Traffic Trace Info
DumpFile: 201207091400.dump
FileSize: 2920.01MB
Id: 201207091400
StartTime: Mon Jul 9 14:00:00 2012
EndTime: Mon Jul 9 14:15:01 2012
TotalTime: 900.30 seconds
TotalCapSize: -1783.57MB CapLen: 96 bytes
# of packets: 39817902 (29703.01MB)
AvgRate: 276.77Mbps stddev:55.48M
IP flow (unique src/dst pair) Information
# of flows: 2289719 (avg. 17.39 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.1% 3.1% 2.5% 1.8% 1.7% 1.6% 1.5% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 1552458
Top 10 bandwidth usage (bytes/total in %):
15.4% 13.8% 6.6% 5.7% 5.3% 5.1% 4.1% 3.4% 2.8% 2.8%
# of IPv6 addresses: 8389
Top 10 bandwidth usage (bytes/total in %):
32.6% 31.1% 5.2% 5.2% 5.0% 5.0% 4.1% 3.1% 3.1% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201207091400.pktlen.png)
detailed numbers
[ 32- 63]: 6106786
[ 64- 127]: 10991667
[ 128- 255]: 1062376
[ 256- 511]: 966690
[ 512- 1023]: 1039014
[ 1024- 2047]: 19651369
Protocol Breakdown
![[protocol breakdown chart]](201207091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39817902 (100.00%) 31145862908 (100.00%) 782.21
ip 37426068 ( 93.99%) 28682076518 ( 92.09%) 766.37
tcp 29920707 ( 75.14%) 25347317970 ( 81.38%) 847.15
http(s) 14317210 ( 35.96%) 18654542611 ( 59.89%) 1302.95
http(c) 10222063 ( 25.67%) 3350498151 ( 10.76%) 327.77
squid 67333 ( 0.17%) 45896987 ( 0.15%) 681.64
smtp 44906 ( 0.11%) 12725474 ( 0.04%) 283.38
ftp 15193 ( 0.04%) 2447543 ( 0.01%) 161.10
pop3 4722 ( 0.01%) 2849049 ( 0.01%) 603.36
imap 2688 ( 0.01%) 554945 ( 0.00%) 206.45
telnet 145524 ( 0.37%) 10339127 ( 0.03%) 71.05
ssh 286777 ( 0.72%) 21685957 ( 0.07%) 75.62
dns 1512 ( 0.00%) 237504 ( 0.00%) 157.08
bgp 513 ( 0.00%) 165828 ( 0.00%) 323.25
napster 10 ( 0.00%) 999 ( 0.00%) 99.90
realaud 24 ( 0.00%) 2579 ( 0.00%) 107.46
rtsp 34933 ( 0.09%) 47074711 ( 0.15%) 1347.57
icecast 20145 ( 0.05%) 14988502 ( 0.05%) 744.03
other 4757154 ( 11.95%) 3183308003 ( 10.22%) 669.16
udp 4054087 ( 10.18%) 2181122947 ( 7.00%) 538.01
dns 899883 ( 2.26%) 547313421 ( 1.76%) 608.21
rip 1 ( 0.00%) 79 ( 0.00%) 79.00
realaud 19 ( 0.00%) 1978 ( 0.00%) 104.11
halflif 113 ( 0.00%) 25990 ( 0.00%) 230.00
starcra 51 ( 0.00%) 3647 ( 0.00%) 71.51
everque 115 ( 0.00%) 19698 ( 0.00%) 171.29
unreal 39 ( 0.00%) 10066 ( 0.00%) 258.10
quake 14 ( 0.00%) 1248 ( 0.00%) 89.14
cuseeme 4 ( 0.00%) 313 ( 0.00%) 78.25
other 3153445 ( 7.92%) 1633647361 ( 5.25%) 518.05
icmp 1500381 ( 3.77%) 152606109 ( 0.49%) 101.71
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 844 ( 0.00%) 234120 ( 0.00%) 277.39
ip6 1918901 ( 4.82%) 995596163 ( 3.20%) 518.84
pim 27 ( 0.00%) 1620 ( 0.00%) 60.00
other 30937 ( 0.08%) 5178429 ( 0.02%) 167.39
frag 396505 ( 1.00%) 465782982 ( 1.50%) 1174.72
ip6 2391834 ( 6.01%) 2463786390 ( 7.91%) 1030.08
tcp6 2303044 ( 5.78%) 2434768864 ( 7.82%) 1057.20
http(s) 1359163 ( 3.41%) 1564385137 ( 5.02%) 1150.99
http(c) 241313 ( 0.61%) 23326304 ( 0.07%) 96.66
squid 6 ( 0.00%) 476 ( 0.00%) 79.33
smtp 8655 ( 0.02%) 9635076 ( 0.03%) 1113.24
ftp 176 ( 0.00%) 18606 ( 0.00%) 105.72
pop3 74 ( 0.00%) 47452 ( 0.00%) 641.24
ssh 3 ( 0.00%) 254 ( 0.00%) 84.67
dns 82 ( 0.00%) 34272 ( 0.00%) 417.95
bgp 98 ( 0.00%) 33064 ( 0.00%) 337.39
other 693474 ( 1.74%) 837288223 ( 2.69%) 1207.38
udp6 70661 ( 0.18%) 25468625 ( 0.08%) 360.43
dns 61002 ( 0.15%) 18371493 ( 0.06%) 301.16
halflif 1 ( 0.00%) 90 ( 0.00%) 90.00
quake 1 ( 0.00%) 101 ( 0.00%) 101.00
other 9657 ( 0.02%) 7096941 ( 0.02%) 734.90
icmp6 17057 ( 0.04%) 2597691 ( 0.01%) 152.29
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 960 ( 0.00%) 935954 ( 0.00%) 974.95
tcpdump file: 201207091400.dump.gz (927.36 MB)