Traffic Trace Info
DumpFile: 201209071400.dump
FileSize: 3975.71MB
Id: 201209071400
StartTime: Fri Sep 7 14:00:01 2012
EndTime: Fri Sep 7 14:15:00 2012
TotalTime: 899.21 seconds
TotalCapSize: -1109.23MB CapLen: 96 bytes
# of packets: 64810247 (29181.45MB)
AvgRate: 272.21Mbps stddev:39.57M
IP flow (unique src/dst pair) Information
# of flows: 12321827 (avg. 5.26 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 5.2% 4.3% 4.3% 2.9% 2.9% 2.3% 2.3% 1.8% 1.8%
IP address Information
# of IPv4 addresses: 9824461
Top 10 bandwidth usage (bytes/total in %):
23.4% 23.4% 10.6% 8.8% 5.9% 5.3% 4.7% 3.6% 3.5% 3.0%
# of IPv6 addresses: 6988
Top 10 bandwidth usage (bytes/total in %):
20.6% 11.7% 10.2% 10.0% 7.6% 7.2% 6.4% 5.3% 5.0% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201209071400.pktlen.png)
detailed numbers
[ 32- 63]: 19309525
[ 64- 127]: 6623370
[ 128- 255]: 3333168
[ 256- 511]: 709986
[ 512- 1023]: 25246199
[ 1024- 2047]: 9587999
Protocol Breakdown
![[protocol breakdown chart]](201209071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 64810247 (100.00%) 30598968489 (100.00%) 472.13
ip 64042134 ( 98.81%) 29830008483 ( 97.49%) 465.79
tcp 16606579 ( 25.62%) 13334570483 ( 43.58%) 802.97
http(s) 8067398 ( 12.45%) 9924610361 ( 32.43%) 1230.21
http(c) 6231988 ( 9.62%) 2090085654 ( 6.83%) 335.38
squid 62914 ( 0.10%) 38197686 ( 0.12%) 607.14
smtp 72013 ( 0.11%) 28749129 ( 0.09%) 399.22
nntp 19 ( 0.00%) 1158 ( 0.00%) 60.95
ftp 30894 ( 0.05%) 19313068 ( 0.06%) 625.14
pop3 9881 ( 0.02%) 8242752 ( 0.03%) 834.20
imap 1854 ( 0.00%) 306795 ( 0.00%) 165.48
telnet 9332 ( 0.01%) 713228 ( 0.00%) 76.43
ssh 62082 ( 0.10%) 42391445 ( 0.14%) 682.83
dns 4882 ( 0.01%) 3372252 ( 0.01%) 690.75
bgp 582 ( 0.00%) 146221 ( 0.00%) 251.24
napster 24 ( 0.00%) 1837 ( 0.00%) 76.54
realaud 29 ( 0.00%) 3197 ( 0.00%) 110.24
rtsp 3 ( 0.00%) 180 ( 0.00%) 60.00
icecast 1119 ( 0.00%) 125417 ( 0.00%) 112.08
hotline 24 ( 0.00%) 3498 ( 0.00%) 145.75
other 2051540 ( 3.17%) 1178306545 ( 3.85%) 574.35
udp 29865992 ( 46.08%) 14823689308 ( 48.45%) 496.34
dns 371669 ( 0.57%) 85292093 ( 0.28%) 229.48
rip 27149086 ( 41.89%) 13934866956 ( 45.54%) 513.27
realaud 8 ( 0.00%) 1016 ( 0.00%) 127.00
halflif 156 ( 0.00%) 31612 ( 0.00%) 202.64
starcra 43 ( 0.00%) 4050 ( 0.00%) 94.19
everque 219 ( 0.00%) 41558 ( 0.00%) 189.76
unreal 16 ( 0.00%) 2621 ( 0.00%) 163.81
quake 13 ( 0.00%) 4149 ( 0.00%) 319.15
cuseeme 15 ( 0.00%) 2086 ( 0.00%) 139.07
other 2344294 ( 3.62%) 803362896 ( 2.63%) 342.69
icmp 16324075 ( 25.19%) 1065453965 ( 3.48%) 65.27
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 23514 ( 0.04%) 3679852 ( 0.01%) 156.50
ip6 1166848 ( 1.80%) 587722965 ( 1.92%) 503.68
pim 73 ( 0.00%) 4380 ( 0.00%) 60.00
other 54868 ( 0.08%) 14868260 ( 0.05%) 270.98
frag 7489 ( 0.01%) 5990551 ( 0.02%) 799.91
ip6 768113 ( 1.19%) 768960006 ( 2.51%) 1001.10
tcp6 685146 ( 1.06%) 744210186 ( 2.43%) 1086.21
http(s) 472313 ( 0.73%) 556361691 ( 1.82%) 1177.95
http(c) 70946 ( 0.11%) 7380787 ( 0.02%) 104.03
squid 40 ( 0.00%) 7555 ( 0.00%) 188.88
smtp 160 ( 0.00%) 66062 ( 0.00%) 412.89
ftp 421 ( 0.00%) 37210 ( 0.00%) 88.38
pop3 18 ( 0.00%) 4632 ( 0.00%) 257.33
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 88 ( 0.00%) 36248 ( 0.00%) 411.91
bgp 100 ( 0.00%) 27177 ( 0.00%) 271.77
other 141048 ( 0.22%) 180287816 ( 0.59%) 1278.20
udp6 64558 ( 0.10%) 20453538 ( 0.07%) 316.82
dns 62079 ( 0.10%) 20138113 ( 0.07%) 324.39
cuseeme 1 ( 0.00%) 116 ( 0.00%) 116.00
other 2478 ( 0.00%) 315309 ( 0.00%) 127.24
icmp6 16826 ( 0.03%) 2747808 ( 0.01%) 163.31
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1469 ( 0.00%) 1532982 ( 0.01%) 1043.55
tcpdump file: 201209071400.dump.gz (1199.13 MB)