[ 256- 511]: 675010
[ 512- 1023]: 14029327
[ 1024- 2047]: 9129770
Protocol Breakdown
![[protocol breakdown chart]](201209011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37589238 (100.00%) 22581714324 (100.00%) 600.75
ip 37066030 ( 98.61%) 22087022062 ( 97.81%) 595.88
tcp 16668035 ( 44.34%) 12515422536 ( 55.42%) 750.86
http(s) 7598204 ( 20.21%) 9507964942 ( 42.10%) 1251.34
http(c) 6203277 ( 16.50%) 1848682927 ( 8.19%) 298.02
squid 50962 ( 0.14%) 24377622 ( 0.11%) 478.35
smtp 43364 ( 0.12%) 8936846 ( 0.04%) 206.09
nntp 8 ( 0.00%) 486 ( 0.00%) 60.75
ftp 17606 ( 0.05%) 3154930 ( 0.01%) 179.20
pop3 832513 ( 2.21%) 55958593 ( 0.25%) 67.22
imap 1741 ( 0.00%) 627159 ( 0.00%) 360.23
telnet 41344 ( 0.11%) 3072565 ( 0.01%) 74.32
ssh 16008 ( 0.04%) 3200226 ( 0.01%) 199.91
dns 2103 ( 0.01%) 267460 ( 0.00%) 127.18
bgp 540 ( 0.00%) 114712 ( 0.00%) 212.43
napster 21 ( 0.00%) 1843 ( 0.00%) 87.76
realaud 106 ( 0.00%) 18850 ( 0.00%) 177.83
rtsp 23 ( 0.00%) 1380 ( 0.00%) 60.00
icecast 869 ( 0.00%) 483569 ( 0.00%) 556.47
hotline 12 ( 0.00%) 1256 ( 0.00%) 104.67
other 1859334 ( 4.95%) 1058557170 ( 4.69%) 569.32
udp 17741559 ( 47.20%) 8647626147 ( 38.29%) 487.42
dns 310821 ( 0.83%) 100419823 ( 0.44%) 323.08
rip 15073449 ( 40.10%) 7637945274 ( 33.82%) 506.72
realaud 10 ( 0.00%) 1033 ( 0.00%) 103.30
halflif 46 ( 0.00%) 10980 ( 0.00%) 238.70
starcra 50 ( 0.00%) 7182 ( 0.00%) 143.64
everque 207 ( 0.00%) 28255 ( 0.00%) 136.50
unreal 23 ( 0.00%) 3635 ( 0.00%) 158.04
quake 7 ( 0.00%) 1031 ( 0.00%) 147.29
cuseeme 1 ( 0.00%) 72 ( 0.00%) 72.00
other 2356835 ( 6.27%) 909154861 ( 4.03%) 385.75
icmp 1417804 ( 3.77%) 136515215 ( 0.60%) 96.29
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 4274 ( 0.01%) 1367532 ( 0.01%) 319.97
ip6 1175369 ( 3.13%) 770269440 ( 3.41%) 655.34
pim 85 ( 0.00%) 5100 ( 0.00%) 60.00
other 58720 ( 0.16%) 15796932 ( 0.07%) 269.02
frag 35514 ( 0.09%) 33241872 ( 0.15%) 936.02
ip6 523208 ( 1.39%) 494692262 ( 2.19%) 945.50
tcp6 465995 ( 1.24%) 479306051 ( 2.12%) 1028.56
http(s) 293164 ( 0.78%) 365755047 ( 1.62%) 1247.61
http(c) 63110 ( 0.17%) 6781897 ( 0.03%) 107.46
smtp 342 ( 0.00%) 74604 ( 0.00%) 218.14
ftp 77 ( 0.00%) 6766 ( 0.00%) 87.87
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 39 ( 0.00%) 17012 ( 0.00%) 436.21
bgp 96 ( 0.00%) 30455 ( 0.00%) 317.24
other 109155 ( 0.29%) 106639262 ( 0.47%) 976.95
udp6 39289 ( 0.10%) 11838527 ( 0.05%) 301.32
dns 37699 ( 0.10%) 11197651 ( 0.05%) 297.03
unreal 1 ( 0.00%) 108 ( 0.00%) 108.00
other 1589 ( 0.00%) 640768 ( 0.00%) 403.25
icmp6 16913 ( 0.04%) 2601336 ( 0.01%) 153.81
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 896 ( 0.00%) 930720 ( 0.00%) 1038.75
tcpdump file: 201209011400.dump.gz (733.75 MB)