Traffic Trace Info
DumpFile: 201207071400.dump
FileSize: 2740.27MB
Id: 201207071400
StartTime: Sat Jul 7 14:00:00 2012
EndTime: Sat Jul 7 14:15:00 2012
TotalTime: 899.70 seconds
TotalCapSize: -2045.32MB CapLen: 96 bytes
# of packets: 45192783 (40738.94MB)
AvgRate: 380.02Mbps stddev:323.50M
IP flow (unique src/dst pair) Information
# of flows: 1720465 (avg. 26.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
29.5% 28.3% 1.1% 0.9% 0.9% 0.7% 0.6% 0.6% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 1409938
Top 10 bandwidth usage (bytes/total in %):
59.4% 29.9% 28.7% 8.9% 4.6% 3.2% 2.2% 1.3% 1.3% 1.2%
# of IPv6 addresses: 6346
Top 10 bandwidth usage (bytes/total in %):
20.4% 16.6% 4.9% 4.9% 4.8% 4.6% 4.0% 4.0% 3.9% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201207071400.pktlen.png)
detailed numbers
[ 32- 63]: 5531655
[ 64- 127]: 5818175
[ 128- 255]: 5812547
[ 256- 511]: 471974
[ 512- 1023]: 594139
[ 1024- 2047]: 26964293
Protocol Breakdown
![[protocol breakdown chart]](201207071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 45192783 (100.00%) 42717872347 (100.00%) 945.24
ip 44514443 ( 98.50%) 42140995612 ( 98.65%) 946.68
tcp 17023207 ( 37.67%) 14907654828 ( 34.90%) 875.73
http(s) 8899119 ( 19.69%) 11853478426 ( 27.75%) 1331.98
http(c) 4904480 ( 10.85%) 957185663 ( 2.24%) 195.17
squid 53543 ( 0.12%) 14708271 ( 0.03%) 274.70
smtp 49653 ( 0.11%) 21857951 ( 0.05%) 440.21
nntp 6 ( 0.00%) 432 ( 0.00%) 72.00
ftp 15768 ( 0.03%) 2432784 ( 0.01%) 154.29
pop3 5208 ( 0.01%) 5185298 ( 0.01%) 995.64
imap 1290 ( 0.00%) 163515 ( 0.00%) 126.76
telnet 2902 ( 0.01%) 238367 ( 0.00%) 82.14
ssh 13211 ( 0.03%) 2994769 ( 0.01%) 226.69
dns 1244 ( 0.00%) 217428 ( 0.00%) 174.78
bgp 537 ( 0.00%) 116296 ( 0.00%) 216.57
napster 26 ( 0.00%) 3040 ( 0.00%) 116.92
realaud 18 ( 0.00%) 1927 ( 0.00%) 107.06
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 5225 ( 0.01%) 2391433 ( 0.01%) 457.69
hotline 36 ( 0.00%) 3518 ( 0.00%) 97.72
other 3070938 ( 6.80%) 2046675530 ( 4.79%) 666.47
udp 24812490 ( 54.90%) 26482838439 ( 61.99%) 1067.32
dns 354634 ( 0.78%) 117769793 ( 0.28%) 332.09
rip 409 ( 0.00%) 326824 ( 0.00%) 799.08
realaud 457 ( 0.00%) 476514 ( 0.00%) 1042.70
halflif 559 ( 0.00%) 585116 ( 0.00%) 1046.72
starcra 297 ( 0.00%) 269771 ( 0.00%) 908.32
everque 731 ( 0.00%) 615066 ( 0.00%) 841.40
unreal 237 ( 0.00%) 208087 ( 0.00%) 878.00
quake 849 ( 0.00%) 935134 ( 0.00%) 1101.45
cuseeme 259 ( 0.00%) 274375 ( 0.00%) 1059.36
other 18704732 ( 41.39%) 18190346177 ( 42.58%) 972.50
icmp 1461158 ( 3.23%) 134831847 ( 0.32%) 92.28
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 776 ( 0.00%) 202720 ( 0.00%) 261.24
ip6 1183599 ( 2.62%) 608864802 ( 1.43%) 514.42
pim 30 ( 0.00%) 1800 ( 0.00%) 60.00
other 32998 ( 0.07%) 6581906 ( 0.02%) 199.46
frag 16737849 ( 37.04%) 24329619712 ( 56.95%) 1453.57
ip6 678340 ( 1.50%) 576876735 ( 1.35%) 850.42
tcp6 607461 ( 1.34%) 551730223 ( 1.29%) 908.26
http(s) 339285 ( 0.75%) 361903999 ( 0.85%) 1066.67
http(c) 121572 ( 0.27%) 32045323 ( 0.08%) 263.59
smtp 96 ( 0.00%) 50060 ( 0.00%) 521.46
ftp 149 ( 0.00%) 16242 ( 0.00%) 109.01
dns 97 ( 0.00%) 30421 ( 0.00%) 313.62
bgp 94 ( 0.00%) 29355 ( 0.00%) 312.29
other 146168 ( 0.32%) 157654823 ( 0.37%) 1078.59
udp6 50608 ( 0.11%) 21269671 ( 0.05%) 420.28
dns 38406 ( 0.08%) 11250531 ( 0.03%) 292.94
quake 2 ( 0.00%) 220 ( 0.00%) 110.00
other 12200 ( 0.03%) 10018920 ( 0.02%) 821.22
icmp6 19196 ( 0.04%) 2912433 ( 0.01%) 151.72
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 960 ( 0.00%) 948748 ( 0.00%) 988.28
tcpdump file: 201207071400.dump.gz (764.04 MB)