Traffic Trace Info
DumpFile: 201209031400.dump
FileSize: 4126.31MB
Id: 201209031400
StartTime: Mon Sep 3 14:00:00 2012
EndTime: Mon Sep 3 14:15:00 2012
TotalTime: 899.92 seconds
TotalCapSize: -994.91MB CapLen: 96 bytes
# of packets: 67188266 (32207.17MB)
AvgRate: 300.24Mbps stddev:41.18M
IP flow (unique src/dst pair) Information
# of flows: 12340239 (avg. 5.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.0% 2.0% 2.0% 1.7% 1.7% 1.7% 1.3% 1.3% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 9768094
Top 10 bandwidth usage (bytes/total in %):
15.3% 15.3% 9.1% 8.4% 7.0% 6.7% 5.1% 4.8% 4.4% 3.3%
# of IPv6 addresses: 7046
Top 10 bandwidth usage (bytes/total in %):
21.0% 13.6% 12.6% 7.5% 7.5% 6.0% 4.1% 3.5% 3.2% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201209031400.pktlen.png)
detailed numbers
[ 32- 63]: 19567500
[ 64- 127]: 8055453
[ 128- 255]: 2650883
[ 256- 511]: 635338
[ 512- 1023]: 24141334
[ 1024- 2047]: 12137758
Protocol Breakdown
![[protocol breakdown chart]](201209031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 67188266 (100.00%) 33771664825 (100.00%) 502.64
ip 66444108 ( 98.89%) 33091841571 ( 97.99%) 498.04
tcp 19180404 ( 28.55%) 16676607096 ( 49.38%) 869.46
http(s) 10609173 ( 15.79%) 13814351949 ( 40.91%) 1302.11
http(c) 5887094 ( 8.76%) 1512225894 ( 4.48%) 256.87
squid 41844 ( 0.06%) 22705092 ( 0.07%) 542.61
smtp 67160 ( 0.10%) 25897898 ( 0.08%) 385.61
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 14973 ( 0.02%) 2960441 ( 0.01%) 197.72
pop3 3377 ( 0.01%) 1599543 ( 0.00%) 473.66
imap 2711 ( 0.00%) 412930 ( 0.00%) 152.32
telnet 62165 ( 0.09%) 4603442 ( 0.01%) 74.05
ssh 337261 ( 0.50%) 65366500 ( 0.19%) 193.82
dns 1791 ( 0.00%) 260601 ( 0.00%) 145.51
bgp 713 ( 0.00%) 143126 ( 0.00%) 200.74
napster 10 ( 0.00%) 660 ( 0.00%) 66.00
realaud 116 ( 0.00%) 18178 ( 0.00%) 156.71
rtsp 143 ( 0.00%) 10530 ( 0.00%) 73.64
icecast 16217 ( 0.02%) 6721691 ( 0.02%) 414.48
other 2135650 ( 3.18%) 1219328255 ( 3.61%) 570.94
udp 29160576 ( 43.40%) 14553263970 ( 43.09%) 499.07
dns 418890 ( 0.62%) 118556807 ( 0.35%) 283.03
rip 26098529 ( 38.84%) 13242580314 ( 39.21%) 507.41
realaud 17 ( 0.00%) 2912 ( 0.00%) 171.29
halflif 115 ( 0.00%) 14846 ( 0.00%) 129.10
starcra 23 ( 0.00%) 8068 ( 0.00%) 350.78
everque 249 ( 0.00%) 50267 ( 0.00%) 201.88
unreal 5 ( 0.00%) 1068 ( 0.00%) 213.60
quake 12 ( 0.00%) 1281 ( 0.00%) 106.75
cuseeme 6 ( 0.00%) 722 ( 0.00%) 120.33
other 2642562 ( 3.93%) 1191996058 ( 3.53%) 451.08
icmp 16202344 ( 24.11%) 1045270754 ( 3.10%) 64.51
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 711371 ( 1.06%) 86824802 ( 0.26%) 122.05
ip6 1128614 ( 1.68%) 714031747 ( 2.11%) 632.66
pim 77 ( 0.00%) 4620 ( 0.00%) 60.00
other 60537 ( 0.09%) 15819312 ( 0.05%) 261.32
frag 28614 ( 0.04%) 29049751 ( 0.09%) 1015.23
ip6 744158 ( 1.11%) 679823254 ( 2.01%) 913.55
tcp6 644093 ( 0.96%) 639090088 ( 1.89%) 992.23
http(s) 464508 ( 0.69%) 550197129 ( 1.63%) 1184.47
http(c) 102916 ( 0.15%) 10971268 ( 0.03%) 106.60
smtp 205 ( 0.00%) 157615 ( 0.00%) 768.85
ftp 788 ( 0.00%) 71704 ( 0.00%) 90.99
ssh 64 ( 0.00%) 12504 ( 0.00%) 195.38
dns 92 ( 0.00%) 39897 ( 0.00%) 433.66
bgp 268 ( 0.00%) 215288 ( 0.00%) 803.31
other 75252 ( 0.11%) 77424683 ( 0.23%) 1028.87
udp6 79660 ( 0.12%) 36740467 ( 0.11%) 461.22
dns 55501 ( 0.08%) 16418450 ( 0.05%) 295.82
starcra 1 ( 0.00%) 104 ( 0.00%) 104.00
other 24158 ( 0.04%) 20321913 ( 0.06%) 841.21
icmp6 19117 ( 0.03%) 2769035 ( 0.01%) 144.85
ip6 84 ( 0.00%) 11362 ( 0.00%) 135.26
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1174 ( 0.00%) 1208222 ( 0.00%) 1029.15
tcpdump file: 201209031400.dump.gz (1258.60 MB)