Traffic Trace Info
DumpFile: 201207151400.dump
FileSize: 2923.95MB
Id: 201207151400
StartTime: Sun Jul 15 14:00:00 2012
EndTime: Sun Jul 15 14:15:00 2012
TotalTime: 900.30 seconds
TotalCapSize: -1794.99MB CapLen: 96 bytes
# of packets: 40824721 (29470.50MB)
AvgRate: 274.56Mbps stddev:73.72M
IP flow (unique src/dst pair) Information
# of flows: 1947521 (avg. 20.96 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 2.6% 2.2% 1.9% 1.9% 1.6% 1.5% 1.4% 1.4% 1.0%
IP address Information
# of IPv4 addresses: 1504551
Top 10 bandwidth usage (bytes/total in %):
32.8% 11.3% 8.6% 6.3% 4.8% 4.5% 3.3% 2.5% 2.4% 2.1%
# of IPv6 addresses: 6634
Top 10 bandwidth usage (bytes/total in %):
60.7% 58.8% 6.3% 4.4% 3.9% 3.7% 2.8% 1.9% 1.9% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201207151400.pktlen.png)
detailed numbers
[ 32- 63]: 9692434
[ 64- 127]: 8932256
[ 128- 255]: 1118247
[ 256- 511]: 590746
[ 512- 1023]: 1223591
[ 1024- 2047]: 19267447
Protocol Breakdown
![[protocol breakdown chart]](201207151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40824721 (100.00%) 30902055035 (100.00%) 756.94
ip 39451290 ( 96.64%) 29533771687 ( 95.57%) 748.61
tcp 31724074 ( 77.71%) 27125553985 ( 87.78%) 855.05
http(s) 14438639 ( 35.37%) 19869185853 ( 64.30%) 1376.11
http(c) 8286320 ( 20.30%) 1280735425 ( 4.14%) 154.56
squid 48503 ( 0.12%) 29319181 ( 0.09%) 604.48
smtp 30664 ( 0.08%) 6891006 ( 0.02%) 224.73
nntp 13 ( 0.00%) 884 ( 0.00%) 68.00
ftp 60871 ( 0.15%) 5435798 ( 0.02%) 89.30
pop3 4377 ( 0.01%) 1635447 ( 0.01%) 373.65
imap 2751 ( 0.01%) 239915 ( 0.00%) 87.21
telnet 35600 ( 0.09%) 2423390 ( 0.01%) 68.07
ssh 1828215 ( 4.48%) 284244816 ( 0.92%) 155.48
dns 2383 ( 0.01%) 281290 ( 0.00%) 118.04
bgp 540 ( 0.00%) 98161 ( 0.00%) 181.78
napster 148 ( 0.00%) 9984 ( 0.00%) 67.46
realaud 10 ( 0.00%) 994 ( 0.00%) 99.40
rtsp 84903 ( 0.21%) 5100341 ( 0.02%) 60.07
icecast 610 ( 0.00%) 109567 ( 0.00%) 179.62
hotline 88 ( 0.00%) 6230 ( 0.00%) 70.80
other 6899439 ( 16.90%) 5639835703 ( 18.25%) 817.43
udp 4067945 ( 9.96%) 1338012358 ( 4.33%) 328.92
dns 462683 ( 1.13%) 210190160 ( 0.68%) 454.29
rip 3 ( 0.00%) 271 ( 0.00%) 90.33
realaud 7 ( 0.00%) 943 ( 0.00%) 134.71
halflif 12 ( 0.00%) 1788 ( 0.00%) 149.00
starcra 8 ( 0.00%) 997 ( 0.00%) 124.62
everque 17080 ( 0.04%) 1603695 ( 0.01%) 93.89
unreal 35 ( 0.00%) 10647 ( 0.00%) 304.20
quake 111 ( 0.00%) 8422 ( 0.00%) 75.87
cuseeme 5 ( 0.00%) 677 ( 0.00%) 135.40
other 3587854 ( 8.79%) 1126136318 ( 3.64%) 313.87
icmp 1474660 ( 3.61%) 136735221 ( 0.44%) 92.72
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 327 ( 0.00%) 92970 ( 0.00%) 284.31
ip6 2142139 ( 5.25%) 922725720 ( 2.99%) 430.75
pim 85 ( 0.00%) 5100 ( 0.00%) 60.00
other 41875 ( 0.10%) 10627063 ( 0.03%) 253.78
frag 123617 ( 0.30%) 143817248 ( 0.47%) 1163.41
ip6 1373431 ( 3.36%) 1368283348 ( 4.43%) 996.25
tcp6 1238816 ( 3.03%) 1293257146 ( 4.19%) 1043.95
http(s) 400831 ( 0.98%) 441183035 ( 1.43%) 1100.67
http(c) 69500 ( 0.17%) 6594878 ( 0.02%) 94.89
smtp 2 ( 0.00%) 164 ( 0.00%) 82.00
ftp 149 ( 0.00%) 16242 ( 0.00%) 109.01
dns 48 ( 0.00%) 13625 ( 0.00%) 283.85
bgp 108 ( 0.00%) 28227 ( 0.00%) 261.36
other 768178 ( 1.88%) 845420975 ( 2.74%) 1100.55
udp6 88366 ( 0.22%) 57844645 ( 0.19%) 654.60
dns 38637 ( 0.09%) 9484596 ( 0.03%) 245.48
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 1 ( 0.00%) 118 ( 0.00%) 118.00
other 49727 ( 0.12%) 48359824 ( 0.16%) 972.51
icmp6 27798 ( 0.07%) 4136390 ( 0.01%) 148.80
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 18339 ( 0.04%) 13029911 ( 0.04%) 710.50
tcpdump file: 201207151400.dump.gz (923.25 MB)