Traffic Trace Info
DumpFile: 201207191400.dump
FileSize: 3658.00MB
Id: 201207191400
StartTime: Thu Jul 19 14:00:00 2012
EndTime: Thu Jul 19 14:15:00 2012
TotalTime: 900.13 seconds
TotalCapSize: -1256.86MB CapLen: 96 bytes
# of packets: 53664130 (28292.72MB)
AvgRate: 263.65Mbps stddev:50.96M
IP flow (unique src/dst pair) Information
# of flows: 11508023 (avg. 4.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.2% 2.1% 1.9% 1.7% 1.3% 1.3% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 8935573
Top 10 bandwidth usage (bytes/total in %):
13.2% 11.7% 7.6% 6.1% 3.4% 3.4% 3.2% 2.8% 2.7% 2.5%
# of IPv6 addresses: 9116
Top 10 bandwidth usage (bytes/total in %):
60.7% 29.1% 14.4% 8.3% 6.6% 3.9% 2.0% 1.6% 1.5% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201207191400.pktlen.png)
detailed numbers
[ 32- 63]: 20658426
[ 64- 127]: 12304118
[ 128- 255]: 939676
[ 256- 511]: 1123475
[ 512- 1023]: 720439
[ 1024- 2047]: 17917996
Protocol Breakdown
![[protocol breakdown chart]](201207191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 53664130 (100.00%) 29667067315 (100.00%) 552.83
ip 51574874 ( 96.11%) 27393557498 ( 92.34%) 531.14
tcp 29436844 ( 54.85%) 24088284364 ( 81.20%) 818.30
http(s) 14933043 ( 27.83%) 20057644352 ( 67.61%) 1343.17
http(c) 10923396 ( 20.36%) 1870614831 ( 6.31%) 171.25
squid 108028 ( 0.20%) 78290305 ( 0.26%) 724.72
smtp 62993 ( 0.12%) 24052482 ( 0.08%) 381.83
ftp 74591 ( 0.14%) 6539907 ( 0.02%) 87.68
pop3 6795 ( 0.01%) 4080905 ( 0.01%) 600.57
imap 4749 ( 0.01%) 1260235 ( 0.00%) 265.37
telnet 16280 ( 0.03%) 1210628 ( 0.00%) 74.36
ssh 30259 ( 0.06%) 5600496 ( 0.02%) 185.09
dns 4686 ( 0.01%) 2118109 ( 0.01%) 452.01
bgp 601 ( 0.00%) 169847 ( 0.00%) 282.61
napster 77 ( 0.00%) 7928 ( 0.00%) 102.96
rtsp 19335 ( 0.04%) 24247409 ( 0.08%) 1254.07
icecast 37683 ( 0.07%) 31023300 ( 0.10%) 823.27
hotline 11 ( 0.00%) 1140 ( 0.00%) 103.64
other 3214317 ( 5.99%) 1981422490 ( 6.68%) 616.44
udp 5879750 ( 10.96%) 1732297490 ( 5.84%) 294.62
dns 691789 ( 1.29%) 224737296 ( 0.76%) 324.86
rip 5 ( 0.00%) 351 ( 0.00%) 70.20
realaud 21 ( 0.00%) 2644 ( 0.00%) 125.90
halflif 27 ( 0.00%) 3635 ( 0.00%) 134.63
starcra 29 ( 0.00%) 4871 ( 0.00%) 167.97
everque 103 ( 0.00%) 18018 ( 0.00%) 174.93
unreal 9112 ( 0.02%) 7544053 ( 0.03%) 827.93
quake 40 ( 0.00%) 10426 ( 0.00%) 260.65
cuseeme 5 ( 0.00%) 563 ( 0.00%) 112.60
other 5177989 ( 9.65%) 1499837925 ( 5.06%) 289.66
icmp 15209623 ( 28.34%) 982668952 ( 3.31%) 64.61
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1331 ( 0.00%) 448834 ( 0.00%) 337.22
ip6 1006180 ( 1.87%) 578522653 ( 1.95%) 574.97
pim 87 ( 0.00%) 5220 ( 0.00%) 60.00
other 40874 ( 0.08%) 11310715 ( 0.04%) 276.72
frag 107989 ( 0.20%) 116324448 ( 0.39%) 1077.19
ip6 2089256 ( 3.89%) 2273509817 ( 7.66%) 1088.19
tcp6 2005656 ( 3.74%) 2249910245 ( 7.58%) 1121.78
http(s) 1655838 ( 3.09%) 2176348948 ( 7.34%) 1314.35
http(c) 189698 ( 0.35%) 17426466 ( 0.06%) 91.86
smtp 229 ( 0.00%) 104808 ( 0.00%) 457.68
ftp 235 ( 0.00%) 24201 ( 0.00%) 102.98
pop3 11 ( 0.00%) 981 ( 0.00%) 89.18
dns 127 ( 0.00%) 44271 ( 0.00%) 348.59
bgp 104 ( 0.00%) 30790 ( 0.00%) 296.06
other 159414 ( 0.30%) 55929780 ( 0.19%) 350.85
udp6 61421 ( 0.11%) 19604549 ( 0.07%) 319.18
dns 53723 ( 0.10%) 17930611 ( 0.06%) 333.76
realaud 1 ( 0.00%) 111 ( 0.00%) 111.00
other 7697 ( 0.01%) 1673827 ( 0.01%) 217.46
icmp6 21032 ( 0.04%) 3004363 ( 0.01%) 142.85
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1033 ( 0.00%) 975168 ( 0.00%) 944.02
tcpdump file: 201207191400.dump.gz (1202.31 MB)