Traffic Trace Info
DumpFile: 201207251400.dump
FileSize: 3935.34MB
Id: 201207251400
StartTime: Wed Jul 25 14:00:00 2012
EndTime: Wed Jul 25 14:15:00 2012
TotalTime: 899.53 seconds
TotalCapSize: -1064.80MB CapLen: 96 bytes
# of packets: 59253373 (35832.25MB)
AvgRate: 334.19Mbps stddev:49.84M
IP flow (unique src/dst pair) Information
# of flows: 11093480 (avg. 5.34 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 2.7% 2.3% 2.1% 1.5% 1.5% 1.5% 1.5% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 8740445
Top 10 bandwidth usage (bytes/total in %):
13.7% 10.7% 9.7% 4.9% 4.9% 3.6% 3.5% 3.5% 3.2% 3.0%
# of IPv6 addresses: 6970
Top 10 bandwidth usage (bytes/total in %):
11.7% 8.2% 7.7% 5.5% 4.3% 4.1% 4.1% 4.0% 3.7% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201207251400.pktlen.png)
detailed numbers
[ 32- 63]: 20288142
[ 64- 127]: 10329233
[ 128- 255]: 1315903
[ 256- 511]: 1361017
[ 512- 1023]: 3930847
[ 1024- 2047]: 22028231
Protocol Breakdown
![[protocol breakdown chart]](201207251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 59253373 (100.00%) 37572840187 (100.00%) 634.10
ip 58562627 ( 98.83%) 37010528454 ( 98.50%) 631.98
tcp 34257879 ( 57.82%) 31402448461 ( 83.58%) 916.65
http(s) 17717767 ( 29.90%) 24576317960 ( 65.41%) 1387.10
http(c) 11111164 ( 18.75%) 2316059600 ( 6.16%) 208.44
squid 239166 ( 0.40%) 195312287 ( 0.52%) 816.64
smtp 106693 ( 0.18%) 40358809 ( 0.11%) 378.27
nntp 4 ( 0.00%) 240 ( 0.00%) 60.00
ftp 13706 ( 0.02%) 1517051 ( 0.00%) 110.69
pop3 6740 ( 0.01%) 2957415 ( 0.01%) 438.79
imap 4444 ( 0.01%) 1905555 ( 0.01%) 428.79
telnet 6826 ( 0.01%) 510550 ( 0.00%) 74.79
ssh 34944 ( 0.06%) 16670890 ( 0.04%) 477.07
dns 2166 ( 0.00%) 313828 ( 0.00%) 144.89
bgp 521 ( 0.00%) 104417 ( 0.00%) 200.42
napster 80 ( 0.00%) 10608 ( 0.00%) 132.60
realaud 337 ( 0.00%) 20826 ( 0.00%) 61.80
rtsp 1880 ( 0.00%) 2652023 ( 0.01%) 1410.65
icecast 52412 ( 0.09%) 46238725 ( 0.12%) 882.22
other 4959025 ( 8.37%) 4201497437 ( 11.18%) 847.24
udp 7543257 ( 12.73%) 3594230802 ( 9.57%) 476.48
dns 740800 ( 1.25%) 185153656 ( 0.49%) 249.94
rip 3653912 ( 6.17%) 1750889232 ( 4.66%) 479.18
realaud 16 ( 0.00%) 1502 ( 0.00%) 93.88
halflif 91 ( 0.00%) 13272 ( 0.00%) 145.85
starcra 56 ( 0.00%) 7073 ( 0.00%) 126.30
everque 388 ( 0.00%) 55746 ( 0.00%) 143.68
unreal 21 ( 0.00%) 3547 ( 0.00%) 168.90
quake 46 ( 0.00%) 3442 ( 0.00%) 74.83
cuseeme 8 ( 0.00%) 1134 ( 0.00%) 141.75
other 3144129 ( 5.31%) 1657738939 ( 4.41%) 527.25
icmp 15071391 ( 25.44%) 985489927 ( 2.62%) 65.39
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 9357 ( 0.02%) 1568958 ( 0.00%) 167.68
ip6 1034214 ( 1.75%) 578262664 ( 1.54%) 559.13
pim 87 ( 0.00%) 5220 ( 0.00%) 60.00
other 646257 ( 1.09%) 448503152 ( 1.19%) 694.00
frag 69854 ( 0.12%) 71170344 ( 0.19%) 1018.84
ip6 690746 ( 1.17%) 562311733 ( 1.50%) 814.06
tcp6 609458 ( 1.03%) 538582283 ( 1.43%) 883.71
http(s) 466424 ( 0.79%) 486300901 ( 1.29%) 1042.62
http(c) 107871 ( 0.18%) 10198061 ( 0.03%) 94.54
smtp 2099 ( 0.00%) 990926 ( 0.00%) 472.09
ftp 214 ( 0.00%) 22628 ( 0.00%) 105.74
dns 118 ( 0.00%) 45312 ( 0.00%) 384.00
bgp 206 ( 0.00%) 36064 ( 0.00%) 175.07
other 32526 ( 0.05%) 40988391 ( 0.11%) 1260.17
udp6 57698 ( 0.10%) 19430625 ( 0.05%) 336.76
dns 56768 ( 0.10%) 19332732 ( 0.05%) 340.56
other 930 ( 0.00%) 97893 ( 0.00%) 105.26
icmp6 22431 ( 0.04%) 3266952 ( 0.01%) 145.64
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1045 ( 0.00%) 1016381 ( 0.00%) 972.61
tcpdump file: 201207251400.dump.gz (1272.89 MB)