Traffic Trace Info
DumpFile: 201207131400.dump
FileSize: 2981.49MB
Id: 201207131400
StartTime: Fri Jul 13 14:00:00 2012
EndTime: Fri Jul 13 14:15:00 2012
TotalTime: 899.98 seconds
TotalCapSize: -1740.21MB CapLen: 96 bytes
# of packets: 41005270 (30172.88MB)
AvgRate: 281.21Mbps stddev:59.52M
IP flow (unique src/dst pair) Information
# of flows: 1941292 (avg. 21.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.5% 5.0% 3.8% 3.2% 3.1% 2.3% 2.2% 1.9% 1.7% 1.7%
IP address Information
# of IPv4 addresses: 1475646
Top 10 bandwidth usage (bytes/total in %):
15.8% 12.8% 8.7% 5.9% 5.4% 5.2% 4.8% 4.1% 3.5% 3.1%
# of IPv6 addresses: 8866
Top 10 bandwidth usage (bytes/total in %):
48.5% 47.0% 4.1% 3.1% 2.5% 2.4% 2.2% 1.9% 1.8% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201207131400.pktlen.png)
detailed numbers
[ 32- 63]: 8769775
[ 64- 127]: 8740107
[ 128- 255]: 1095639
[ 256- 511]: 1212447
[ 512- 1023]: 1331767
[ 1024- 2047]: 19855535
Protocol Breakdown
![[protocol breakdown chart]](201207131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41005270 (100.00%) 31638562763 (100.00%) 771.57
ip 39027943 ( 95.18%) 29584260953 ( 93.51%) 758.03
tcp 28570748 ( 69.68%) 26412988803 ( 83.48%) 924.48
http(s) 17530582 ( 42.75%) 23115670930 ( 73.06%) 1318.59
http(c) 7698039 ( 18.77%) 1064052874 ( 3.36%) 138.22
squid 54487 ( 0.13%) 23600084 ( 0.07%) 433.13
smtp 62112 ( 0.15%) 19069289 ( 0.06%) 307.01
nntp 24 ( 0.00%) 1496 ( 0.00%) 62.33
ftp 74712 ( 0.18%) 6789722 ( 0.02%) 90.88
pop3 4321 ( 0.01%) 2394707 ( 0.01%) 554.20
imap 5168 ( 0.01%) 2058944 ( 0.01%) 398.40
telnet 61892 ( 0.15%) 4604935 ( 0.01%) 74.40
ssh 13887 ( 0.03%) 4095497 ( 0.01%) 294.92
dns 5364 ( 0.01%) 587890 ( 0.00%) 109.60
bgp 527 ( 0.00%) 110009 ( 0.00%) 208.75
napster 44 ( 0.00%) 3891 ( 0.00%) 88.43
realaud 40 ( 0.00%) 3665 ( 0.00%) 91.62
rtsp 5394 ( 0.01%) 5850452 ( 0.02%) 1084.62
icecast 295 ( 0.00%) 57393 ( 0.00%) 194.55
hotline 17 ( 0.00%) 1088 ( 0.00%) 64.00
other 3053842 ( 7.45%) 2164035877 ( 6.84%) 708.63
udp 3678771 ( 8.97%) 1818980811 ( 5.75%) 494.45
dns 605935 ( 1.48%) 271229000 ( 0.86%) 447.62
realaud 12 ( 0.00%) 1796 ( 0.00%) 149.67
halflif 42 ( 0.00%) 9397 ( 0.00%) 223.74
starcra 18 ( 0.00%) 2719 ( 0.00%) 151.06
everque 179 ( 0.00%) 24391 ( 0.00%) 136.26
unreal 48 ( 0.00%) 14551 ( 0.00%) 303.15
quake 2953 ( 0.01%) 2642912 ( 0.01%) 894.99
cuseeme 6 ( 0.00%) 556 ( 0.00%) 92.67
other 3038417 ( 7.41%) 1543104735 ( 4.88%) 507.86
icmp 5175229 ( 12.62%) 572791904 ( 1.81%) 110.68
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 9484 ( 0.02%) 1637480 ( 0.01%) 172.66
ip6 1532965 ( 3.74%) 763579001 ( 2.41%) 498.11
pim 92 ( 0.00%) 5520 ( 0.00%) 60.00
other 60470 ( 0.15%) 14258274 ( 0.05%) 235.79
frag 252198 ( 0.62%) 252254941 ( 0.80%) 1000.23
ip6 1977327 ( 4.82%) 2054301810 ( 6.49%) 1038.93
tcp6 1873866 ( 4.57%) 2014611661 ( 6.37%) 1075.11
http(s) 914174 ( 2.23%) 990420679 ( 3.13%) 1083.40
http(c) 157530 ( 0.38%) 15081078 ( 0.05%) 95.73
smtp 87 ( 0.00%) 32659 ( 0.00%) 375.39
ftp 148 ( 0.00%) 16155 ( 0.00%) 109.16
dns 135 ( 0.00%) 56543 ( 0.00%) 418.84
bgp 92 ( 0.00%) 25301 ( 0.00%) 275.01
other 801700 ( 1.96%) 1008979246 ( 3.19%) 1258.55
udp6 68613 ( 0.17%) 32907233 ( 0.10%) 479.61
dns 48543 ( 0.12%) 16021169 ( 0.05%) 330.04
halflif 1 ( 0.00%) 111 ( 0.00%) 111.00
other 20069 ( 0.05%) 16885953 ( 0.05%) 841.39
icmp6 31705 ( 0.08%) 4322120 ( 0.01%) 136.32
ip6 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3027 ( 0.01%) 2445068 ( 0.01%) 807.75
tcpdump file: 201207131400.dump.gz (887.43 MB)