Traffic Trace Info
DumpFile: 201207181400.dump
FileSize: 3638.36MB
Id: 201207181400
StartTime: Wed Jul 18 14:00:01 2012
EndTime: Wed Jul 18 14:15:00 2012
TotalTime: 899.23 seconds
TotalCapSize: -1275.02MB CapLen: 96 bytes
# of packets: 53567843 (30156.33MB)
AvgRate: 281.25Mbps stddev:40.00M
IP flow (unique src/dst pair) Information
# of flows: 12248341 (avg. 4.37 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 3.0% 2.1% 1.7% 1.5% 1.4% 1.3% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 9750600
Top 10 bandwidth usage (bytes/total in %):
9.7% 8.3% 7.3% 4.0% 4.0% 3.9% 3.3% 3.3% 3.3% 3.0%
# of IPv6 addresses: 8494
Top 10 bandwidth usage (bytes/total in %):
42.4% 25.0% 17.6% 7.6% 4.5% 4.0% 2.2% 2.2% 2.2% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201207181400.pktlen.png)
detailed numbers
[ 32- 63]: 20685413
[ 64- 127]: 10286696
[ 128- 255]: 1195244
[ 256- 511]: 1242051
[ 512- 1023]: 847982
[ 1024- 2047]: 19310457
Protocol Breakdown
![[protocol breakdown chart]](201207181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 53567843 (100.00%) 31621201563 (100.00%) 590.30
ip 51861723 ( 96.82%) 29876574470 ( 94.48%) 576.08
tcp 28834398 ( 53.83%) 25863213180 ( 81.79%) 896.96
http(s) 15291875 ( 28.55%) 20446945498 ( 64.66%) 1337.11
http(c) 9919318 ( 18.52%) 3008790634 ( 9.52%) 303.33
squid 63069 ( 0.12%) 17502393 ( 0.06%) 277.51
smtp 46335 ( 0.09%) 14621415 ( 0.05%) 315.56
nntp 1844 ( 0.00%) 135926 ( 0.00%) 73.71
ftp 62617 ( 0.12%) 5103300 ( 0.02%) 81.50
pop3 16589 ( 0.03%) 11023085 ( 0.03%) 664.48
imap 3337 ( 0.01%) 856895 ( 0.00%) 256.79
telnet 8393 ( 0.02%) 628698 ( 0.00%) 74.91
ssh 48129 ( 0.09%) 7995398 ( 0.03%) 166.12
dns 2634 ( 0.00%) 307433 ( 0.00%) 116.72
bgp 647 ( 0.00%) 146742 ( 0.00%) 226.80
napster 19 ( 0.00%) 5754 ( 0.00%) 302.84
realaud 63 ( 0.00%) 6093 ( 0.00%) 96.71
rtsp 1539 ( 0.00%) 927012 ( 0.00%) 602.35
icecast 56647 ( 0.11%) 53083590 ( 0.17%) 937.09
hotline 3 ( 0.00%) 194 ( 0.00%) 64.67
other 3311330 ( 6.18%) 2295132520 ( 7.26%) 693.12
udp 5341095 ( 9.97%) 2215885451 ( 7.01%) 414.87
dns 571552 ( 1.07%) 204325302 ( 0.65%) 357.49
realaud 11 ( 0.00%) 2511 ( 0.00%) 228.27
halflif 11 ( 0.00%) 1875 ( 0.00%) 170.45
starcra 77 ( 0.00%) 10487 ( 0.00%) 136.19
everque 630 ( 0.00%) 62180 ( 0.00%) 98.70
unreal 34 ( 0.00%) 7478 ( 0.00%) 219.94
quake 7 ( 0.00%) 772 ( 0.00%) 110.29
cuseeme 2 ( 0.00%) 169 ( 0.00%) 84.50
other 4768522 ( 8.90%) 2011368491 ( 6.36%) 421.80
icmp 16178027 ( 30.20%) 1041549817 ( 3.29%) 64.38
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 30302 ( 0.06%) 4210116 ( 0.01%) 138.94
ip6 1409381 ( 2.63%) 723690388 ( 2.29%) 513.48
pim 79 ( 0.00%) 4740 ( 0.00%) 60.00
other 68256 ( 0.13%) 28001508 ( 0.09%) 410.24
frag 79692 ( 0.15%) 95355356 ( 0.30%) 1196.55
ip6 1706120 ( 3.18%) 1744627093 ( 5.52%) 1022.57
tcp6 1628826 ( 3.04%) 1723979906 ( 5.45%) 1058.42
http(s) 863153 ( 1.61%) 941634887 ( 2.98%) 1090.92
http(c) 132337 ( 0.25%) 13171564 ( 0.04%) 99.53
smtp 169 ( 0.00%) 47428 ( 0.00%) 280.64
ftp 990 ( 0.00%) 115211 ( 0.00%) 116.37
pop3 6 ( 0.00%) 444 ( 0.00%) 74.00
dns 119 ( 0.00%) 50275 ( 0.00%) 422.48
bgp 93 ( 0.00%) 27952 ( 0.00%) 300.56
other 631959 ( 1.18%) 768932145 ( 2.43%) 1216.74
udp6 57327 ( 0.11%) 16844746 ( 0.05%) 293.84
dns 51369 ( 0.10%) 16170160 ( 0.05%) 314.78
everque 2 ( 0.00%) 189 ( 0.00%) 94.50
other 5956 ( 0.01%) 674397 ( 0.00%) 113.23
icmp6 18772 ( 0.04%) 2763588 ( 0.01%) 147.22
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1080 ( 0.00%) 1023193 ( 0.00%) 947.40
tcpdump file: 201207181400.dump.gz (1213.46 MB)