Traffic Trace Info
DumpFile: 201207291400.dump
FileSize: 2875.18MB
Id: 201207291400
StartTime: Sun Jul 29 14:00:00 2012
EndTime: Sun Jul 29 14:15:00 2012
TotalTime: 899.80 seconds
TotalCapSize: -1897.09MB CapLen: 96 bytes
# of packets: 44319568 (22568.61MB)
AvgRate: 210.43Mbps stddev:51.56M
IP flow (unique src/dst pair) Information
# of flows: 11094025 (avg. 3.99 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 2.2% 1.7% 1.7% 1.7% 1.7% 1.7% 1.6% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 8757428
Top 10 bandwidth usage (bytes/total in %):
17.1% 7.6% 7.6% 5.9% 4.5% 4.2% 3.9% 3.7% 3.6% 3.6%
# of IPv6 addresses: 6853
Top 10 bandwidth usage (bytes/total in %):
85.0% 78.2% 1.7% 1.5% 1.4% 1.3% 1.0% 0.8% 0.8% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201207291400.pktlen.png)
detailed numbers
[ 32- 63]: 17218132
[ 64- 127]: 6334844
[ 128- 255]: 1370596
[ 256- 511]: 564952
[ 512- 1023]: 6534792
[ 1024- 2047]: 12296252
Protocol Breakdown
![[protocol breakdown chart]](201207291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 44319568 (100.00%) 23664900386 (100.00%) 533.96
ip 43176166 ( 97.42%) 22394466980 ( 94.63%) 518.68
tcp 17364702 ( 39.18%) 16443289741 ( 69.48%) 946.94
http(s) 9258118 ( 20.89%) 12605140843 ( 53.27%) 1361.52
http(c) 4158882 ( 9.38%) 842975751 ( 3.56%) 202.69
squid 25487 ( 0.06%) 9611579 ( 0.04%) 377.12
smtp 31986 ( 0.07%) 6162060 ( 0.03%) 192.65
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 14328 ( 0.03%) 1739695 ( 0.01%) 121.42
pop3 2711 ( 0.01%) 289617 ( 0.00%) 106.83
imap 1835 ( 0.00%) 135603 ( 0.00%) 73.90
telnet 5956 ( 0.01%) 448380 ( 0.00%) 75.28
ssh 482793 ( 1.09%) 487691422 ( 2.06%) 1010.15
dns 1072 ( 0.00%) 205527 ( 0.00%) 191.72
bgp 484 ( 0.00%) 88803 ( 0.00%) 183.48
napster 41 ( 0.00%) 4262 ( 0.00%) 103.95
realaud 10 ( 0.00%) 1101 ( 0.00%) 110.10
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 35588 ( 0.08%) 30871036 ( 0.13%) 867.46
other 3345408 ( 7.55%) 2457923882 ( 10.39%) 734.72
udp 9545620 ( 21.54%) 4454873109 ( 18.82%) 466.69
dns 389203 ( 0.88%) 92736929 ( 0.39%) 238.27
rip 6961453 ( 15.71%) 3422278698 ( 14.46%) 491.60
realaud 16 ( 0.00%) 1191 ( 0.00%) 74.44
halflif 59 ( 0.00%) 9254 ( 0.00%) 156.85
starcra 40 ( 0.00%) 4666 ( 0.00%) 116.65
everque 150 ( 0.00%) 25184 ( 0.00%) 167.89
unreal 34 ( 0.00%) 5237 ( 0.00%) 154.03
quake 66 ( 0.00%) 6606 ( 0.00%) 100.09
cuseeme 6 ( 0.00%) 408 ( 0.00%) 68.00
other 2194514 ( 4.95%) 939764029 ( 3.97%) 428.23
icmp 14916291 ( 33.66%) 950038918 ( 4.01%) 63.69
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 1328 ( 0.00%) 410192 ( 0.00%) 308.88
ip6 1295887 ( 2.92%) 531699977 ( 2.25%) 410.30
pim 89 ( 0.00%) 5340 ( 0.00%) 60.00
other 52065 ( 0.12%) 14130543 ( 0.06%) 271.40
frag 25040 ( 0.06%) 31494359 ( 0.13%) 1257.76
ip6 1143402 ( 2.58%) 1270433406 ( 5.37%) 1111.10
tcp6 1073406 ( 2.42%) 1252685254 ( 5.29%) 1167.02
http(s) 208673 ( 0.47%) 241270310 ( 1.02%) 1156.21
http(c) 85313 ( 0.19%) 7515306 ( 0.03%) 88.09
smtp 110 ( 0.00%) 36843 ( 0.00%) 334.94
ftp 166 ( 0.00%) 17846 ( 0.00%) 107.51
dns 45 ( 0.00%) 11853 ( 0.00%) 263.40
bgp 89 ( 0.00%) 25453 ( 0.00%) 285.99
other 779010 ( 1.76%) 1003807643 ( 4.24%) 1288.57
udp6 42174 ( 0.10%) 13399156 ( 0.06%) 317.71
dns 39470 ( 0.09%) 12872418 ( 0.05%) 326.13
realaud 1 ( 0.00%) 93 ( 0.00%) 93.00
unreal 1 ( 0.00%) 108 ( 0.00%) 108.00
other 2702 ( 0.01%) 526537 ( 0.00%) 194.87
icmp6 27114 ( 0.06%) 3748443 ( 0.02%) 138.25
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 596 ( 0.00%) 585297 ( 0.00%) 982.04
tcpdump file: 201207291400.dump.gz (912.72 MB)