Traffic Trace Info
DumpFile: 201206011400.dump
FileSize: 3532.95MB
Id: 201206011400
StartTime: Fri Jun 1 14:00:01 2012
EndTime: Fri Jun 1 14:15:00 2012
TotalTime: 899.49 seconds
TotalCapSize: -1353.76MB CapLen: 96 bytes
# of packets: 51819593 (28843.52MB)
AvgRate: 269.04Mbps stddev:45.60M
IP flow (unique src/dst pair) Information
# of flows: 11361175 (avg. 4.56 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.0% 9.8% 2.4% 1.0% 0.8% 0.8% 0.8% 0.7% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 8809986
Top 10 bandwidth usage (bytes/total in %):
22.5% 12.4% 10.2% 6.2% 6.1% 4.7% 4.1% 3.2% 3.0% 2.5%
# of IPv6 addresses: 7292
Top 10 bandwidth usage (bytes/total in %):
18.5% 13.0% 4.9% 3.6% 3.3% 3.1% 3.0% 3.0% 2.9% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201206011400.pktlen.png)
detailed numbers
[ 32- 63]: 21455844
[ 64- 127]: 9216330
[ 128- 255]: 814083
[ 256- 511]: 956527
[ 512- 1023]: 703696
[ 1024- 2047]: 18673113
Protocol Breakdown
![[protocol breakdown chart]](201206011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 51819593 (100.00%) 30244621597 (100.00%) 583.65
ip 49032048 ( 94.62%) 29284986601 ( 96.83%) 597.26
tcp 28663011 ( 55.31%) 25816826401 ( 85.36%) 900.70
http(s) 16917702 ( 32.65%) 22813127091 ( 75.43%) 1348.48
http(c) 7223185 ( 13.94%) 1014301282 ( 3.35%) 140.42
squid 172483 ( 0.33%) 166187198 ( 0.55%) 963.50
smtp 150901 ( 0.29%) 38485263 ( 0.13%) 255.04
nntp 11 ( 0.00%) 3395 ( 0.00%) 308.64
ftp 23501 ( 0.05%) 2723988 ( 0.01%) 115.91
pop3 6074 ( 0.01%) 2203626 ( 0.01%) 362.80
imap 8069 ( 0.02%) 8145838 ( 0.03%) 1009.52
telnet 12180 ( 0.02%) 907768 ( 0.00%) 74.53
ssh 52848 ( 0.10%) 13877708 ( 0.05%) 262.60
dns 4328 ( 0.01%) 2065157 ( 0.01%) 477.16
bgp 649 ( 0.00%) 132245 ( 0.00%) 203.77
napster 197 ( 0.00%) 13958 ( 0.00%) 70.85
realaud 57 ( 0.00%) 4299 ( 0.00%) 75.42
rtsp 9768 ( 0.02%) 11657530 ( 0.04%) 1193.44
icecast 850 ( 0.00%) 110502 ( 0.00%) 130.00
hotline 45 ( 0.00%) 4155 ( 0.00%) 92.33
other 4080163 ( 7.87%) 1742875398 ( 5.76%) 427.16
udp 3227325 ( 6.23%) 1253156515 ( 4.14%) 388.30
dns 643423 ( 1.24%) 155795254 ( 0.52%) 242.14
rip 1 ( 0.00%) 69 ( 0.00%) 69.00
realaud 14 ( 0.00%) 1039 ( 0.00%) 74.21
halflif 18 ( 0.00%) 1695 ( 0.00%) 94.17
starcra 29 ( 0.00%) 3248 ( 0.00%) 112.00
everque 177 ( 0.00%) 27002 ( 0.00%) 152.55
unreal 100 ( 0.00%) 22701 ( 0.00%) 227.01
quake 76 ( 0.00%) 7056 ( 0.00%) 92.84
cuseeme 7 ( 0.00%) 952 ( 0.00%) 136.00
other 2583398 ( 4.99%) 1097251260 ( 3.63%) 424.73
icmp 15773779 ( 30.44%) 1023745409 ( 3.38%) 64.90
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 4581 ( 0.01%) 940398 ( 0.00%) 205.28
ip6 1347980 ( 2.60%) 1185635140 ( 3.92%) 879.56
pim 10 ( 0.00%) 600 ( 0.00%) 60.00
other 15177 ( 0.03%) 4662868 ( 0.02%) 307.23
frag 574 ( 0.00%) 557803 ( 0.00%) 971.78
ip6 2787543 ( 5.38%) 959634876 ( 3.17%) 344.26
tcp6 2666620 ( 5.15%) 920264012 ( 3.04%) 345.11
http(s) 707733 ( 1.37%) 732129114 ( 2.42%) 1034.47
http(c) 1566389 ( 3.02%) 136688841 ( 0.45%) 87.26
smtp 320 ( 0.00%) 94438 ( 0.00%) 295.12
dns 397 ( 0.00%) 82901 ( 0.00%) 208.82
bgp 99 ( 0.00%) 29225 ( 0.00%) 295.20
other 391682 ( 0.76%) 51239493 ( 0.17%) 130.82
udp6 81809 ( 0.16%) 25508351 ( 0.08%) 311.80
dns 74422 ( 0.14%) 18321031 ( 0.06%) 246.18
realaud 1 ( 0.00%) 96 ( 0.00%) 96.00
everque 1 ( 0.00%) 110 ( 0.00%) 110.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
cuseeme 1 ( 0.00%) 108 ( 0.00%) 108.00
other 7383 ( 0.01%) 7186899 ( 0.02%) 973.44
icmp6 24028 ( 0.05%) 3137868 ( 0.01%) 130.59
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 14974 ( 0.03%) 10709389 ( 0.04%) 715.20
tcpdump file: 201206011400.dump.gz (1140.33 MB)