Traffic Trace Info
DumpFile: 201209041400.dump
FileSize: 4291.85MB
Id: 201209041400
StartTime: Tue Sep 4 14:00:00 2012
EndTime: Tue Sep 4 14:15:01 2012
TotalTime: 900.63 seconds
TotalCapSize: -869.35MB CapLen: 96 bytes
# of packets: 69808582 (30666.36MB)
AvgRate: 285.62Mbps stddev:44.56M
IP flow (unique src/dst pair) Information
# of flows: 12225352 (avg. 5.71 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 3.0% 2.8% 2.8% 2.7% 2.7% 2.1% 2.0% 2.0% 1.9%
IP address Information
# of IPv4 addresses: 9756246
Top 10 bandwidth usage (bytes/total in %):
18.6% 18.6% 8.8% 8.5% 8.5% 7.6% 7.0% 5.1% 4.9% 4.4%
# of IPv6 addresses: 5034
Top 10 bandwidth usage (bytes/total in %):
42.2% 24.9% 18.5% 9.9% 6.6% 6.4% 3.9% 2.8% 2.8% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201209041400.pktlen.png)
detailed numbers
[ 32- 63]: 18780640
[ 64- 127]: 9450245
[ 128- 255]: 2929657
[ 256- 511]: 642125
[ 512- 1023]: 28640950
[ 1024- 2047]: 9364965
Protocol Breakdown
![[protocol breakdown chart]](201209041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 69808582 (100.00%) 32156005244 (100.00%) 460.63
ip 69120706 ( 99.01%) 31517443526 ( 98.01%) 455.98
tcp 17437904 ( 24.98%) 12678301354 ( 39.43%) 727.05
http(s) 8766595 ( 12.56%) 9802934989 ( 30.49%) 1118.21
http(c) 5877792 ( 8.42%) 1493752030 ( 4.65%) 254.13
squid 67563 ( 0.10%) 43322104 ( 0.13%) 641.21
smtp 62257 ( 0.09%) 13295427 ( 0.04%) 213.56
ftp 12993 ( 0.02%) 7338100 ( 0.02%) 564.77
pop3 4401 ( 0.01%) 2341476 ( 0.01%) 532.03
imap 3324 ( 0.00%) 1090059 ( 0.00%) 327.94
telnet 12148 ( 0.02%) 3511005 ( 0.01%) 289.02
ssh 675648 ( 0.97%) 110430494 ( 0.34%) 163.44
dns 3658 ( 0.01%) 2084985 ( 0.01%) 569.98
bgp 645 ( 0.00%) 168428 ( 0.00%) 261.13
napster 382 ( 0.00%) 24858 ( 0.00%) 65.07
realaud 42 ( 0.00%) 6620 ( 0.00%) 157.62
rtsp 2314 ( 0.00%) 2690236 ( 0.01%) 1162.59
icecast 8677 ( 0.01%) 5945987 ( 0.02%) 685.26
hotline 3 ( 0.00%) 186 ( 0.00%) 62.00
other 1939462 ( 2.78%) 1189364370 ( 3.70%) 613.24
udp 34057337 ( 48.79%) 16968041298 ( 52.77%) 498.22
dns 436995 ( 0.63%) 115812400 ( 0.36%) 265.02
rip 30940542 ( 44.32%) 15729578732 ( 48.92%) 508.38
realaud 6 ( 0.00%) 1093 ( 0.00%) 182.17
halflif 25 ( 0.00%) 3708 ( 0.00%) 148.32
starcra 41 ( 0.00%) 5074 ( 0.00%) 123.76
everque 143 ( 0.00%) 30599 ( 0.00%) 213.98
unreal 12 ( 0.00%) 1863 ( 0.00%) 155.25
quake 13 ( 0.00%) 1515 ( 0.00%) 116.54
cuseeme 1 ( 0.00%) 96 ( 0.00%) 96.00
other 2679432 ( 3.84%) 1122550672 ( 3.49%) 418.95
icmp 16032840 ( 22.97%) 1023389051 ( 3.18%) 63.83
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 18659 ( 0.03%) 3528034 ( 0.01%) 189.08
ip6 1513461 ( 2.17%) 826634288 ( 2.57%) 546.19
pim 82 ( 0.00%) 4920 ( 0.00%) 60.00
other 60238 ( 0.09%) 17525311 ( 0.05%) 290.93
frag 16881 ( 0.02%) 17176648 ( 0.05%) 1017.51
ip6 687876 ( 0.99%) 638561718 ( 1.99%) 928.31
tcp6 630507 ( 0.90%) 621316224 ( 1.93%) 985.42
http(s) 448830 ( 0.64%) 593271507 ( 1.84%) 1321.82
http(c) 153354 ( 0.22%) 15205872 ( 0.05%) 99.16
squid 21 ( 0.00%) 3342 ( 0.00%) 159.14
smtp 300 ( 0.00%) 99885 ( 0.00%) 332.95
ftp 6574 ( 0.01%) 1221716 ( 0.00%) 185.84
pop3 6 ( 0.00%) 444 ( 0.00%) 74.00
ssh 6 ( 0.00%) 444 ( 0.00%) 74.00
dns 24 ( 0.00%) 7984 ( 0.00%) 332.67
bgp 315 ( 0.00%) 254347 ( 0.00%) 807.45
other 21077 ( 0.03%) 11250683 ( 0.03%) 533.79
udp6 46959 ( 0.07%) 15120486 ( 0.05%) 321.99
dns 36676 ( 0.05%) 9475807 ( 0.03%) 258.37
everque 1 ( 0.00%) 115 ( 0.00%) 115.00
other 10282 ( 0.01%) 5644564 ( 0.02%) 548.98
icmp6 9596 ( 0.01%) 1371829 ( 0.00%) 142.96
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 700 ( 0.00%) 737669 ( 0.00%) 1053.81
tcpdump file: 201209041400.dump.gz (1300.54 MB)