Traffic Trace Info
DumpFile: 201207241400.dump
FileSize: 3539.67MB
Id: 201207241400
StartTime: Tue Jul 24 14:00:00 2012
EndTime: Tue Jul 24 14:15:01 2012
TotalTime: 900.27 seconds
TotalCapSize: -1375.29MB CapLen: 96 bytes
# of packets: 53671076 (28506.41MB)
AvgRate: 265.62Mbps stddev:50.10M
IP flow (unique src/dst pair) Information
# of flows: 11421096 (avg. 4.70 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.4% 1.3% 1.3% 1.2% 0.8% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 8940731
Top 10 bandwidth usage (bytes/total in %):
16.3% 9.4% 5.5% 4.7% 4.6% 3.7% 3.3% 2.7% 2.6% 2.1%
# of IPv6 addresses: 8162
Top 10 bandwidth usage (bytes/total in %):
56.5% 55.0% 7.7% 3.8% 3.4% 2.3% 2.3% 2.2% 1.5% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201207241400.pktlen.png)
detailed numbers
[ 32- 63]: 20068673
[ 64- 127]: 9301224
[ 128- 255]: 1470510
[ 256- 511]: 762076
[ 512- 1023]: 5533343
[ 1024- 2047]: 16535250
Protocol Breakdown
![[protocol breakdown chart]](201207241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 53671076 (100.00%) 29891136453 (100.00%) 556.93
ip 52407784 ( 97.65%) 28538057155 ( 95.47%) 544.54
tcp 25882267 ( 48.22%) 22063602917 ( 73.81%) 852.46
http(s) 12533728 ( 23.35%) 16580913290 ( 55.47%) 1322.90
http(c) 7523584 ( 14.02%) 1472703644 ( 4.93%) 195.74
squid 159769 ( 0.30%) 91054078 ( 0.30%) 569.91
smtp 76521 ( 0.14%) 25332052 ( 0.08%) 331.05
ftp 12097 ( 0.02%) 1459316 ( 0.00%) 120.63
pop3 6592 ( 0.01%) 3922729 ( 0.01%) 595.07
imap 3555 ( 0.01%) 565627 ( 0.00%) 159.11
telnet 14533 ( 0.03%) 1083884 ( 0.00%) 74.58
ssh 48540 ( 0.09%) 40334391 ( 0.13%) 830.95
dns 28618 ( 0.05%) 2248804 ( 0.01%) 78.58
bgp 619 ( 0.00%) 130272 ( 0.00%) 210.46
napster 44 ( 0.00%) 4129 ( 0.00%) 93.84
realaud 34 ( 0.00%) 5633 ( 0.00%) 165.68
rtsp 1905 ( 0.00%) 1190529 ( 0.00%) 624.95
icecast 59038 ( 0.11%) 18063761 ( 0.06%) 305.97
hotline 6 ( 0.00%) 414 ( 0.00%) 69.00
other 5413084 ( 10.09%) 3824590364 ( 12.80%) 706.55
udp 9213793 ( 17.17%) 4784171271 ( 16.01%) 519.24
dns 498140 ( 0.93%) 137588958 ( 0.46%) 276.21
rip 5430426 ( 10.12%) 2671288476 ( 8.94%) 491.91
realaud 48 ( 0.00%) 8071 ( 0.00%) 168.15
halflif 61 ( 0.00%) 9477 ( 0.00%) 155.36
starcra 36 ( 0.00%) 3901 ( 0.00%) 108.36
everque 97 ( 0.00%) 16876 ( 0.00%) 173.98
unreal 37 ( 0.00%) 4081 ( 0.00%) 110.30
quake 32 ( 0.00%) 3132 ( 0.00%) 97.88
cuseeme 9 ( 0.00%) 680 ( 0.00%) 75.56
other 3283420 ( 6.12%) 1975107809 ( 6.61%) 601.54
icmp 15861963 ( 29.55%) 1023193533 ( 3.42%) 64.51
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 62428 ( 0.12%) 32015032 ( 0.11%) 512.83
ip6 1143821 ( 2.13%) 502005728 ( 1.68%) 438.88
pim 82 ( 0.00%) 4920 ( 0.00%) 60.00
other 243245 ( 0.45%) 133044484 ( 0.45%) 546.96
frag 94122 ( 0.18%) 113773211 ( 0.38%) 1208.78
ip6 1263292 ( 2.35%) 1353079298 ( 4.53%) 1071.07
tcp6 1183095 ( 2.20%) 1330446583 ( 4.45%) 1124.55
http(s) 522703 ( 0.97%) 563958178 ( 1.89%) 1078.93
http(c) 130155 ( 0.24%) 13528398 ( 0.05%) 103.94
smtp 92 ( 0.00%) 36734 ( 0.00%) 399.28
ftp 163 ( 0.00%) 17607 ( 0.00%) 108.02
dns 118 ( 0.00%) 42290 ( 0.00%) 358.39
bgp 98 ( 0.00%) 35129 ( 0.00%) 358.46
other 529766 ( 0.99%) 752828247 ( 2.52%) 1421.06
udp6 54167 ( 0.10%) 18069766 ( 0.06%) 333.59
dns 51940 ( 0.10%) 17739582 ( 0.06%) 341.54
realaud 1 ( 0.00%) 92 ( 0.00%) 92.00
other 2226 ( 0.00%) 330092 ( 0.00%) 148.29
icmp6 24776 ( 0.05%) 3448631 ( 0.01%) 139.19
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1139 ( 0.00%) 1098690 ( 0.00%) 964.61
tcpdump file: 201207241400.dump.gz (1150.25 MB)