Traffic Trace Info
DumpFile: 201206021400.dump
FileSize: 3109.77MB
Id: 201206021400
StartTime: Sat Jun 2 14:00:00 2012
EndTime: Sat Jun 2 14:15:00 2012
TotalTime: 899.85 seconds
TotalCapSize: -1681.95MB CapLen: 96 bytes
# of packets: 45594205 (24720.81MB)
AvgRate: 230.43Mbps stddev:44.54M
IP flow (unique src/dst pair) Information
# of flows: 11346118 (avg. 4.02 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 3.4% 1.5% 1.3% 1.2% 1.1% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 8797370
Top 10 bandwidth usage (bytes/total in %):
17.7% 11.0% 8.2% 4.9% 4.2% 4.2% 3.7% 3.6% 3.6% 3.6%
# of IPv6 addresses: 6037
Top 10 bandwidth usage (bytes/total in %):
19.9% 15.1% 15.1% 12.1% 5.3% 5.0% 2.7% 2.3% 2.2% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201206021400.pktlen.png)
detailed numbers
[ 32- 63]: 19966587
[ 64- 127]: 7643266
[ 128- 255]: 846271
[ 256- 511]: 725866
[ 512- 1023]: 652016
[ 1024- 2047]: 15760199
Protocol Breakdown
![[protocol breakdown chart]](201206021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 45594205 (100.00%) 25921645635 (100.00%) 568.53
ip 44279266 ( 97.12%) 25149110769 ( 97.02%) 567.97
tcp 24747975 ( 54.28%) 21382760463 ( 82.49%) 864.02
http(s) 12731612 ( 27.92%) 17442501246 ( 67.29%) 1370.02
http(c) 5750089 ( 12.61%) 874141610 ( 3.37%) 152.02
squid 73811 ( 0.16%) 55593116 ( 0.21%) 753.18
smtp 40465 ( 0.09%) 9046138 ( 0.03%) 223.55
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 23516 ( 0.05%) 4217162 ( 0.02%) 179.33
pop3 2388 ( 0.01%) 419497 ( 0.00%) 175.67
imap 3576 ( 0.01%) 923156 ( 0.00%) 258.15
telnet 6263 ( 0.01%) 478114 ( 0.00%) 76.34
ssh 777117 ( 1.70%) 128754578 ( 0.50%) 165.68
dns 4980 ( 0.01%) 2104971 ( 0.01%) 422.68
bgp 670 ( 0.00%) 158353 ( 0.00%) 236.35
napster 181 ( 0.00%) 11288 ( 0.00%) 62.36
realaud 31 ( 0.00%) 1966 ( 0.00%) 63.42
rtsp 27658 ( 0.06%) 39083335 ( 0.15%) 1413.09
icecast 40945 ( 0.09%) 31333026 ( 0.12%) 765.25
hotline 91 ( 0.00%) 6025 ( 0.00%) 66.21
other 5264580 ( 11.55%) 2793986762 ( 10.78%) 530.71
udp 2457509 ( 5.39%) 970023359 ( 3.74%) 394.72
dns 444690 ( 0.98%) 104558967 ( 0.40%) 235.13
rip 7 ( 0.00%) 502 ( 0.00%) 71.71
realaud 4 ( 0.00%) 531 ( 0.00%) 132.75
halflif 35 ( 0.00%) 3675 ( 0.00%) 105.00
starcra 15 ( 0.00%) 2070 ( 0.00%) 138.00
everque 190 ( 0.00%) 29251 ( 0.00%) 153.95
unreal 8 ( 0.00%) 1431 ( 0.00%) 178.88
quake 224 ( 0.00%) 17543 ( 0.00%) 78.32
cuseeme 7 ( 0.00%) 493 ( 0.00%) 70.43
other 2012280 ( 4.41%) 865377772 ( 3.34%) 430.05
icmp 15041715 ( 32.99%) 971536911 ( 3.75%) 64.59
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 3159 ( 0.01%) 1168138 ( 0.00%) 369.78
ip6 2006967 ( 4.40%) 1819471015 ( 7.02%) 906.58
pim 9 ( 0.00%) 540 ( 0.00%) 60.00
other 21748 ( 0.05%) 4131183 ( 0.02%) 189.96
frag 341 ( 0.00%) 361735 ( 0.00%) 1060.81
ip6 1314937 ( 2.88%) 772534746 ( 2.98%) 587.51
tcp6 1207028 ( 2.65%) 727047344 ( 2.80%) 602.35
http(s) 396383 ( 0.87%) 401476478 ( 1.55%) 1012.85
http(c) 89742 ( 0.20%) 9832912 ( 0.04%) 109.57
smtp 47 ( 0.00%) 11810 ( 0.00%) 251.28
dns 355 ( 0.00%) 76757 ( 0.00%) 216.22
bgp 89 ( 0.00%) 22435 ( 0.00%) 252.08
other 720412 ( 1.58%) 315626952 ( 1.22%) 438.12
udp6 76172 ( 0.17%) 40390120 ( 0.16%) 530.25
dns 49747 ( 0.11%) 11631991 ( 0.04%) 233.82
quake 1 ( 0.00%) 117 ( 0.00%) 117.00
other 26424 ( 0.06%) 28758012 ( 0.11%) 1088.33
icmp6 29775 ( 0.07%) 3608040 ( 0.01%) 121.18
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1848 ( 0.00%) 1473682 ( 0.01%) 797.45
tcpdump file: 201206021400.dump.gz (1046.77 MB)