Traffic Trace Info
DumpFile: 201207301400.dump
FileSize: 4082.75MB
Id: 201207301400
StartTime: Mon Jul 30 14:00:00 2012
EndTime: Mon Jul 30 14:15:00 2012
TotalTime: 900.10 seconds
TotalCapSize: -955.19MB CapLen: 96 bytes
# of packets: 61730013 (36349.51MB)
AvgRate: 338.80Mbps stddev:68.40M
IP flow (unique src/dst pair) Information
# of flows: 11098089 (avg. 5.56 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 3.1% 2.9% 2.0% 1.5% 1.4% 1.3% 1.3% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 8746579
Top 10 bandwidth usage (bytes/total in %):
13.5% 6.2% 5.2% 5.0% 4.4% 4.4% 4.4% 3.5% 3.3% 3.2%
# of IPv6 addresses: 8608
Top 10 bandwidth usage (bytes/total in %):
19.9% 11.7% 8.1% 6.0% 5.5% 5.4% 5.2% 5.2% 4.1% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201207301400.pktlen.png)
detailed numbers
[ 32- 63]: 20195277
[ 64- 127]: 10270856
[ 128- 255]: 1888842
[ 256- 511]: 842522
[ 512- 1023]: 7203174
[ 1024- 2047]: 21329342
Protocol Breakdown
![[protocol breakdown chart]](201207301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 61730013 (100.00%) 38115221556 (100.00%) 617.45
ip 60848786 ( 98.57%) 37275089341 ( 97.80%) 612.59
tcp 32227233 ( 52.21%) 29002019581 ( 76.09%) 899.92
http(s) 13957316 ( 22.61%) 18882222812 ( 49.54%) 1352.85
http(c) 9100646 ( 14.74%) 2295898816 ( 6.02%) 252.28
squid 104715 ( 0.17%) 23325763 ( 0.06%) 222.75
smtp 47536 ( 0.08%) 10474666 ( 0.03%) 220.35
ftp 14015 ( 0.02%) 1684760 ( 0.00%) 120.21
pop3 4057 ( 0.01%) 924831 ( 0.00%) 227.96
imap 26423 ( 0.04%) 32672995 ( 0.09%) 1236.54
telnet 5704 ( 0.01%) 427873 ( 0.00%) 75.01
ssh 845960 ( 1.37%) 962557756 ( 2.53%) 1137.83
dns 1655 ( 0.00%) 229761 ( 0.00%) 138.83
bgp 514 ( 0.00%) 107601 ( 0.00%) 209.34
napster 58 ( 0.00%) 4254 ( 0.00%) 73.34
realaud 7 ( 0.00%) 988 ( 0.00%) 141.14
rtsp 4060 ( 0.01%) 3985151 ( 0.01%) 981.56
icecast 14599 ( 0.02%) 12912008 ( 0.03%) 884.44
hotline 17 ( 0.00%) 2529 ( 0.00%) 148.76
other 8099950 ( 13.12%) 6774586957 ( 17.77%) 836.37
udp 12396067 ( 20.08%) 6602296200 ( 17.32%) 532.61
dns 615435 ( 1.00%) 258701537 ( 0.68%) 420.36
rip 6839634 ( 11.08%) 3340790004 ( 8.76%) 488.45
realaud 22 ( 0.00%) 2110 ( 0.00%) 95.91
halflif 33 ( 0.00%) 4071 ( 0.00%) 123.36
starcra 1751 ( 0.00%) 798906 ( 0.00%) 456.26
everque 255 ( 0.00%) 40184 ( 0.00%) 157.58
unreal 15 ( 0.00%) 2029 ( 0.00%) 135.27
quake 30 ( 0.00%) 2938 ( 0.00%) 97.93
cuseeme 9 ( 0.00%) 946 ( 0.00%) 105.11
other 4900603 ( 7.94%) 2999512028 ( 7.87%) 612.07
icmp 15099206 ( 24.46%) 963280690 ( 2.53%) 63.80
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 28779 ( 0.05%) 5390674 ( 0.01%) 187.31
ip6 1054583 ( 1.71%) 689096441 ( 1.81%) 653.43
pim 164 ( 0.00%) 9840 ( 0.00%) 60.00
other 42570 ( 0.07%) 12976755 ( 0.03%) 304.83
frag 233352 ( 0.38%) 216132085 ( 0.57%) 926.21
ip6 881227 ( 1.43%) 840132215 ( 2.20%) 953.37
tcp6 785184 ( 1.27%) 812347360 ( 2.13%) 1034.59
http(s) 664740 ( 1.08%) 781263906 ( 2.05%) 1175.29
http(c) 101625 ( 0.16%) 9623860 ( 0.03%) 94.70
smtp 437 ( 0.00%) 213896 ( 0.00%) 489.46
ftp 190 ( 0.00%) 19942 ( 0.00%) 104.96
dns 93 ( 0.00%) 29384 ( 0.00%) 315.96
bgp 95 ( 0.00%) 29744 ( 0.00%) 313.09
other 18004 ( 0.03%) 21166628 ( 0.06%) 1175.66
udp6 69111 ( 0.11%) 23268518 ( 0.06%) 336.68
dns 63083 ( 0.10%) 20845555 ( 0.05%) 330.45
everque 1 ( 0.00%) 113 ( 0.00%) 113.00
other 6027 ( 0.01%) 2422850 ( 0.01%) 402.00
icmp6 25903 ( 0.04%) 3596776 ( 0.01%) 138.86
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 915 ( 0.00%) 904069 ( 0.00%) 988.05
tcpdump file: 201207301400.dump.gz (1322.85 MB)