Traffic Trace Info
DumpFile: 201207011400.dump
FileSize: 1476.63MB
Id: 201207011400
StartTime: Sun Jul 1 14:00:00 2012
EndTime: Sun Jul 1 14:15:00 2012
TotalTime: 899.77 seconds
TotalCapSize: 1163.41MB CapLen: 96 bytes
# of packets: 20526177 (14956.89MB)
AvgRate: 139.41Mbps stddev:42.66M
IP flow (unique src/dst pair) Information
# of flows: 1894746 (avg. 10.83 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 1.7% 1.1% 1.0% 1.0% 0.8% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 1462204
Top 10 bandwidth usage (bytes/total in %):
27.0% 5.7% 3.6% 3.5% 3.5% 2.7% 2.3% 2.1% 2.0% 2.0%
# of IPv6 addresses: 7338
Top 10 bandwidth usage (bytes/total in %):
20.5% 12.6% 11.5% 11.5% 8.7% 5.6% 5.6% 4.0% 3.7% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201207011400.pktlen.png)
detailed numbers
[ 32- 63]: 4262308
[ 64- 127]: 4719909
[ 128- 255]: 649752
[ 256- 511]: 511140
[ 512- 1023]: 772514
[ 1024- 2047]: 9610554
Protocol Breakdown
![[protocol breakdown chart]](201207011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20526177 (100.00%) 15683432627 (100.00%) 764.07
ip 19533933 ( 95.17%) 15056164030 ( 96.00%) 770.77
tcp 13781822 ( 67.14%) 12264004019 ( 78.20%) 889.87
http(s) 7529300 ( 36.68%) 10123690792 ( 64.55%) 1344.57
http(c) 4248263 ( 20.70%) 691677874 ( 4.41%) 162.81
squid 51061 ( 0.25%) 28175573 ( 0.18%) 551.80
smtp 76389 ( 0.37%) 43736474 ( 0.28%) 572.55
ftp 13344 ( 0.07%) 1672943 ( 0.01%) 125.37
pop3 810 ( 0.00%) 190106 ( 0.00%) 234.70
imap 941 ( 0.00%) 111459 ( 0.00%) 118.45
telnet 7920 ( 0.04%) 611286 ( 0.00%) 77.18
ssh 7814 ( 0.04%) 2416735 ( 0.02%) 309.28
dns 2162 ( 0.01%) 284802 ( 0.00%) 131.73
bgp 529 ( 0.00%) 132849 ( 0.00%) 251.13
napster 8 ( 0.00%) 605 ( 0.00%) 75.62
realaud 110 ( 0.00%) 10867 ( 0.00%) 98.79
rtsp 6677 ( 0.03%) 493360 ( 0.00%) 73.89
icecast 452 ( 0.00%) 59251 ( 0.00%) 131.09
hotline 1456 ( 0.01%) 770546 ( 0.00%) 529.22
other 1834586 ( 8.94%) 1369968497 ( 8.74%) 746.75
udp 2627057 ( 12.80%) 1548444160 ( 9.87%) 589.42
dns 836019 ( 4.07%) 678807811 ( 4.33%) 811.95
rip 4 ( 0.00%) 288 ( 0.00%) 72.00
realaud 11 ( 0.00%) 2323 ( 0.00%) 211.18
halflif 166 ( 0.00%) 28386 ( 0.00%) 171.00
starcra 8 ( 0.00%) 1771 ( 0.00%) 221.38
everque 77 ( 0.00%) 17002 ( 0.00%) 220.81
unreal 5 ( 0.00%) 683 ( 0.00%) 136.60
quake 9 ( 0.00%) 1518 ( 0.00%) 168.67
other 1790278 ( 8.72%) 869300627 ( 5.54%) 485.57
icmp 1619216 ( 7.89%) 159545472 ( 1.02%) 98.53
ipip 183 ( 0.00%) 19062 ( 0.00%) 104.16
ipsec 1722 ( 0.01%) 535932 ( 0.00%) 311.23
ip6 1476975 ( 7.20%) 1077617620 ( 6.87%) 729.61
pim 28 ( 0.00%) 1680 ( 0.00%) 60.00
other 26930 ( 0.13%) 5996085 ( 0.04%) 222.65
frag 537371 ( 2.62%) 601618362 ( 3.84%) 1119.56
ip6 992244 ( 4.83%) 627268597 ( 4.00%) 632.17
tcp6 852704 ( 4.15%) 530390086 ( 3.38%) 622.01
http(s) 406163 ( 1.98%) 462450948 ( 2.95%) 1138.58
http(c) 119683 ( 0.58%) 10964433 ( 0.07%) 91.61
smtp 816 ( 0.00%) 225300 ( 0.00%) 276.10
ftp 395 ( 0.00%) 40206 ( 0.00%) 101.79
pop3 37 ( 0.00%) 3472 ( 0.00%) 93.84
dns 77 ( 0.00%) 23960 ( 0.00%) 311.17
bgp 92 ( 0.00%) 23227 ( 0.00%) 252.47
other 325441 ( 1.59%) 56658540 ( 0.36%) 174.10
udp6 103645 ( 0.50%) 85887398 ( 0.55%) 828.67
dns 30610 ( 0.15%) 9296543 ( 0.06%) 303.71
halflif 2 ( 0.00%) 1627 ( 0.00%) 813.50
other 73033 ( 0.36%) 76589228 ( 0.49%) 1048.69
icmp6 25715 ( 0.13%) 3762563 ( 0.02%) 146.32
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 10066 ( 0.05%) 7213058 ( 0.05%) 716.58
tcpdump file: 201207011400.dump.gz (463.80 MB)