Traffic Trace Info
DumpFile: 201209061400.dump
FileSize: 3401.01MB
Id: 201209061400
StartTime: Thu Sep 6 14:00:01 2012
EndTime: Thu Sep 6 14:15:01 2012
TotalTime: 899.86 seconds
TotalCapSize: -1503.01MB CapLen: 96 bytes
# of packets: 52954226 (24779.91MB)
AvgRate: 230.95Mbps stddev:39.95M
IP flow (unique src/dst pair) Information
# of flows: 12192777 (avg. 4.34 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 2.7% 2.7% 1.9% 1.7% 1.4% 1.4% 1.3% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 9731041
Top 10 bandwidth usage (bytes/total in %):
12.4% 12.4% 9.6% 5.7% 5.4% 3.7% 3.6% 3.2% 3.2% 2.9%
# of IPv6 addresses: 7285
Top 10 bandwidth usage (bytes/total in %):
59.6% 27.8% 15.2% 9.6% 7.8% 2.7% 2.5% 2.1% 2.1% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201209061400.pktlen.png)
detailed numbers
[ 32- 63]: 18795976
[ 64- 127]: 8010645
[ 128- 255]: 2106010
[ 256- 511]: 815548
[ 512- 1023]: 11724291
[ 1024- 2047]: 11501756
Protocol Breakdown
![[protocol breakdown chart]](201209061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 52954226 (100.00%) 25983619797 (100.00%) 490.68
ip 51883685 ( 97.98%) 24802072107 ( 95.45%) 478.03
tcp 19968653 ( 37.71%) 16111420316 ( 62.01%) 806.84
http(s) 11352456 ( 21.44%) 13103476084 ( 50.43%) 1154.24
http(c) 6883237 ( 13.00%) 2297456454 ( 8.84%) 333.78
squid 107253 ( 0.20%) 64725560 ( 0.25%) 603.48
smtp 97924 ( 0.18%) 41634066 ( 0.16%) 425.17
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 26379 ( 0.05%) 3949798 ( 0.02%) 149.73
pop3 8514 ( 0.02%) 6526284 ( 0.03%) 766.54
imap 2253 ( 0.00%) 712322 ( 0.00%) 316.17
telnet 9811 ( 0.02%) 745211 ( 0.00%) 75.96
ssh 91228 ( 0.17%) 15403774 ( 0.06%) 168.85
dns 1428 ( 0.00%) 229668 ( 0.00%) 160.83
bgp 615 ( 0.00%) 180043 ( 0.00%) 292.75
napster 30 ( 0.00%) 2747 ( 0.00%) 91.57
realaud 78 ( 0.00%) 8722 ( 0.00%) 111.82
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 3543 ( 0.01%) 292571 ( 0.00%) 82.58
hotline 11 ( 0.00%) 1062 ( 0.00%) 96.55
other 1383885 ( 2.61%) 576075464 ( 2.22%) 416.27
udp 14541587 ( 27.46%) 7105000882 ( 27.34%) 488.60
dns 448506 ( 0.85%) 129039818 ( 0.50%) 287.71
rip 12011281 ( 22.68%) 6165057786 ( 23.73%) 513.27
realaud 14 ( 0.00%) 1065 ( 0.00%) 76.07
halflif 51 ( 0.00%) 7764 ( 0.00%) 152.24
starcra 27 ( 0.00%) 3163 ( 0.00%) 117.15
everque 80 ( 0.00%) 15942 ( 0.00%) 199.28
unreal 22 ( 0.00%) 3678 ( 0.00%) 167.18
quake 40 ( 0.00%) 4502 ( 0.00%) 112.55
cuseeme 6 ( 0.00%) 554 ( 0.00%) 92.33
other 2081416 ( 3.93%) 810813255 ( 3.12%) 389.55
icmp 16205241 ( 30.60%) 1023418109 ( 3.94%) 63.15
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2773 ( 0.01%) 832014 ( 0.00%) 300.04
ip6 1099070 ( 2.08%) 542154659 ( 2.09%) 493.28
pim 80 ( 0.00%) 4800 ( 0.00%) 60.00
other 66097 ( 0.12%) 19222167 ( 0.07%) 290.82
frag 40670 ( 0.08%) 40176163 ( 0.15%) 987.86
ip6 1070541 ( 2.02%) 1181547690 ( 4.55%) 1103.69
tcp6 967489 ( 1.83%) 1143396700 ( 4.40%) 1181.82
http(s) 856164 ( 1.62%) 1109424748 ( 4.27%) 1295.81
http(c) 81289 ( 0.15%) 8298134 ( 0.03%) 102.08
squid 19 ( 0.00%) 3822 ( 0.00%) 201.16
smtp 5796 ( 0.01%) 8025999 ( 0.03%) 1384.75
ftp 2115 ( 0.00%) 621851 ( 0.00%) 294.02
pop3 20 ( 0.00%) 4404 ( 0.00%) 220.20
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 95 ( 0.00%) 30911 ( 0.00%) 325.38
bgp 100 ( 0.00%) 30906 ( 0.00%) 309.06
other 21879 ( 0.04%) 16954917 ( 0.07%) 774.94
udp6 84872 ( 0.16%) 34108188 ( 0.13%) 401.88
dns 60700 ( 0.11%) 17448650 ( 0.07%) 287.46
unreal 1 ( 0.00%) 110 ( 0.00%) 110.00
other 24171 ( 0.05%) 16659428 ( 0.06%) 689.23
icmp6 16709 ( 0.03%) 2620906 ( 0.01%) 156.86
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1357 ( 0.00%) 1406404 ( 0.01%) 1036.41
tcpdump file: 201209061400.dump.gz (1087.72 MB)