Traffic Trace Info
DumpFile: 201207201400.dump
FileSize: 3343.26MB
Id: 201207201400
StartTime: Fri Jul 20 14:00:01 2012
EndTime: Fri Jul 20 14:15:00 2012
TotalTime: 899.66 seconds
TotalCapSize: -1511.09MB CapLen: 96 bytes
# of packets: 49698138 (29629.70MB)
AvgRate: 276.30Mbps stddev:57.89M
IP flow (unique src/dst pair) Information
# of flows: 11596231 (avg. 4.29 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 2.1% 2.0% 1.7% 1.6% 1.0% 1.0% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 8982662
Top 10 bandwidth usage (bytes/total in %):
19.0% 8.0% 5.2% 3.3% 2.9% 2.9% 2.5% 2.4% 2.3% 2.3%
# of IPv6 addresses: 8376
Top 10 bandwidth usage (bytes/total in %):
11.9% 11.9% 8.5% 8.4% 8.4% 7.2% 6.2% 4.7% 3.5% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201207201400.pktlen.png)
detailed numbers
[ 32- 63]: 18726531
[ 64- 127]: 8866774
[ 128- 255]: 1243409
[ 256- 511]: 896065
[ 512- 1023]: 825951
[ 1024- 2047]: 19139408
Protocol Breakdown
![[protocol breakdown chart]](201207201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 49698138 (100.00%) 31068996479 (100.00%) 625.15
ip 48659648 ( 97.91%) 30233575948 ( 97.31%) 621.33
tcp 27312471 ( 54.96%) 25906550975 ( 83.38%) 948.52
http(s) 16022698 ( 32.24%) 21849679804 ( 70.33%) 1363.67
http(c) 6611918 ( 13.30%) 1046622579 ( 3.37%) 158.29
squid 111572 ( 0.22%) 61063183 ( 0.20%) 547.30
smtp 61110 ( 0.12%) 26488742 ( 0.09%) 433.46
nntp 1 ( 0.00%) 152 ( 0.00%) 152.00
ftp 70628 ( 0.14%) 6219115 ( 0.02%) 88.05
pop3 4278 ( 0.01%) 1392513 ( 0.00%) 325.51
imap 5104 ( 0.01%) 1335899 ( 0.00%) 261.74
telnet 6127 ( 0.01%) 460485 ( 0.00%) 75.16
ssh 672227 ( 1.35%) 91818625 ( 0.30%) 136.59
dns 3639 ( 0.01%) 2065320 ( 0.01%) 567.55
bgp 532 ( 0.00%) 114092 ( 0.00%) 214.46
napster 38 ( 0.00%) 4669 ( 0.00%) 122.87
realaud 34 ( 0.00%) 4408 ( 0.00%) 129.65
rtsp 2446 ( 0.00%) 152115 ( 0.00%) 62.19
icecast 10310 ( 0.02%) 2699836 ( 0.01%) 261.87
hotline 7 ( 0.00%) 488 ( 0.00%) 69.71
other 3729800 ( 7.50%) 2816428830 ( 9.07%) 755.12
udp 5012603 ( 10.09%) 2583465790 ( 8.32%) 515.39
dns 607574 ( 1.22%) 212837941 ( 0.69%) 350.31
realaud 9 ( 0.00%) 1402 ( 0.00%) 155.78
halflif 1344 ( 0.00%) 289235 ( 0.00%) 215.20
starcra 146 ( 0.00%) 25243 ( 0.00%) 172.90
everque 177 ( 0.00%) 29475 ( 0.00%) 166.53
unreal 72 ( 0.00%) 14123 ( 0.00%) 196.15
quake 64 ( 0.00%) 9445 ( 0.00%) 147.58
cuseeme 10 ( 0.00%) 690 ( 0.00%) 69.00
other 4395468 ( 8.84%) 2369515856 ( 7.63%) 539.08
icmp 15098389 ( 30.38%) 979028505 ( 3.15%) 64.84
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 15056 ( 0.03%) 4012274 ( 0.01%) 266.49
ip6 1177620 ( 2.37%) 748761882 ( 2.41%) 635.83
pim 82 ( 0.00%) 4920 ( 0.00%) 60.00
other 43242 ( 0.09%) 11732332 ( 0.04%) 271.32
frag 124197 ( 0.25%) 127104643 ( 0.41%) 1023.41
ip6 1038490 ( 2.09%) 835420531 ( 2.69%) 804.46
tcp6 933746 ( 1.88%) 793818773 ( 2.56%) 850.14
http(s) 558823 ( 1.12%) 599159774 ( 1.93%) 1072.18
http(c) 166838 ( 0.34%) 16586079 ( 0.05%) 99.41
smtp 352 ( 0.00%) 101392 ( 0.00%) 288.05
ftp 243 ( 0.00%) 25260 ( 0.00%) 103.95
dns 116 ( 0.00%) 36428 ( 0.00%) 314.03
bgp 99 ( 0.00%) 22526 ( 0.00%) 227.54
other 207275 ( 0.42%) 177887314 ( 0.57%) 858.22
udp6 81939 ( 0.16%) 37288367 ( 0.12%) 455.07
dns 66706 ( 0.13%) 25084892 ( 0.08%) 376.05
other 15233 ( 0.03%) 12203475 ( 0.04%) 801.12
icmp6 21462 ( 0.04%) 3129223 ( 0.01%) 145.80
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1228 ( 0.00%) 1168540 ( 0.00%) 951.58
tcpdump file: 201207201400.dump.gz (1131.09 MB)