Traffic Trace Info
DumpFile: 201207211400.dump
FileSize: 2813.25MB
Id: 201207211400
StartTime: Sat Jul 21 14:00:00 2012
EndTime: Sat Jul 21 14:15:00 2012
TotalTime: 899.57 seconds
TotalCapSize: -1921.58MB CapLen: 96 bytes
# of packets: 41865661 (24100.54MB)
AvgRate: 224.75Mbps stddev:62.72M
IP flow (unique src/dst pair) Information
# of flows: 11080191 (avg. 3.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 2.0% 1.7% 1.4% 1.3% 1.2% 1.2% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 8763560
Top 10 bandwidth usage (bytes/total in %):
15.9% 12.5% 7.5% 5.1% 3.6% 3.5% 3.1% 2.8% 2.6% 2.4%
# of IPv6 addresses: 6634
Top 10 bandwidth usage (bytes/total in %):
17.9% 8.0% 7.3% 6.2% 5.6% 5.6% 4.2% 3.8% 3.5% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201207211400.pktlen.png)
detailed numbers
[ 32- 63]: 17474453
[ 64- 127]: 6824688
[ 128- 255]: 771306
[ 256- 511]: 552110
[ 512- 1023]: 756305
[ 1024- 2047]: 15486799
Protocol Breakdown
![[protocol breakdown chart]](201207211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41865661 (100.00%) 25271246395 (100.00%) 603.63
ip 41442057 ( 98.99%) 25036945667 ( 99.07%) 604.14
tcp 22085978 ( 52.75%) 21219246108 ( 83.97%) 960.76
http(s) 13831397 ( 33.04%) 19269527985 ( 76.25%) 1393.17
http(c) 5622566 ( 13.43%) 563055964 ( 2.23%) 100.14
squid 58228 ( 0.14%) 22762970 ( 0.09%) 390.93
smtp 37732 ( 0.09%) 7710965 ( 0.03%) 204.36
ftp 62647 ( 0.15%) 5601337 ( 0.02%) 89.41
pop3 5043 ( 0.01%) 2342486 ( 0.01%) 464.50
imap 8602 ( 0.02%) 1460194 ( 0.01%) 169.75
telnet 6641 ( 0.02%) 490495 ( 0.00%) 73.86
ssh 53603 ( 0.13%) 8964001 ( 0.04%) 167.23
dns 1192 ( 0.00%) 217940 ( 0.00%) 182.84
bgp 541 ( 0.00%) 116046 ( 0.00%) 214.50
napster 4 ( 0.00%) 280 ( 0.00%) 70.00
rtsp 8911 ( 0.02%) 11629488 ( 0.05%) 1305.07
icecast 1763 ( 0.00%) 291814 ( 0.00%) 165.52
hotline 13 ( 0.00%) 1236 ( 0.00%) 95.08
other 2387095 ( 5.70%) 1325072907 ( 5.24%) 555.10
udp 2548394 ( 6.09%) 1185742365 ( 4.69%) 465.29
dns 299000 ( 0.71%) 67826050 ( 0.27%) 226.84
realaud 3 ( 0.00%) 304 ( 0.00%) 101.33
halflif 29 ( 0.00%) 3362 ( 0.00%) 115.93
starcra 47 ( 0.00%) 6500 ( 0.00%) 138.30
everque 115 ( 0.00%) 19464 ( 0.00%) 169.25
unreal 38 ( 0.00%) 9189 ( 0.00%) 241.82
quake 98 ( 0.00%) 10416 ( 0.00%) 106.29
cuseeme 1 ( 0.00%) 93 ( 0.00%) 93.00
other 2248717 ( 5.37%) 1117775262 ( 4.42%) 497.07
icmp 15245097 ( 36.41%) 1167308764 ( 4.62%) 76.57
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 823 ( 0.00%) 256138 ( 0.00%) 311.22
ip6 1521369 ( 3.63%) 1451116891 ( 5.74%) 953.82
pim 82 ( 0.00%) 4920 ( 0.00%) 60.00
other 40129 ( 0.10%) 13251211 ( 0.05%) 330.22
frag 80402 ( 0.19%) 103818643 ( 0.41%) 1291.24
ip6 423604 ( 1.01%) 234300728 ( 0.93%) 553.11
tcp6 340924 ( 0.81%) 216365363 ( 0.86%) 634.64
http(s) 179710 ( 0.43%) 192061793 ( 0.76%) 1068.73
http(c) 82188 ( 0.20%) 8003697 ( 0.03%) 97.38
smtp 99 ( 0.00%) 59758 ( 0.00%) 603.62
ftp 250 ( 0.00%) 24689 ( 0.00%) 98.76
dns 74 ( 0.00%) 30468 ( 0.00%) 411.73
bgp 102 ( 0.00%) 30944 ( 0.00%) 303.37
other 78501 ( 0.19%) 16154014 ( 0.06%) 205.78
udp6 63133 ( 0.15%) 14258461 ( 0.06%) 225.85
dns 32035 ( 0.08%) 11360963 ( 0.04%) 354.64
realaud 1 ( 0.00%) 110 ( 0.00%) 110.00
quake 1 ( 0.00%) 105 ( 0.00%) 105.00
other 31096 ( 0.07%) 2897283 ( 0.01%) 93.17
icmp6 18445 ( 0.04%) 2724852 ( 0.01%) 147.73
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 987 ( 0.00%) 936424 ( 0.00%) 948.76
tcpdump file: 201207211400.dump.gz (917.84 MB)