Traffic Trace Info
DumpFile: 201207171400.dump
FileSize: 2390.74MB
Id: 201207171400
StartTime: Tue Jul 17 14:00:01 2012
EndTime: Tue Jul 17 14:15:00 2012
TotalTime: 899.27 seconds
TotalCapSize: 1885.43MB CapLen: 96 bytes
# of packets: 33115265 (24305.47MB)
AvgRate: 226.75Mbps stddev:38.66M
IP flow (unique src/dst pair) Information
# of flows: 1839393 (avg. 18.00 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 2.3% 2.2% 2.0% 1.9% 1.8% 1.4% 1.3% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 1419422
Top 10 bandwidth usage (bytes/total in %):
13.4% 12.6% 8.2% 7.5% 3.6% 3.6% 3.4% 3.2% 2.5% 2.4%
# of IPv6 addresses: 7812
Top 10 bandwidth usage (bytes/total in %):
12.0% 7.3% 7.3% 5.4% 5.3% 5.3% 5.3% 4.5% 3.4% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201207171400.pktlen.png)
detailed numbers
[ 32- 63]: 5696591
[ 64- 127]: 8582101
[ 128- 255]: 1162192
[ 256- 511]: 875967
[ 512- 1023]: 789906
[ 1024- 2047]: 16008508
Protocol Breakdown
![[protocol breakdown chart]](201207171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33115265 (100.00%) 25486128100 (100.00%) 769.62
ip 31851655 ( 96.18%) 24354287102 ( 95.56%) 764.62
tcp 24696171 ( 74.58%) 21184259929 ( 83.12%) 857.80
http(s) 13118014 ( 39.61%) 17729603034 ( 69.57%) 1351.55
http(c) 8129511 ( 24.55%) 1219559263 ( 4.79%) 150.02
squid 94462 ( 0.29%) 58667914 ( 0.23%) 621.07
smtp 64582 ( 0.20%) 26974017 ( 0.11%) 417.67
nntp 48 ( 0.00%) 6943 ( 0.00%) 144.65
ftp 80067 ( 0.24%) 14473788 ( 0.06%) 180.77
pop3 12468 ( 0.04%) 9768831 ( 0.04%) 783.51
imap 3619 ( 0.01%) 758178 ( 0.00%) 209.50
telnet 67605 ( 0.20%) 5009043 ( 0.02%) 74.09
ssh 659154 ( 1.99%) 490095872 ( 1.92%) 743.52
dns 1769 ( 0.01%) 273342 ( 0.00%) 154.52
bgp 577 ( 0.00%) 136751 ( 0.00%) 237.00
napster 59 ( 0.00%) 8543 ( 0.00%) 144.80
realaud 17 ( 0.00%) 1911 ( 0.00%) 112.41
icecast 8038 ( 0.02%) 4096265 ( 0.02%) 509.61
hotline 17 ( 0.00%) 1543 ( 0.00%) 90.76
other 2456118 ( 7.42%) 1624821931 ( 6.38%) 661.54
udp 4123406 ( 12.45%) 2020296530 ( 7.93%) 489.96
dns 720349 ( 2.18%) 208641512 ( 0.82%) 289.64
rip 4 ( 0.00%) 274 ( 0.00%) 68.50
realaud 14 ( 0.00%) 1211 ( 0.00%) 86.50
halflif 680 ( 0.00%) 58287 ( 0.00%) 85.72
starcra 32 ( 0.00%) 4627 ( 0.00%) 144.59
everque 151 ( 0.00%) 31401 ( 0.00%) 207.95
unreal 51 ( 0.00%) 26261 ( 0.00%) 514.92
quake 40 ( 0.00%) 5199 ( 0.00%) 129.97
cuseeme 5 ( 0.00%) 713 ( 0.00%) 142.60
other 3401549 ( 10.27%) 1811434867 ( 7.11%) 532.53
icmp 1512980 ( 4.57%) 164681776 ( 0.65%) 108.85
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 4554 ( 0.01%) 2472664 ( 0.01%) 542.97
ip6 1402465 ( 4.24%) 927099724 ( 3.64%) 661.05
pim 26 ( 0.00%) 1560 ( 0.00%) 60.00
other 111869 ( 0.34%) 55455759 ( 0.22%) 495.72
frag 72397 ( 0.22%) 75754460 ( 0.30%) 1046.38
ip6 1263610 ( 3.82%) 1131840998 ( 4.44%) 895.72
tcp6 1180973 ( 3.57%) 1108731616 ( 4.35%) 938.83
http(s) 915940 ( 2.77%) 946394601 ( 3.71%) 1033.25
http(c) 122687 ( 0.37%) 12080430 ( 0.05%) 98.47
squid 6 ( 0.00%) 476 ( 0.00%) 79.33
smtp 384 ( 0.00%) 136117 ( 0.00%) 354.47
ftp 189 ( 0.00%) 19793 ( 0.00%) 104.72
dns 80 ( 0.00%) 31332 ( 0.00%) 391.65
bgp 92 ( 0.00%) 26344 ( 0.00%) 286.35
other 141595 ( 0.43%) 150042523 ( 0.59%) 1059.66
udp6 63736 ( 0.19%) 18988814 ( 0.07%) 297.93
dns 59452 ( 0.18%) 18273167 ( 0.07%) 307.36
other 4284 ( 0.01%) 715647 ( 0.00%) 167.05
icmp6 17211 ( 0.05%) 2722590 ( 0.01%) 158.19
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1575 ( 0.00%) 1382350 ( 0.01%) 877.68
tcpdump file: 201207171400.dump.gz (786.90 MB)