Traffic Trace Info
DumpFile: 201207141400.dump
FileSize: 2399.29MB
Id: 201207141400
StartTime: Sat Jul 14 14:00:00 2012
EndTime: Sat Jul 14 14:15:00 2012
TotalTime: 900.32 seconds
TotalCapSize: 1894.82MB CapLen: 96 bytes
# of packets: 33060696 (27190.97MB)
AvgRate: 253.37Mbps stddev:60.51M
IP flow (unique src/dst pair) Information
# of flows: 1986240 (avg. 16.64 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 3.1% 1.9% 1.6% 1.2% 1.2% 1.1% 1.1% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 1482489
Top 10 bandwidth usage (bytes/total in %):
27.6% 10.8% 9.6% 5.1% 5.1% 4.5% 4.0% 2.4% 2.2% 2.1%
# of IPv6 addresses: 6909
Top 10 bandwidth usage (bytes/total in %):
69.8% 58.0% 10.1% 3.0% 2.9% 2.3% 2.2% 1.9% 1.5% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201207141400.pktlen.png)
detailed numbers
[ 32- 63]: 5782004
[ 64- 127]: 6832817
[ 128- 255]: 978216
[ 256- 511]: 613463
[ 512- 1023]: 705224
[ 1024- 2047]: 18148972
Protocol Breakdown
![[protocol breakdown chart]](201207141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33060696 (100.00%) 28511801656 (100.00%) 862.41
ip 31561206 ( 95.46%) 26986803524 ( 94.65%) 855.06
tcp 26069844 ( 78.85%) 25115516955 ( 88.09%) 963.39
http(s) 14460465 ( 43.74%) 20065895340 ( 70.38%) 1387.64
http(c) 6118713 ( 18.51%) 702938233 ( 2.47%) 114.88
squid 44758 ( 0.14%) 21296105 ( 0.07%) 475.81
smtp 42761 ( 0.13%) 7889214 ( 0.03%) 184.50
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 57043 ( 0.17%) 5181293 ( 0.02%) 90.83
pop3 2177 ( 0.01%) 1175546 ( 0.00%) 539.98
imap 2535 ( 0.01%) 1069955 ( 0.00%) 422.07
telnet 35171 ( 0.11%) 2598137 ( 0.01%) 73.87
ssh 46991 ( 0.14%) 51393363 ( 0.18%) 1093.69
dns 25032 ( 0.08%) 3527782 ( 0.01%) 140.93
bgp 574 ( 0.00%) 134691 ( 0.00%) 234.65
napster 77 ( 0.00%) 5815 ( 0.00%) 75.52
realaud 47 ( 0.00%) 5078 ( 0.00%) 108.04
icecast 7136 ( 0.02%) 5849136 ( 0.02%) 819.67
hotline 268 ( 0.00%) 17199 ( 0.00%) 64.18
other 5226094 ( 15.81%) 4246539948 ( 14.89%) 812.56
udp 2401961 ( 7.27%) 1075487779 ( 3.77%) 447.75
dns 531325 ( 1.61%) 219960870 ( 0.77%) 413.99
realaud 7 ( 0.00%) 839 ( 0.00%) 119.86
halflif 12 ( 0.00%) 894 ( 0.00%) 74.50
starcra 38 ( 0.00%) 6066 ( 0.00%) 159.63
everque 96 ( 0.00%) 16865 ( 0.00%) 175.68
unreal 29 ( 0.00%) 13235 ( 0.00%) 456.38
quake 21 ( 0.00%) 3075 ( 0.00%) 146.43
cuseeme 6 ( 0.00%) 1948 ( 0.00%) 324.67
other 1870229 ( 5.66%) 855365932 ( 3.00%) 457.36
icmp 1609638 ( 4.87%) 159104384 ( 0.56%) 98.84
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 225 ( 0.00%) 34662 ( 0.00%) 154.05
ip6 1438628 ( 4.35%) 626435497 ( 2.20%) 435.44
pim 79 ( 0.00%) 4740 ( 0.00%) 60.00
other 40646 ( 0.12%) 10200237 ( 0.04%) 250.95
frag 139162 ( 0.42%) 144868618 ( 0.51%) 1041.01
ip6 1499490 ( 4.54%) 1524998132 ( 5.35%) 1017.01
tcp6 1394059 ( 4.22%) 1462839065 ( 5.13%) 1049.34
http(s) 477521 ( 1.44%) 536121934 ( 1.88%) 1122.72
http(c) 175165 ( 0.53%) 15991577 ( 0.06%) 91.29
smtp 94 ( 0.00%) 28621 ( 0.00%) 304.48
ftp 195 ( 0.00%) 20480 ( 0.00%) 105.03
ssh 376 ( 0.00%) 32400 ( 0.00%) 86.17
dns 104 ( 0.00%) 36005 ( 0.00%) 346.20
bgp 93 ( 0.00%) 21906 ( 0.00%) 235.55
napster 6 ( 0.00%) 893 ( 0.00%) 148.83
other 740505 ( 2.24%) 910585249 ( 3.19%) 1229.68
udp6 77789 ( 0.24%) 57656430 ( 0.20%) 741.19
dns 32690 ( 0.10%) 10359811 ( 0.04%) 316.91
halflif 1 ( 0.00%) 116 ( 0.00%) 116.00
quake 2 ( 0.00%) 222 ( 0.00%) 111.00
other 45096 ( 0.14%) 47296281 ( 0.17%) 1048.79
icmp6 26714 ( 0.08%) 3702345 ( 0.01%) 138.59
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 815 ( 0.00%) 784918 ( 0.00%) 963.09
tcpdump file: 201207141400.dump.gz (747.72 MB)