Traffic Trace Info
DumpFile: 201207061400.dump
FileSize: 2547.67MB
Id: 201207061400
StartTime: Fri Jul 6 14:00:01 2012
EndTime: Fri Jul 6 14:15:01 2012
TotalTime: 900.05 seconds
TotalCapSize: 2004.29MB CapLen: 96 bytes
# of packets: 35610221 (28387.77MB)
AvgRate: 264.57Mbps stddev:52.64M
IP flow (unique src/dst pair) Information
# of flows: 2032480 (avg. 17.52 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.0% 5.7% 2.1% 1.6% 1.2% 1.1% 0.9% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 1537571
Top 10 bandwidth usage (bytes/total in %):
16.4% 13.5% 6.3% 6.3% 6.1% 6.0% 5.1% 2.5% 2.5% 2.2%
# of IPv6 addresses: 7916
Top 10 bandwidth usage (bytes/total in %):
14.3% 9.7% 6.8% 5.6% 5.3% 5.3% 4.6% 3.2% 3.2% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201207061400.pktlen.png)
detailed numbers
[ 32- 63]: 6508108
[ 64- 127]: 6949654
[ 128- 255]: 978838
[ 256- 511]: 902370
[ 512- 1023]: 2039694
[ 1024- 2047]: 18231557
Protocol Breakdown
![[protocol breakdown chart]](201207061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35610221 (100.00%) 29766733555 (100.00%) 835.90
ip 34193120 ( 96.02%) 28499971413 ( 95.74%) 833.50
tcp 27468656 ( 77.14%) 25268566380 ( 84.89%) 919.91
http(s) 17011660 ( 47.77%) 22583719632 ( 75.87%) 1327.54
http(c) 7331089 ( 20.59%) 989368148 ( 3.32%) 134.96
squid 96813 ( 0.27%) 48172503 ( 0.16%) 497.58
smtp 57547 ( 0.16%) 19227544 ( 0.06%) 334.12
ftp 16125 ( 0.05%) 2524150 ( 0.01%) 156.54
pop3 8820 ( 0.02%) 8417530 ( 0.03%) 954.37
imap 1363 ( 0.00%) 227388 ( 0.00%) 166.83
telnet 8863 ( 0.02%) 676928 ( 0.00%) 76.38
ssh 40758 ( 0.11%) 4910577 ( 0.02%) 120.48
dns 1539 ( 0.00%) 240626 ( 0.00%) 156.35
bgp 523 ( 0.00%) 114523 ( 0.00%) 218.97
napster 113 ( 0.00%) 8385 ( 0.00%) 74.20
realaud 49 ( 0.00%) 8416 ( 0.00%) 171.76
rtsp 8837 ( 0.02%) 11537175 ( 0.04%) 1305.55
icecast 645 ( 0.00%) 89742 ( 0.00%) 139.13
hotline 19 ( 0.00%) 1917 ( 0.00%) 100.89
other 2883892 ( 8.10%) 1599321114 ( 5.37%) 554.57
udp 3822819 ( 10.74%) 2152938337 ( 7.23%) 563.18
dns 777016 ( 2.18%) 374508616 ( 1.26%) 481.98
realaud 15 ( 0.00%) 1878 ( 0.00%) 125.20
halflif 125 ( 0.00%) 10166 ( 0.00%) 81.33
starcra 48 ( 0.00%) 6363 ( 0.00%) 132.56
everque 128 ( 0.00%) 20374 ( 0.00%) 159.17
unreal 110 ( 0.00%) 20163 ( 0.00%) 183.30
quake 15 ( 0.00%) 1696 ( 0.00%) 113.07
cuseeme 7 ( 0.00%) 536 ( 0.00%) 76.57
other 3043975 ( 8.55%) 1777384986 ( 5.97%) 583.90
icmp 1709299 ( 4.80%) 184498869 ( 0.62%) 107.94
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 4221 ( 0.01%) 1226670 ( 0.00%) 290.61
ip6 1124700 ( 3.16%) 855084995 ( 2.87%) 760.28
pim 27 ( 0.00%) 1620 ( 0.00%) 60.00
other 63213 ( 0.18%) 37635272 ( 0.13%) 595.37
frag 291144 ( 0.82%) 336945405 ( 1.13%) 1157.32
ip6 1417101 ( 3.98%) 1266762142 ( 4.26%) 893.91
tcp6 1327084 ( 3.73%) 1241394746 ( 4.17%) 935.43
http(s) 1049099 ( 2.95%) 1135793594 ( 3.82%) 1082.64
http(c) 149545 ( 0.42%) 14510645 ( 0.05%) 97.03
smtp 217 ( 0.00%) 76196 ( 0.00%) 351.13
ftp 148 ( 0.00%) 16156 ( 0.00%) 109.16
dns 72 ( 0.00%) 30701 ( 0.00%) 426.40
bgp 374 ( 0.00%) 298883 ( 0.00%) 799.15
other 127629 ( 0.36%) 90668571 ( 0.30%) 710.41
udp6 65323 ( 0.18%) 20782966 ( 0.07%) 318.16
dns 61539 ( 0.17%) 20234690 ( 0.07%) 328.81
everque 1 ( 0.00%) 117 ( 0.00%) 117.00
other 3783 ( 0.01%) 548159 ( 0.00%) 144.90
icmp6 23223 ( 0.07%) 3274128 ( 0.01%) 140.99
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1356 ( 0.00%) 1294642 ( 0.00%) 954.75
tcpdump file: 201207061400.dump.gz (820.08 MB)