Traffic Trace Info
DumpFile: 201207101400.dump
FileSize: 2549.46MB
Id: 201207101400
StartTime: Tue Jul 10 14:00:01 2012
EndTime: Tue Jul 10 14:15:00 2012
TotalTime: 899.31 seconds
TotalCapSize: 2023.60MB CapLen: 96 bytes
# of packets: 34462806 (24764.00MB)
AvgRate: 231.02Mbps stddev:38.71M
IP flow (unique src/dst pair) Information
# of flows: 2044464 (avg. 16.86 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 3.7% 2.1% 1.7% 1.6% 1.4% 1.2% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 1529969
Top 10 bandwidth usage (bytes/total in %):
16.6% 9.2% 8.0% 5.7% 5.4% 4.6% 4.5% 3.7% 3.1% 3.0%
# of IPv6 addresses: 9244
Top 10 bandwidth usage (bytes/total in %):
44.4% 41.9% 3.3% 3.3% 2.5% 2.5% 2.1% 2.0% 1.8% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201207101400.pktlen.png)
detailed numbers
[ 32- 63]: 6037036
[ 64- 127]: 9260757
[ 128- 255]: 1004159
[ 256- 511]: 1044090
[ 512- 1023]: 798472
[ 1024- 2047]: 16318292
Protocol Breakdown
![[protocol breakdown chart]](201207101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34462806 (100.00%) 25966939558 (100.00%) 753.48
ip 32207438 ( 93.46%) 23663779130 ( 91.13%) 734.73
tcp 25983331 ( 75.40%) 21264610978 ( 81.89%) 818.39
http(s) 12527659 ( 36.35%) 16706999114 ( 64.34%) 1333.61
http(c) 9799319 ( 28.43%) 1953261165 ( 7.52%) 199.33
squid 68519 ( 0.20%) 31343154 ( 0.12%) 457.44
smtp 61539 ( 0.18%) 23808692 ( 0.09%) 386.89
ftp 79214 ( 0.23%) 7693756 ( 0.03%) 97.13
pop3 6780 ( 0.02%) 6373222 ( 0.02%) 940.00
imap 1843 ( 0.01%) 626891 ( 0.00%) 340.15
telnet 30444 ( 0.09%) 2274954 ( 0.01%) 74.73
ssh 17290 ( 0.05%) 4108023 ( 0.02%) 237.60
dns 2009 ( 0.01%) 287110 ( 0.00%) 142.91
bgp 605 ( 0.00%) 197534 ( 0.00%) 326.50
napster 35 ( 0.00%) 3025 ( 0.00%) 86.43
realaud 18 ( 0.00%) 2543 ( 0.00%) 141.28
rtsp 19143 ( 0.06%) 26078490 ( 0.10%) 1362.30
icecast 39540 ( 0.11%) 36431416 ( 0.14%) 921.38
hotline 4 ( 0.00%) 272 ( 0.00%) 68.00
other 3329365 ( 9.66%) 2465121317 ( 9.49%) 740.42
udp 2855336 ( 8.29%) 1269237321 ( 4.89%) 444.51
dns 994309 ( 2.89%) 551597491 ( 2.12%) 554.75
rip 3 ( 0.00%) 217 ( 0.00%) 72.33
realaud 7 ( 0.00%) 904 ( 0.00%) 129.14
halflif 153 ( 0.00%) 17298 ( 0.00%) 113.06
starcra 28 ( 0.00%) 3116 ( 0.00%) 111.29
everque 178 ( 0.00%) 39180 ( 0.00%) 220.11
unreal 39 ( 0.00%) 10494 ( 0.00%) 269.08
quake 28 ( 0.00%) 2506 ( 0.00%) 89.50
cuseeme 10 ( 0.00%) 831 ( 0.00%) 83.10
other 1860243 ( 5.40%) 717443475 ( 2.76%) 385.67
icmp 1554401 ( 4.51%) 155083601 ( 0.60%) 99.77
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 47061 ( 0.14%) 8962302 ( 0.03%) 190.44
ip6 1735925 ( 5.04%) 957372411 ( 3.69%) 551.51
pim 31 ( 0.00%) 1860 ( 0.00%) 60.00
other 31168 ( 0.09%) 8491387 ( 0.03%) 272.44
frag 383048 ( 1.11%) 455240774 ( 1.75%) 1188.47
ip6 2255368 ( 6.54%) 2303160428 ( 8.87%) 1021.19
tcp6 2136801 ( 6.20%) 2267152615 ( 8.73%) 1061.00
http(s) 1129392 ( 3.28%) 1206623391 ( 4.65%) 1068.38
http(c) 154311 ( 0.45%) 15482400 ( 0.06%) 100.33
smtp 285 ( 0.00%) 118373 ( 0.00%) 415.34
ftp 554 ( 0.00%) 55554 ( 0.00%) 100.28
pop3 556 ( 0.00%) 620109 ( 0.00%) 1115.30
dns 100 ( 0.00%) 36698 ( 0.00%) 366.98
bgp 97 ( 0.00%) 30994 ( 0.00%) 319.53
other 851506 ( 2.47%) 1044185096 ( 4.02%) 1226.28
udp6 93777 ( 0.27%) 31446171 ( 0.12%) 335.33
dns 62157 ( 0.18%) 18656072 ( 0.07%) 300.14
other 31620 ( 0.09%) 12790099 ( 0.05%) 404.49
icmp6 23452 ( 0.07%) 3356044 ( 0.01%) 143.10
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1223 ( 0.00%) 1189938 ( 0.00%) 972.97
tcpdump file: 201207101400.dump.gz (820.32 MB)