Traffic Trace Info
DumpFile: 201207221400.dump
FileSize: 3574.83MB
Id: 201207221400
StartTime: Sun Jul 22 14:00:01 2012
EndTime: Sun Jul 22 14:15:00 2012
TotalTime: 899.48 seconds
TotalCapSize: -1329.57MB CapLen: 96 bytes
# of packets: 52978299 (31000.92MB)
AvgRate: 289.10Mbps stddev:51.41M
IP flow (unique src/dst pair) Information
# of flows: 10974824 (avg. 4.83 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.3% 8.2% 5.5% 2.7% 2.5% 2.0% 2.0% 1.7% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 8674223
Top 10 bandwidth usage (bytes/total in %):
21.4% 12.7% 9.7% 9.6% 8.7% 8.7% 6.7% 6.4% 5.7% 2.9%
# of IPv6 addresses: 6691
Top 10 bandwidth usage (bytes/total in %):
13.2% 9.9% 7.8% 7.6% 5.0% 4.9% 3.9% 3.8% 3.6% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201207221400.pktlen.png)
detailed numbers
[ 32- 63]: 20945209
[ 64- 127]: 8973306
[ 128- 255]: 916693
[ 256- 511]: 480816
[ 512- 1023]: 1623139
[ 1024- 2047]: 20039136
Protocol Breakdown
![[protocol breakdown chart]](201207221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 52978299 (100.00%) 32506823253 (100.00%) 613.59
ip 52501603 ( 99.10%) 32254293975 ( 99.22%) 614.35
tcp 32276389 ( 60.92%) 28780689797 ( 88.54%) 891.69
http(s) 16009130 ( 30.22%) 19166550686 ( 58.96%) 1197.23
http(c) 9810955 ( 18.52%) 4066711761 ( 12.51%) 414.51
squid 359453 ( 0.68%) 368916451 ( 1.13%) 1026.33
smtp 32885 ( 0.06%) 6254968 ( 0.02%) 190.21
nntp 3 ( 0.00%) 194 ( 0.00%) 64.67
ftp 64453 ( 0.12%) 5705988 ( 0.02%) 88.53
pop3 2599 ( 0.00%) 376978 ( 0.00%) 145.05
imap 4269 ( 0.01%) 2188046 ( 0.01%) 512.54
telnet 2102 ( 0.00%) 158960 ( 0.00%) 75.62
ssh 41173 ( 0.08%) 8382354 ( 0.03%) 203.59
dns 1201 ( 0.00%) 229659 ( 0.00%) 191.22
bgp 521 ( 0.00%) 102897 ( 0.00%) 197.50
napster 8 ( 0.00%) 923 ( 0.00%) 115.38
realaud 44 ( 0.00%) 3985 ( 0.00%) 90.57
rtsp 8872 ( 0.02%) 11579960 ( 0.04%) 1305.23
icecast 583 ( 0.00%) 83048 ( 0.00%) 142.45
hotline 7 ( 0.00%) 428 ( 0.00%) 61.14
other 5938131 ( 11.21%) 5143442511 ( 15.82%) 866.17
udp 3337868 ( 6.30%) 1662208097 ( 5.11%) 497.98
dns 308635 ( 0.58%) 79060570 ( 0.24%) 256.16
realaud 5 ( 0.00%) 704 ( 0.00%) 140.80
halflif 45 ( 0.00%) 6867 ( 0.00%) 152.60
starcra 19 ( 0.00%) 2105 ( 0.00%) 110.79
everque 97 ( 0.00%) 20336 ( 0.00%) 209.65
unreal 17 ( 0.00%) 3038 ( 0.00%) 178.71
quake 12 ( 0.00%) 1191 ( 0.00%) 99.25
other 3028944 ( 5.72%) 1583045553 ( 4.87%) 522.64
icmp 15872262 ( 29.96%) 1029379431 ( 3.17%) 64.85
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1015 ( 0.00%) 344906 ( 0.00%) 339.81
ip6 958419 ( 1.81%) 767484647 ( 2.36%) 800.78
pim 92 ( 0.00%) 5520 ( 0.00%) 60.00
other 55373 ( 0.10%) 14162307 ( 0.04%) 255.76
frag 19639 ( 0.04%) 24313888 ( 0.07%) 1238.04
ip6 476696 ( 0.90%) 252529278 ( 0.78%) 529.75
tcp6 421431 ( 0.80%) 238422782 ( 0.73%) 565.75
http(s) 181410 ( 0.34%) 182433738 ( 0.56%) 1005.64
http(c) 58263 ( 0.11%) 5281856 ( 0.02%) 90.66
smtp 110 ( 0.00%) 46607 ( 0.00%) 423.70
ftp 192 ( 0.00%) 20190 ( 0.00%) 105.16
ssh 397 ( 0.00%) 66931 ( 0.00%) 168.59
dns 31 ( 0.00%) 10569 ( 0.00%) 340.94
bgp 104 ( 0.00%) 28903 ( 0.00%) 277.91
other 180924 ( 0.34%) 50533988 ( 0.16%) 279.31
udp6 31125 ( 0.06%) 10334832 ( 0.03%) 332.04
dns 27935 ( 0.05%) 9781491 ( 0.03%) 350.15
halflif 1 ( 0.00%) 99 ( 0.00%) 99.00
unreal 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 1 ( 0.00%) 97 ( 0.00%) 97.00
other 3187 ( 0.01%) 553037 ( 0.00%) 173.53
icmp6 23540 ( 0.04%) 3279681 ( 0.01%) 139.32
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 486 ( 0.00%) 476473 ( 0.00%) 980.40
tcpdump file: 201207221400.dump.gz (1127.69 MB)