Traffic Trace Info
DumpFile: 201207261400.dump
FileSize: 3846.51MB
Id: 201207261400
StartTime: Thu Jul 26 14:00:01 2012
EndTime: Thu Jul 26 14:15:01 2012
TotalTime: 900.02 seconds
TotalCapSize: -1139.12MB CapLen: 96 bytes
# of packets: 58302661 (36424.23MB)
AvgRate: 339.49Mbps stddev:48.55M
IP flow (unique src/dst pair) Information
# of flows: 11312531 (avg. 5.15 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 4.2% 3.9% 1.9% 1.8% 1.7% 1.6% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 8839700
Top 10 bandwidth usage (bytes/total in %):
16.2% 13.8% 6.0% 5.4% 4.5% 4.3% 4.1% 3.7% 3.7% 3.6%
# of IPv6 addresses: 6871
Top 10 bandwidth usage (bytes/total in %):
29.3% 15.1% 11.6% 5.7% 4.8% 4.2% 2.9% 2.9% 2.7% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201207261400.pktlen.png)
detailed numbers
[ 32- 63]: 19283287
[ 64- 127]: 8491711
[ 128- 255]: 1503825
[ 256- 511]: 894220
[ 512- 1023]: 6358037
[ 1024- 2047]: 21771581
Protocol Breakdown
![[protocol breakdown chart]](201207261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 58302661 (100.00%) 38193570412 (100.00%) 655.09
ip 57386793 ( 98.43%) 37333610290 ( 97.75%) 650.56
tcp 30191226 ( 51.78%) 29422559012 ( 77.04%) 974.54
http(s) 18787868 ( 32.22%) 25637815925 ( 67.13%) 1364.59
http(c) 7930225 ( 13.60%) 1547200458 ( 4.05%) 195.10
squid 133547 ( 0.23%) 62468464 ( 0.16%) 467.76
smtp 67502 ( 0.12%) 14456865 ( 0.04%) 214.17
ftp 23385 ( 0.04%) 14264995 ( 0.04%) 610.01
pop3 32917 ( 0.06%) 4898822 ( 0.01%) 148.82
imap 3036 ( 0.01%) 1055015 ( 0.00%) 347.50
telnet 7244 ( 0.01%) 544986 ( 0.00%) 75.23
ssh 195239 ( 0.33%) 221835539 ( 0.58%) 1136.23
dns 2039 ( 0.00%) 276583 ( 0.00%) 135.65
bgp 603 ( 0.00%) 190534 ( 0.00%) 315.98
napster 42 ( 0.00%) 3419 ( 0.00%) 81.40
realaud 11 ( 0.00%) 2168 ( 0.00%) 197.09
rtsp 2472 ( 0.00%) 168510 ( 0.00%) 68.17
icecast 35227 ( 0.06%) 30888073 ( 0.08%) 876.83
hotline 188 ( 0.00%) 71574 ( 0.00%) 380.71
other 2969676 ( 5.09%) 1886416782 ( 4.94%) 635.23
udp 10465637 ( 17.95%) 5913861493 ( 15.48%) 565.07
dns 690945 ( 1.19%) 175651034 ( 0.46%) 254.22
rip 5709280 ( 9.79%) 2766813366 ( 7.24%) 484.62
realaud 72 ( 0.00%) 5367 ( 0.00%) 74.54
halflif 58 ( 0.00%) 7211 ( 0.00%) 124.33
starcra 44 ( 0.00%) 5621 ( 0.00%) 127.75
everque 226 ( 0.00%) 46993 ( 0.00%) 207.93
unreal 28 ( 0.00%) 3342 ( 0.00%) 119.36
quake 64 ( 0.00%) 10329 ( 0.00%) 161.39
cuseeme 9 ( 0.00%) 653 ( 0.00%) 72.56
other 4064676 ( 6.97%) 2971223359 ( 7.78%) 730.99
icmp 15042263 ( 25.80%) 976059189 ( 2.56%) 64.89
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 21036 ( 0.04%) 3131384 ( 0.01%) 148.86
ip6 1624103 ( 2.79%) 1004934743 ( 2.63%) 618.76
pim 80 ( 0.00%) 4800 ( 0.00%) 60.00
other 42263 ( 0.07%) 13040399 ( 0.03%) 308.55
frag 36523 ( 0.06%) 46384333 ( 0.12%) 1270.00
ip6 915868 ( 1.57%) 859960122 ( 2.25%) 938.96
tcp6 828847 ( 1.42%) 831756746 ( 2.18%) 1003.51
http(s) 673937 ( 1.16%) 791508708 ( 2.07%) 1174.46
http(c) 130073 ( 0.22%) 12066849 ( 0.03%) 92.77
smtp 725 ( 0.00%) 293150 ( 0.00%) 404.34
ftp 336 ( 0.00%) 36948 ( 0.00%) 109.96
dns 73 ( 0.00%) 30862 ( 0.00%) 422.77
bgp 194 ( 0.00%) 36621 ( 0.00%) 188.77
other 23509 ( 0.04%) 27783608 ( 0.07%) 1181.83
udp6 58774 ( 0.10%) 20196880 ( 0.05%) 343.64
dns 56526 ( 0.10%) 19910693 ( 0.05%) 352.24
realaud 1 ( 0.00%) 101 ( 0.00%) 101.00
quake 1 ( 0.00%) 118 ( 0.00%) 118.00
other 2246 ( 0.00%) 285968 ( 0.00%) 127.32
icmp6 21901 ( 0.04%) 3284196 ( 0.01%) 149.96
ip6 84 ( 0.00%) 11462 ( 0.00%) 136.45
pim6 29 ( 0.00%) 3944 ( 0.00%) 136.00
other6 6233 ( 0.01%) 4706894 ( 0.01%) 755.16
tcpdump file: 201207261400.dump.gz (1247.12 MB)