Traffic Trace Info
DumpFile: 201207281400.dump
FileSize: 3036.14MB
Id: 201207281400
StartTime: Sat Jul 28 14:00:00 2012
EndTime: Sat Jul 28 14:15:01 2012
TotalTime: 900.68 seconds
TotalCapSize: -1771.03MB CapLen: 96 bytes
# of packets: 46606868 (25207.33MB)
AvgRate: 234.77Mbps stddev:49.26M
IP flow (unique src/dst pair) Information
# of flows: 11088991 (avg. 4.20 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.8% 2.2% 1.7% 1.7% 1.5% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 8763607
Top 10 bandwidth usage (bytes/total in %):
21.6% 11.5% 5.6% 5.6% 4.6% 4.3% 3.4% 3.3% 2.4% 2.2%
# of IPv6 addresses: 6749
Top 10 bandwidth usage (bytes/total in %):
83.3% 76.1% 2.0% 1.9% 1.8% 1.3% 1.1% 1.0% 0.7% 0.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201207281400.pktlen.png)
detailed numbers
[ 32- 63]: 17781213
[ 64- 127]: 6765812
[ 128- 255]: 1215745
[ 256- 511]: 686357
[ 512- 1023]: 5710991
[ 1024- 2047]: 14446750
Protocol Breakdown
![[protocol breakdown chart]](201207281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 46606868 (100.00%) 26431799015 (100.00%) 567.12
ip 45675926 ( 98.00%) 25459726863 ( 96.32%) 557.40
tcp 20719998 ( 44.46%) 19917173141 ( 75.35%) 961.25
http(s) 11243910 ( 24.13%) 15291801986 ( 57.85%) 1360.01
http(c) 4963030 ( 10.65%) 1053939908 ( 3.99%) 212.36
squid 56518 ( 0.12%) 17037890 ( 0.06%) 301.46
smtp 44355 ( 0.10%) 6275232 ( 0.02%) 141.48
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 13175 ( 0.03%) 1569728 ( 0.01%) 119.14
pop3 5170 ( 0.01%) 1446308 ( 0.01%) 279.75
imap 2228 ( 0.00%) 199536 ( 0.00%) 89.56
telnet 32916 ( 0.07%) 2429345 ( 0.01%) 73.80
ssh 541240 ( 1.16%) 567511209 ( 2.15%) 1048.54
dns 1972 ( 0.00%) 273233 ( 0.00%) 138.56
bgp 517 ( 0.00%) 95086 ( 0.00%) 183.92
napster 96 ( 0.00%) 13880 ( 0.00%) 144.58
realaud 5 ( 0.00%) 734 ( 0.00%) 146.80
rtsp 20387 ( 0.04%) 1502129 ( 0.01%) 73.68
icecast 8007 ( 0.02%) 6029430 ( 0.02%) 753.02
hotline 2 ( 0.00%) 120 ( 0.00%) 60.00
other 3786468 ( 8.12%) 2967047265 ( 11.23%) 783.59
udp 8745275 ( 18.76%) 3945494802 ( 14.93%) 451.16
dns 513001 ( 1.10%) 117040875 ( 0.44%) 228.15
rip 6024571 ( 12.93%) 2898167770 ( 10.96%) 481.06
realaud 23 ( 0.00%) 1682 ( 0.00%) 73.13
halflif 452 ( 0.00%) 37034 ( 0.00%) 81.93
starcra 28 ( 0.00%) 3316 ( 0.00%) 118.43
everque 162 ( 0.00%) 22543 ( 0.00%) 139.15
unreal 10 ( 0.00%) 1313 ( 0.00%) 131.30
quake 45 ( 0.00%) 3331 ( 0.00%) 74.02
cuseeme 7 ( 0.00%) 494 ( 0.00%) 70.57
other 2206895 ( 4.74%) 930145209 ( 3.52%) 421.47
icmp 15016303 ( 32.22%) 986539736 ( 3.73%) 65.70
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 43747 ( 0.09%) 37100322 ( 0.14%) 848.07
ip6 1107005 ( 2.38%) 562070832 ( 2.13%) 507.74
pim 89 ( 0.00%) 5340 ( 0.00%) 60.00
other 43325 ( 0.09%) 11323530 ( 0.04%) 261.36
frag 16268 ( 0.03%) 20055288 ( 0.08%) 1232.81
ip6 930942 ( 2.00%) 972072152 ( 3.68%) 1044.18
tcp6 856035 ( 1.84%) 951503975 ( 3.60%) 1111.52
http(s) 162147 ( 0.35%) 174346279 ( 0.66%) 1075.24
http(c) 90388 ( 0.19%) 7849582 ( 0.03%) 86.84
smtp 18 ( 0.00%) 4641 ( 0.00%) 257.83
ftp 219 ( 0.00%) 22630 ( 0.00%) 103.33
telnet 25 ( 0.00%) 1970 ( 0.00%) 78.80
dns 92 ( 0.00%) 33465 ( 0.00%) 363.75
bgp 94 ( 0.00%) 25822 ( 0.00%) 274.70
other 603052 ( 1.29%) 769219586 ( 2.91%) 1275.54
udp6 48419 ( 0.10%) 16230892 ( 0.06%) 335.22
dns 45555 ( 0.10%) 15249344 ( 0.06%) 334.75
everque 2 ( 0.00%) 216 ( 0.00%) 108.00
quake 1 ( 0.00%) 116 ( 0.00%) 116.00
other 2861 ( 0.01%) 981216 ( 0.00%) 342.96
icmp6 25588 ( 0.05%) 3550756 ( 0.01%) 138.77
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 785 ( 0.00%) 770869 ( 0.00%) 982.00
tcpdump file: 201207281400.dump.gz (978.86 MB)