Traffic Trace Info
DumpFile: 201207111400.dump
FileSize: 2926.73MB
Id: 201207111400
StartTime: Wed Jul 11 14:00:00 2012
EndTime: Wed Jul 11 14:15:00 2012
TotalTime: 900.10 seconds
TotalCapSize: -1782.56MB CapLen: 96 bytes
# of packets: 40191954 (30871.99MB)
AvgRate: 287.70Mbps stddev:38.00M
IP flow (unique src/dst pair) Information
# of flows: 2236243 (avg. 17.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 4.3% 3.9% 3.1% 2.4% 1.9% 1.7% 1.6% 1.2% 1.0%
IP address Information
# of IPv4 addresses: 1582106
Top 10 bandwidth usage (bytes/total in %):
10.1% 9.1% 7.5% 6.3% 5.6% 5.6% 4.6% 4.3% 3.9% 3.1%
# of IPv6 addresses: 8697
Top 10 bandwidth usage (bytes/total in %):
52.8% 50.5% 5.2% 3.3% 2.2% 1.9% 1.7% 1.7% 1.5% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201207111400.pktlen.png)
detailed numbers
[ 32- 63]: 6852113
[ 64- 127]: 9612994
[ 128- 255]: 1057140
[ 256- 511]: 1076253
[ 512- 1023]: 1211659
[ 1024- 2047]: 20381795
Protocol Breakdown
![[protocol breakdown chart]](201207111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40191954 (100.00%) 32371625648 (100.00%) 805.43
ip 38212681 ( 95.08%) 30403747833 ( 93.92%) 795.65
tcp 30852998 ( 76.76%) 27487444985 ( 84.91%) 890.92
http(s) 15333861 ( 38.15%) 20568207464 ( 63.54%) 1341.36
http(c) 8807387 ( 21.91%) 2011772815 ( 6.21%) 228.42
squid 125241 ( 0.31%) 75660916 ( 0.23%) 604.12
smtp 56056 ( 0.14%) 19006067 ( 0.06%) 339.05
ftp 80697 ( 0.20%) 18243360 ( 0.06%) 226.07
pop3 8751 ( 0.02%) 6944986 ( 0.02%) 793.62
imap 4127 ( 0.01%) 1769376 ( 0.01%) 428.73
telnet 53396 ( 0.13%) 3977079 ( 0.01%) 74.48
ssh 167412 ( 0.42%) 36442796 ( 0.11%) 217.68
dns 2538 ( 0.01%) 293859 ( 0.00%) 115.78
bgp 553 ( 0.00%) 145106 ( 0.00%) 262.40
napster 15 ( 0.00%) 1583 ( 0.00%) 105.53
realaud 52 ( 0.00%) 3472 ( 0.00%) 66.77
rtsp 17178 ( 0.04%) 8788553 ( 0.03%) 511.62
icecast 38114 ( 0.09%) 33451879 ( 0.10%) 877.68
hotline 4 ( 0.00%) 242 ( 0.00%) 60.50
other 6157609 ( 15.32%) 4702735012 ( 14.53%) 763.73
udp 3796981 ( 9.45%) 1564094612 ( 4.83%) 411.93
dns 800934 ( 1.99%) 355566018 ( 1.10%) 443.94
rip 2 ( 0.00%) 141 ( 0.00%) 70.50
realaud 20 ( 0.00%) 1437 ( 0.00%) 71.85
halflif 21 ( 0.00%) 1736 ( 0.00%) 82.67
starcra 100 ( 0.00%) 15693 ( 0.00%) 156.93
everque 92 ( 0.00%) 18339 ( 0.00%) 199.34
unreal 52 ( 0.00%) 19189 ( 0.00%) 369.02
quake 51 ( 0.00%) 12288 ( 0.00%) 240.94
cuseeme 3 ( 0.00%) 242 ( 0.00%) 80.67
other 2995502 ( 7.45%) 1208392975 ( 3.73%) 403.40
icmp 1555813 ( 3.87%) 155445639 ( 0.48%) 99.91
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 4416 ( 0.01%) 728480 ( 0.00%) 164.96
ip6 1962265 ( 4.88%) 1184329831 ( 3.66%) 603.55
pim 26 ( 0.00%) 1560 ( 0.00%) 60.00
other 39997 ( 0.10%) 11683456 ( 0.04%) 292.11
frag 233163 ( 0.58%) 272367967 ( 0.84%) 1168.14
ip6 1979271 ( 4.92%) 1967877695 ( 6.08%) 994.24
tcp6 1876498 ( 4.67%) 1943807007 ( 6.00%) 1035.87
http(s) 852250 ( 2.12%) 907564266 ( 2.80%) 1064.90
http(c) 199925 ( 0.50%) 19495762 ( 0.06%) 97.52
smtp 833 ( 0.00%) 803403 ( 0.00%) 964.47
ftp 560 ( 0.00%) 72877 ( 0.00%) 130.14
dns 132 ( 0.00%) 49058 ( 0.00%) 371.65
bgp 98 ( 0.00%) 25654 ( 0.00%) 261.78
other 822700 ( 2.05%) 1015795987 ( 3.14%) 1234.71
udp6 70532 ( 0.18%) 18781829 ( 0.06%) 266.29
dns 60299 ( 0.15%) 17584079 ( 0.05%) 291.61
realaud 1 ( 0.00%) 118 ( 0.00%) 118.00
halflif 1 ( 0.00%) 116 ( 0.00%) 116.00
other 10231 ( 0.03%) 1197516 ( 0.00%) 117.05
icmp6 30893 ( 0.08%) 4074471 ( 0.01%) 131.89
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1235 ( 0.00%) 1199014 ( 0.00%) 970.86
tcpdump file: 201207111400.dump.gz (924.37 MB)