Traffic Trace Info
DumpFile: 201207051400.dump
FileSize: 2971.53MB
Id: 201207051400
StartTime: Thu Jul 5 14:00:00 2012
EndTime: Thu Jul 5 14:15:00 2012
TotalTime: 900.12 seconds
TotalCapSize: -1764.11MB CapLen: 96 bytes
# of packets: 41918796 (32689.00MB)
AvgRate: 304.66Mbps stddev:56.39M
IP flow (unique src/dst pair) Information
# of flows: 1956197 (avg. 21.43 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 2.8% 1.9% 1.2% 1.1% 1.1% 1.1% 1.1% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 1469188
Top 10 bandwidth usage (bytes/total in %):
18.9% 10.7% 7.3% 5.9% 5.8% 5.2% 2.9% 2.5% 2.2% 2.0%
# of IPv6 addresses: 7820
Top 10 bandwidth usage (bytes/total in %):
11.8% 11.8% 10.2% 5.7% 3.2% 3.0% 2.9% 2.9% 2.9% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201207051400.pktlen.png)
detailed numbers
[ 32- 63]: 7700214
[ 64- 127]: 9034003
[ 128- 255]: 1189730
[ 256- 511]: 1196784
[ 512- 1023]: 1385141
[ 1024- 2047]: 21412924
Protocol Breakdown
![[protocol breakdown chart]](201207051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41918796 (100.00%) 34276904174 (100.00%) 817.70
ip 40540841 ( 96.71%) 33067180166 ( 96.47%) 815.65
tcp 31270449 ( 74.60%) 27733992036 ( 80.91%) 886.91
http(s) 17530391 ( 41.82%) 23324958917 ( 68.05%) 1330.54
http(c) 9965169 ( 23.77%) 2015299005 ( 5.88%) 202.23
squid 67446 ( 0.16%) 31299229 ( 0.09%) 464.06
smtp 73474 ( 0.18%) 18631435 ( 0.05%) 253.58
nntp 4 ( 0.00%) 248 ( 0.00%) 62.00
ftp 18720 ( 0.04%) 2856330 ( 0.01%) 152.58
pop3 6935 ( 0.02%) 3716166 ( 0.01%) 535.86
imap 2332 ( 0.01%) 896316 ( 0.00%) 384.36
telnet 31209 ( 0.07%) 2335598 ( 0.01%) 74.84
ssh 198427 ( 0.47%) 22751836 ( 0.07%) 114.66
dns 1957 ( 0.00%) 268414 ( 0.00%) 137.16
bgp 568 ( 0.00%) 156115 ( 0.00%) 274.85
napster 135 ( 0.00%) 12550 ( 0.00%) 92.96
realaud 271 ( 0.00%) 18397 ( 0.00%) 67.89
rtsp 928 ( 0.00%) 60015 ( 0.00%) 64.67
icecast 7375 ( 0.02%) 4281100 ( 0.01%) 580.49
hotline 22 ( 0.00%) 1720 ( 0.00%) 78.18
other 3365079 ( 8.03%) 2306448225 ( 6.73%) 685.41
udp 6664859 ( 15.90%) 4500948342 ( 13.13%) 675.33
dns 717817 ( 1.71%) 296131096 ( 0.86%) 412.54
rip 4 ( 0.00%) 346 ( 0.00%) 86.50
realaud 11 ( 0.00%) 1696 ( 0.00%) 154.18
halflif 39 ( 0.00%) 6611 ( 0.00%) 169.51
starcra 34 ( 0.00%) 4733 ( 0.00%) 139.21
everque 77 ( 0.00%) 15061 ( 0.00%) 195.60
unreal 116 ( 0.00%) 14963 ( 0.00%) 128.99
quake 24 ( 0.00%) 2943 ( 0.00%) 122.62
cuseeme 2 ( 0.00%) 170 ( 0.00%) 85.00
other 5355857 ( 12.78%) 4168079274 ( 12.16%) 778.23
icmp 1573485 ( 3.75%) 173120317 ( 0.51%) 110.02
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 6286 ( 0.01%) 1846356 ( 0.01%) 293.73
ip6 998222 ( 2.38%) 652126378 ( 1.90%) 653.29
pim 28 ( 0.00%) 1680 ( 0.00%) 60.00
other 27327 ( 0.07%) 5125787 ( 0.01%) 187.57
frag 2341423 ( 5.59%) 1841918151 ( 5.37%) 786.67
ip6 1377955 ( 3.29%) 1209724008 ( 3.53%) 877.91
tcp6 1279614 ( 3.05%) 1173077000 ( 3.42%) 916.74
http(s) 1041023 ( 2.48%) 1130818968 ( 3.30%) 1086.26
http(c) 204899 ( 0.49%) 20529039 ( 0.06%) 100.19
squid 6 ( 0.00%) 476 ( 0.00%) 79.33
smtp 302 ( 0.00%) 156124 ( 0.00%) 516.97
ftp 146 ( 0.00%) 16008 ( 0.00%) 109.64
dns 124 ( 0.00%) 54142 ( 0.00%) 436.63
bgp 101 ( 0.00%) 27144 ( 0.00%) 268.75
other 33013 ( 0.08%) 21475099 ( 0.06%) 650.50
udp6 74561 ( 0.18%) 32071698 ( 0.09%) 430.14
dns 60272 ( 0.14%) 17811350 ( 0.05%) 295.52
quake 1 ( 0.00%) 111 ( 0.00%) 111.00
other 14288 ( 0.03%) 14260237 ( 0.04%) 998.06
icmp6 22398 ( 0.05%) 3323940 ( 0.01%) 148.40
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1267 ( 0.00%) 1235742 ( 0.00%) 975.33
tcpdump file: 201207051400.dump.gz (967.53 MB)