Traffic Trace Info
DumpFile: 201209081400.dump
FileSize: 3066.16MB
Id: 201209081400
StartTime: Sat Sep 8 14:00:01 2012
EndTime: Sat Sep 8 14:15:00 2012
TotalTime: 899.64 seconds
TotalCapSize: -1733.72MB CapLen: 96 bytes
# of packets: 46128641 (25258.97MB)
AvgRate: 235.38Mbps stddev:50.49M
IP flow (unique src/dst pair) Information
# of flows: 12210727 (avg. 3.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.6% 3.2% 2.7% 2.1% 1.9% 1.9% 1.7% 1.6% 1.6% 1.6%
IP address Information
# of IPv4 addresses: 9679655
Top 10 bandwidth usage (bytes/total in %):
19.4% 14.2% 9.4% 8.1% 7.4% 3.5% 3.5% 3.4% 3.3% 3.3%
# of IPv6 addresses: 6942
Top 10 bandwidth usage (bytes/total in %):
54.4% 49.9% 14.1% 14.1% 4.2% 4.2% 2.6% 2.3% 1.4% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201209081400.pktlen.png)
detailed numbers
[ 32- 63]: 20649618
[ 64- 127]: 6892892
[ 128- 255]: 832453
[ 256- 511]: 668234
[ 512- 1023]: 1167749
[ 1024- 2047]: 15917695
Protocol Breakdown
![[protocol breakdown chart]](201209081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 46128641 (100.00%) 26485950292 (100.00%) 574.18
ip 45121928 ( 97.82%) 25346535457 ( 95.70%) 561.73
tcp 25327486 ( 54.91%) 22898954696 ( 86.46%) 904.11
http(s) 11806868 ( 25.60%) 16170248594 ( 61.05%) 1369.56
http(c) 6275984 ( 13.61%) 902412688 ( 3.41%) 143.79
squid 97252 ( 0.21%) 99318702 ( 0.37%) 1021.25
smtp 60280 ( 0.13%) 12603283 ( 0.05%) 209.08
nntp 52 ( 0.00%) 3650 ( 0.00%) 70.19
ftp 15270 ( 0.03%) 3234961 ( 0.01%) 211.85
pop3 12662 ( 0.03%) 2091006 ( 0.01%) 165.14
imap 2685 ( 0.01%) 1800676 ( 0.01%) 670.64
telnet 3735 ( 0.01%) 282582 ( 0.00%) 75.66
ssh 726346 ( 1.57%) 836641718 ( 3.16%) 1151.85
dns 3524 ( 0.01%) 2079232 ( 0.01%) 590.02
bgp 562 ( 0.00%) 122955 ( 0.00%) 218.78
napster 18 ( 0.00%) 2167 ( 0.00%) 120.39
realaud 33 ( 0.00%) 5450 ( 0.00%) 165.15
rtsp 6 ( 0.00%) 388 ( 0.00%) 64.67
icecast 9406 ( 0.02%) 6108383 ( 0.02%) 649.41
hotline 20 ( 0.00%) 1610 ( 0.00%) 80.50
other 6312783 ( 13.69%) 4861996651 ( 18.36%) 770.18
udp 2574508 ( 5.58%) 913344864 ( 3.45%) 354.76
dns 309824 ( 0.67%) 59442860 ( 0.22%) 191.86
realaud 12 ( 0.00%) 1992 ( 0.00%) 166.00
halflif 39 ( 0.00%) 5380 ( 0.00%) 137.95
starcra 40 ( 0.00%) 6150 ( 0.00%) 153.75
everque 184 ( 0.00%) 24187 ( 0.00%) 131.45
unreal 11 ( 0.00%) 1169 ( 0.00%) 106.27
quake 54 ( 0.00%) 11076 ( 0.00%) 205.11
cuseeme 2 ( 0.00%) 238 ( 0.00%) 119.00
other 2264167 ( 4.91%) 853773795 ( 3.22%) 377.08
icmp 16051155 ( 34.80%) 980200484 ( 3.70%) 61.07
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2760 ( 0.01%) 826864 ( 0.00%) 299.59
ip6 1106841 ( 2.40%) 538953434 ( 2.03%) 486.93
pim 93 ( 0.00%) 5580 ( 0.00%) 60.00
other 58900 ( 0.13%) 14230265 ( 0.05%) 241.60
frag 1692 ( 0.00%) 1464563 ( 0.01%) 865.58
ip6 1006713 ( 2.18%) 1139414835 ( 4.30%) 1131.82
tcp6 920011 ( 1.99%) 1111467751 ( 4.20%) 1208.10
http(s) 310946 ( 0.67%) 351031115 ( 1.33%) 1128.91
http(c) 70033 ( 0.15%) 7791850 ( 0.03%) 111.26
smtp 133 ( 0.00%) 47068 ( 0.00%) 353.89
ftp 77 ( 0.00%) 6746 ( 0.00%) 87.61
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 379 ( 0.00%) 57972 ( 0.00%) 152.96
bgp 98 ( 0.00%) 31603 ( 0.00%) 322.48
other 538333 ( 1.17%) 752500389 ( 2.84%) 1397.83
udp6 65105 ( 0.14%) 23004630 ( 0.09%) 353.35
dns 42259 ( 0.09%) 13013255 ( 0.05%) 307.94
everque 3 ( 0.00%) 326 ( 0.00%) 108.67
quake 2 ( 0.00%) 199 ( 0.00%) 99.50
other 22841 ( 0.05%) 9990850 ( 0.04%) 437.41
icmp6 18847 ( 0.04%) 2799148 ( 0.01%) 148.52
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2635 ( 0.01%) 2127678 ( 0.01%) 807.47
tcpdump file: 201209081400.dump.gz (1013.35 MB)