Traffic Trace Info
DumpFile: 201209051400.dump
FileSize: 4180.98MB
Id: 201209051400
StartTime: Wed Sep 5 14:00:01 2012
EndTime: Wed Sep 5 14:15:01 2012
TotalTime: 900.31 seconds
TotalCapSize: -924.49MB CapLen: 96 bytes
# of packets: 66156440 (32439.68MB)
AvgRate: 302.29Mbps stddev:44.64M
IP flow (unique src/dst pair) Information
# of flows: 12197287 (avg. 5.42 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 2.1% 2.1% 2.1% 1.7% 1.7% 1.6% 1.5% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 9753064
Top 10 bandwidth usage (bytes/total in %):
12.6% 12.6% 10.4% 5.6% 5.4% 4.2% 3.7% 3.5% 3.3% 3.2%
# of IPv6 addresses: 7314
Top 10 bandwidth usage (bytes/total in %):
39.9% 16.1% 9.5% 7.9% 5.5% 4.3% 3.4% 3.1% 3.0% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201209051400.pktlen.png)
detailed numbers
[ 32- 63]: 18770108
[ 64- 127]: 9920949
[ 128- 255]: 2368079
[ 256- 511]: 993124
[ 512- 1023]: 20479063
[ 1024- 2047]: 13625117
Protocol Breakdown
![[protocol breakdown chart]](201209051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 66156440 (100.00%) 34015475110 (100.00%) 514.17
ip 65064450 ( 98.35%) 33221146004 ( 97.66%) 510.59
tcp 20977177 ( 31.71%) 17236188304 ( 50.67%) 821.66
http(s) 9976587 ( 15.08%) 12478063996 ( 36.68%) 1250.73
http(c) 6829679 ( 10.32%) 1954191291 ( 5.75%) 286.13
squid 181587 ( 0.27%) 171732407 ( 0.50%) 945.73
smtp 65527 ( 0.10%) 14681082 ( 0.04%) 224.05
ftp 14082 ( 0.02%) 2938418 ( 0.01%) 208.66
pop3 5330 ( 0.01%) 3582688 ( 0.01%) 672.17
imap 2523 ( 0.00%) 793355 ( 0.00%) 314.45
telnet 10070 ( 0.02%) 757356 ( 0.00%) 75.21
ssh 835187 ( 1.26%) 160991035 ( 0.47%) 192.76
dns 3817 ( 0.01%) 2093316 ( 0.01%) 548.42
bgp 727 ( 0.00%) 169213 ( 0.00%) 232.76
napster 12 ( 0.00%) 1503 ( 0.00%) 125.25
realaud 58 ( 0.00%) 9414 ( 0.00%) 162.31
rtsp 116 ( 0.00%) 6960 ( 0.00%) 60.00
icecast 8079 ( 0.01%) 5718784 ( 0.02%) 707.86
hotline 9 ( 0.00%) 931 ( 0.00%) 103.44
other 3043784 ( 4.60%) 2440456375 ( 7.17%) 801.78
udp 26055668 ( 39.38%) 13336894099 ( 39.21%) 511.86
dns 506953 ( 0.77%) 142829218 ( 0.42%) 281.74
rip 21790675 ( 32.94%) 11088413870 ( 32.60%) 508.86
realaud 8 ( 0.00%) 1537 ( 0.00%) 192.12
halflif 102 ( 0.00%) 11015 ( 0.00%) 107.99
starcra 20 ( 0.00%) 1909 ( 0.00%) 95.45
everque 202 ( 0.00%) 34467 ( 0.00%) 170.63
unreal 12 ( 0.00%) 1869 ( 0.00%) 155.75
quake 14 ( 0.00%) 1326 ( 0.00%) 94.71
cuseeme 4 ( 0.00%) 321 ( 0.00%) 80.25
other 3757426 ( 5.68%) 2105494226 ( 6.19%) 560.36
icmp 16053828 ( 24.27%) 1021636832 ( 3.00%) 63.64
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 8406 ( 0.01%) 3384388 ( 0.01%) 402.62
ip6 1889475 ( 2.86%) 1601676652 ( 4.71%) 847.68
pim 97 ( 0.00%) 5820 ( 0.00%) 60.00
other 79614 ( 0.12%) 21340639 ( 0.06%) 268.05
frag 57561 ( 0.09%) 53155403 ( 0.16%) 923.46
ip6 1091990 ( 1.65%) 794329106 ( 2.34%) 727.41
tcp6 986830 ( 1.49%) 760037069 ( 2.23%) 770.18
http(s) 591206 ( 0.89%) 715810909 ( 2.10%) 1210.76
http(c) 359400 ( 0.54%) 33584045 ( 0.10%) 93.44
smtp 272 ( 0.00%) 109534 ( 0.00%) 402.70
ftp 10647 ( 0.02%) 1862917 ( 0.01%) 174.97
pop3 17 ( 0.00%) 3767 ( 0.00%) 221.59
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 163 ( 0.00%) 52003 ( 0.00%) 319.04
bgp 101 ( 0.00%) 36411 ( 0.00%) 360.50
other 25012 ( 0.04%) 8576475 ( 0.03%) 342.89
udp6 84675 ( 0.13%) 29580192 ( 0.09%) 349.34
dns 62292 ( 0.09%) 17900680 ( 0.05%) 287.37
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 22382 ( 0.03%) 11679408 ( 0.03%) 521.82
icmp6 18118 ( 0.03%) 2594528 ( 0.01%) 143.20
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2254 ( 0.00%) 2101943 ( 0.01%) 932.54
tcpdump file: 201209051400.dump.gz (1309.44 MB)