Traffic Trace Info
DumpFile: 201207121400.dump
FileSize: 2489.38MB
Id: 201207121400
StartTime: Thu Jul 12 14:00:00 2012
EndTime: Thu Jul 12 14:15:00 2012
TotalTime: 899.82 seconds
TotalCapSize: 1974.37MB CapLen: 96 bytes
# of packets: 33751303 (24511.69MB)
AvgRate: 228.46Mbps stddev:33.18M
IP flow (unique src/dst pair) Information
# of flows: 1885537 (avg. 17.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 3.6% 2.6% 2.4% 2.0% 1.7% 1.2% 1.1% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 1466001
Top 10 bandwidth usage (bytes/total in %):
14.7% 8.1% 5.3% 4.7% 4.7% 3.9% 3.3% 3.1% 3.0% 2.9%
# of IPv6 addresses: 9235
Top 10 bandwidth usage (bytes/total in %):
44.6% 42.5% 11.6% 7.6% 4.1% 2.6% 2.6% 2.1% 2.0% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201207121400.pktlen.png)
detailed numbers
[ 32- 63]: 4622264
[ 64- 127]: 10317661
[ 128- 255]: 975726
[ 256- 511]: 687770
[ 512- 1023]: 979353
[ 1024- 2047]: 16168529
Protocol Breakdown
![[protocol breakdown chart]](201207121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33751303 (100.00%) 25702368563 (100.00%) 761.52
ip 31538111 ( 93.44%) 23373590799 ( 90.94%) 741.12
tcp 23958897 ( 70.99%) 19646970821 ( 76.44%) 820.03
http(s) 12038720 ( 35.67%) 15966012873 ( 62.12%) 1326.22
http(c) 8918960 ( 26.43%) 1659223871 ( 6.46%) 186.03
squid 29735 ( 0.09%) 11716081 ( 0.05%) 394.02
smtp 52000 ( 0.15%) 15462169 ( 0.06%) 297.35
ftp 71347 ( 0.21%) 6436261 ( 0.03%) 90.21
pop3 6688 ( 0.02%) 4655336 ( 0.02%) 696.07
imap 2446 ( 0.01%) 439754 ( 0.00%) 179.78
telnet 1875 ( 0.01%) 163258 ( 0.00%) 87.07
ssh 32308 ( 0.10%) 5903049 ( 0.02%) 182.71
dns 3004 ( 0.01%) 335918 ( 0.00%) 111.82
bgp 529 ( 0.00%) 116928 ( 0.00%) 221.04
napster 8 ( 0.00%) 1013 ( 0.00%) 126.62
realaud 10 ( 0.00%) 3573 ( 0.00%) 357.30
icecast 15619 ( 0.05%) 7684269 ( 0.03%) 491.98
hotline 19 ( 0.00%) 2176 ( 0.00%) 114.53
other 2785629 ( 8.25%) 1968814292 ( 7.66%) 706.78
udp 4263170 ( 12.63%) 2796038862 ( 10.88%) 655.86
dns 667273 ( 1.98%) 315478071 ( 1.23%) 472.79
realaud 4 ( 0.00%) 348 ( 0.00%) 87.00
halflif 22 ( 0.00%) 5158 ( 0.00%) 234.45
starcra 21 ( 0.00%) 2127 ( 0.00%) 101.29
everque 256 ( 0.00%) 31304 ( 0.00%) 122.28
unreal 4 ( 0.00%) 699 ( 0.00%) 174.75
quake 58 ( 0.00%) 4894 ( 0.00%) 84.38
cuseeme 5 ( 0.00%) 758 ( 0.00%) 151.60
other 3595338 ( 10.65%) 2480457625 ( 9.65%) 689.91
icmp 1532599 ( 4.54%) 171148131 ( 0.67%) 111.67
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 21683 ( 0.06%) 3923602 ( 0.02%) 180.95
ip6 1718668 ( 5.09%) 744309721 ( 2.90%) 433.07
pim 87 ( 0.00%) 5220 ( 0.00%) 60.00
other 42822 ( 0.13%) 11175172 ( 0.04%) 260.97
frag 213726 ( 0.63%) 222997494 ( 0.87%) 1043.38
ip6 2213190 ( 6.56%) 2328777644 ( 9.06%) 1052.23
tcp6 2112351 ( 6.26%) 2303883241 ( 8.96%) 1090.67
http(s) 1118863 ( 3.32%) 1269279575 ( 4.94%) 1134.44
http(c) 158744 ( 0.47%) 16584905 ( 0.06%) 104.48
smtp 339 ( 0.00%) 103336 ( 0.00%) 304.83
ftp 274 ( 0.00%) 29974 ( 0.00%) 109.39
pop3 5 ( 0.00%) 418 ( 0.00%) 83.60
dns 81 ( 0.00%) 35780 ( 0.00%) 441.73
bgp 90 ( 0.00%) 22247 ( 0.00%) 247.19
other 833955 ( 2.47%) 1017827006 ( 3.96%) 1220.48
udp6 65422 ( 0.19%) 18991060 ( 0.07%) 290.29
dns 61340 ( 0.18%) 18120978 ( 0.07%) 295.42
realaud 1 ( 0.00%) 108 ( 0.00%) 108.00
everque 4 ( 0.00%) 348 ( 0.00%) 87.00
other 4077 ( 0.01%) 869626 ( 0.00%) 213.30
icmp6 33871 ( 0.10%) 4537479 ( 0.02%) 133.96
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1432 ( 0.00%) 1350304 ( 0.01%) 942.95
tcpdump file: 201207121400.dump.gz (779.08 MB)