Traffic Trace Info
DumpFile: 201207031400.dump
FileSize: 2961.41MB
Id: 201207031400
StartTime: Tue Jul 3 14:00:01 2012
EndTime: Tue Jul 3 14:15:01 2012
TotalTime: 899.98 seconds
TotalCapSize: -1758.86MB CapLen: 96 bytes
# of packets: 40911550 (30842.53MB)
AvgRate: 287.40Mbps stddev:68.65M
IP flow (unique src/dst pair) Information
# of flows: 2336291 (avg. 17.51 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 4.3% 3.7% 2.4% 1.6% 1.5% 1.3% 1.1% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 1764276
Top 10 bandwidth usage (bytes/total in %):
16.0% 9.5% 7.0% 5.6% 5.6% 5.4% 4.7% 4.6% 4.1% 4.1%
# of IPv6 addresses: 8159
Top 10 bandwidth usage (bytes/total in %):
36.1% 22.8% 7.8% 6.0% 4.8% 4.5% 4.3% 3.6% 2.8% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201207031400.pktlen.png)
detailed numbers
[ 32- 63]: 7474661
[ 64- 127]: 9569756
[ 128- 255]: 1473834
[ 256- 511]: 995195
[ 512- 1023]: 1232636
[ 1024- 2047]: 20165468
Protocol Breakdown
![[protocol breakdown chart]](201207031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40911550 (100.00%) 32340741921 (100.00%) 790.50
ip 38715418 ( 94.63%) 30042950447 ( 92.90%) 775.99
tcp 30301049 ( 74.06%) 26574601444 ( 82.17%) 877.02
http(s) 15502881 ( 37.89%) 20846773498 ( 64.46%) 1344.70
http(c) 8598991 ( 21.02%) 1342645641 ( 4.15%) 156.14
squid 59052 ( 0.14%) 26358155 ( 0.08%) 446.35
smtp 67841 ( 0.17%) 24934661 ( 0.08%) 367.55
ftp 12879 ( 0.03%) 1655748 ( 0.01%) 128.56
pop3 4023 ( 0.01%) 2006525 ( 0.01%) 498.76
imap 2355 ( 0.01%) 431856 ( 0.00%) 183.38
telnet 36020 ( 0.09%) 2688663 ( 0.01%) 74.64
ssh 769201 ( 1.88%) 137442577 ( 0.42%) 178.68
dns 1769 ( 0.00%) 262852 ( 0.00%) 148.59
bgp 553 ( 0.00%) 138292 ( 0.00%) 250.08
napster 60 ( 0.00%) 5232 ( 0.00%) 87.20
realaud 124 ( 0.00%) 8785 ( 0.00%) 70.85
rtsp 4142 ( 0.01%) 5860845 ( 0.02%) 1414.98
icecast 32239 ( 0.08%) 30715419 ( 0.09%) 952.74
hotline 6 ( 0.00%) 748 ( 0.00%) 124.67
other 5208899 ( 12.73%) 4152669545 ( 12.84%) 797.23
udp 5225791 ( 12.77%) 2458829122 ( 7.60%) 470.52
dns 1262092 ( 3.08%) 646186001 ( 2.00%) 512.00
rip 3 ( 0.00%) 210 ( 0.00%) 70.00
realaud 13 ( 0.00%) 1314 ( 0.00%) 101.08
halflif 70 ( 0.00%) 13110 ( 0.00%) 187.29
starcra 39 ( 0.00%) 5246 ( 0.00%) 134.51
everque 71 ( 0.00%) 14049 ( 0.00%) 197.87
unreal 18 ( 0.00%) 1675 ( 0.00%) 93.06
quake 21 ( 0.00%) 2333 ( 0.00%) 111.10
cuseeme 3 ( 0.00%) 210 ( 0.00%) 70.00
other 3953827 ( 9.66%) 1811987997 ( 5.60%) 458.29
icmp 1737222 ( 4.25%) 168299292 ( 0.52%) 96.88
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 24727 ( 0.06%) 6614010 ( 0.02%) 267.48
ip6 1395896 ( 3.41%) 827608520 ( 2.56%) 592.89
pim 22 ( 0.00%) 1320 ( 0.00%) 60.00
other 30527 ( 0.07%) 6977579 ( 0.02%) 228.57
frag 339206 ( 0.83%) 364845772 ( 1.13%) 1075.59
ip6 2196132 ( 5.37%) 2297791474 ( 7.10%) 1046.29
tcp6 2109072 ( 5.16%) 2270361326 ( 7.02%) 1076.47
http(s) 1758432 ( 4.30%) 2188463530 ( 6.77%) 1244.55
http(c) 285937 ( 0.70%) 26276164 ( 0.08%) 91.89
smtp 175 ( 0.00%) 86837 ( 0.00%) 496.21
ftp 175 ( 0.00%) 18603 ( 0.00%) 106.30
dns 142 ( 0.00%) 47923 ( 0.00%) 337.49
bgp 95 ( 0.00%) 23907 ( 0.00%) 251.65
other 64116 ( 0.16%) 55444362 ( 0.17%) 864.75
udp6 64261 ( 0.16%) 23409567 ( 0.07%) 364.29
dns 56646 ( 0.14%) 17607962 ( 0.05%) 310.84
halflif 1 ( 0.00%) 101 ( 0.00%) 101.00
everque 35 ( 0.00%) 3992 ( 0.00%) 114.06
other 7579 ( 0.02%) 5797512 ( 0.02%) 764.94
icmp6 21885 ( 0.05%) 3261781 ( 0.01%) 149.04
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 799 ( 0.00%) 743172 ( 0.00%) 930.13
tcpdump file: 201207031400.dump.gz (954.61 MB)