Traffic Trace Info
DumpFile: 201207021400.dump
FileSize: 2529.72MB
Id: 201207021400
StartTime: Mon Jul 2 14:00:01 2012
EndTime: Mon Jul 2 14:15:00 2012
TotalTime: 899.18 seconds
TotalCapSize: 1991.51MB CapLen: 96 bytes
# of packets: 35271682 (26691.88MB)
AvgRate: 249.03Mbps stddev:46.32M
IP flow (unique src/dst pair) Information
# of flows: 1877527 (avg. 18.79 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 3.6% 1.8% 1.6% 1.6% 1.6% 1.1% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 1453298
Top 10 bandwidth usage (bytes/total in %):
12.7% 9.6% 7.8% 7.0% 4.9% 4.7% 3.9% 3.8% 2.8% 2.2%
# of IPv6 addresses: 8077
Top 10 bandwidth usage (bytes/total in %):
14.5% 5.5% 4.1% 3.9% 3.7% 3.4% 3.0% 2.7% 2.5% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201207021400.pktlen.png)
detailed numbers
[ 32- 63]: 6405663
[ 64- 127]: 7976380
[ 128- 255]: 1032487
[ 256- 511]: 1055214
[ 512- 1023]: 1352628
[ 1024- 2047]: 17449310
Protocol Breakdown
![[protocol breakdown chart]](201207021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35271682 (100.00%) 27988464818 (100.00%) 793.51
ip 33869129 ( 96.02%) 26788550991 ( 95.71%) 790.94
tcp 26265498 ( 74.47%) 22637291225 ( 80.88%) 861.86
http(s) 13741433 ( 38.96%) 17857964691 ( 63.80%) 1299.57
http(c) 8182812 ( 23.20%) 1936669061 ( 6.92%) 236.68
squid 68132 ( 0.19%) 50409847 ( 0.18%) 739.89
smtp 53081 ( 0.15%) 18243637 ( 0.07%) 343.69
ftp 28498 ( 0.08%) 2869059 ( 0.01%) 100.68
pop3 5151 ( 0.01%) 2852201 ( 0.01%) 553.72
imap 1733 ( 0.00%) 420616 ( 0.00%) 242.71
telnet 11117 ( 0.03%) 845805 ( 0.00%) 76.08
ssh 32246 ( 0.09%) 7700887 ( 0.03%) 238.82
dns 2053 ( 0.01%) 248797 ( 0.00%) 121.19
bgp 506 ( 0.00%) 108176 ( 0.00%) 213.79
napster 132 ( 0.00%) 9601 ( 0.00%) 72.73
realaud 28 ( 0.00%) 2605 ( 0.00%) 93.04
rtsp 9868 ( 0.03%) 11669151 ( 0.04%) 1182.52
icecast 7636 ( 0.02%) 5876136 ( 0.02%) 769.53
hotline 29 ( 0.00%) 6864 ( 0.00%) 236.69
other 4121042 ( 11.68%) 2741393888 ( 9.79%) 665.22
udp 4849215 ( 13.75%) 3221817057 ( 11.51%) 664.40
dns 1003008 ( 2.84%) 626588635 ( 2.24%) 624.71
rip 4 ( 0.00%) 288 ( 0.00%) 72.00
realaud 13 ( 0.00%) 1179 ( 0.00%) 90.69
halflif 59 ( 0.00%) 11338 ( 0.00%) 192.17
starcra 45 ( 0.00%) 5608 ( 0.00%) 124.62
everque 370 ( 0.00%) 220959 ( 0.00%) 597.19
unreal 6 ( 0.00%) 797 ( 0.00%) 132.83
quake 8 ( 0.00%) 1271 ( 0.00%) 158.88
cuseeme 2 ( 0.00%) 159 ( 0.00%) 79.50
other 3748396 ( 10.63%) 2588810955 ( 9.25%) 690.64
icmp 1496398 ( 4.24%) 148917991 ( 0.53%) 99.52
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2368 ( 0.01%) 724448 ( 0.00%) 305.93
ip6 1225458 ( 3.47%) 775046754 ( 2.77%) 632.45
pim 26 ( 0.00%) 1560 ( 0.00%) 60.00
other 29982 ( 0.09%) 4732796 ( 0.02%) 157.85
frag 803190 ( 2.28%) 726155011 ( 2.59%) 904.09
ip6 1402553 ( 3.98%) 1199913827 ( 4.29%) 855.52
tcp6 1296809 ( 3.68%) 1173766852 ( 4.19%) 905.12
http(s) 1050386 ( 2.98%) 1127305964 ( 4.03%) 1073.23
http(c) 186842 ( 0.53%) 18645339 ( 0.07%) 99.79
smtp 321 ( 0.00%) 204568 ( 0.00%) 637.28
ftp 434 ( 0.00%) 44069 ( 0.00%) 101.54
dns 114 ( 0.00%) 49505 ( 0.00%) 434.25
bgp 95 ( 0.00%) 25127 ( 0.00%) 264.49
other 58617 ( 0.17%) 27492280 ( 0.10%) 469.02
udp6 75592 ( 0.21%) 21044915 ( 0.08%) 278.40
dns 59543 ( 0.17%) 17769259 ( 0.06%) 298.43
realaud 1 ( 0.00%) 118 ( 0.00%) 118.00
other 16048 ( 0.05%) 3275538 ( 0.01%) 204.11
icmp6 28963 ( 0.08%) 4060758 ( 0.01%) 140.21
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1075 ( 0.00%) 1025810 ( 0.00%) 954.24
tcpdump file: 201207021400.dump.gz (813.17 MB)