Traffic Trace Info
DumpFile: 201206031400.dump
FileSize: 3374.91MB
Id: 201206031400
StartTime: Sun Jun 3 14:00:00 2012
EndTime: Sun Jun 3 14:15:00 2012
TotalTime: 899.65 seconds
TotalCapSize: -1489.75MB CapLen: 96 bytes
# of packets: 50373946 (30149.70MB)
AvgRate: 281.10Mbps stddev:60.75M
IP flow (unique src/dst pair) Information
# of flows: 11113458 (avg. 4.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 3.0% 2.5% 1.7% 1.7% 1.4% 1.3% 1.3% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 8674361
Top 10 bandwidth usage (bytes/total in %):
20.3% 12.5% 6.2% 5.1% 3.9% 3.3% 3.3% 3.1% 2.9% 2.8%
# of IPv6 addresses: 5543
Top 10 bandwidth usage (bytes/total in %):
38.5% 29.8% 4.5% 3.5% 3.3% 3.3% 3.0% 2.7% 2.5% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201206031400.pktlen.png)
detailed numbers
[ 32- 63]: 21399799
[ 64- 127]: 7224706
[ 128- 255]: 985161
[ 256- 511]: 657958
[ 512- 1023]: 681905
[ 1024- 2047]: 19424417
Protocol Breakdown
![[protocol breakdown chart]](201206031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 50373946 (100.00%) 31614247895 (100.00%) 627.59
ip 49512046 ( 98.29%) 31118370572 ( 98.43%) 628.50
tcp 28551152 ( 56.68%) 26839515049 ( 84.90%) 940.05
http(s) 15568769 ( 30.91%) 21387690407 ( 67.65%) 1373.76
http(c) 7126433 ( 14.15%) 1848228057 ( 5.85%) 259.35
squid 23894 ( 0.05%) 9161103 ( 0.03%) 383.41
smtp 33585 ( 0.07%) 6743407 ( 0.02%) 200.79
nntp 9 ( 0.00%) 548 ( 0.00%) 60.89
ftp 22791 ( 0.05%) 2612085 ( 0.01%) 114.61
pop3 1967 ( 0.00%) 647581 ( 0.00%) 329.22
imap 1735 ( 0.00%) 192631 ( 0.00%) 111.03
telnet 8304 ( 0.02%) 610655 ( 0.00%) 73.54
ssh 107855 ( 0.21%) 15317055 ( 0.05%) 142.02
dns 8761 ( 0.02%) 1825777 ( 0.01%) 208.40
bgp 635 ( 0.00%) 109172 ( 0.00%) 171.92
napster 192 ( 0.00%) 12501 ( 0.00%) 65.11
realaud 48 ( 0.00%) 3740 ( 0.00%) 77.92
icecast 28840 ( 0.06%) 5749555 ( 0.02%) 199.36
hotline 84 ( 0.00%) 5629 ( 0.00%) 67.01
other 5617242 ( 11.15%) 3560604666 ( 11.26%) 633.87
udp 4059629 ( 8.06%) 1807814616 ( 5.72%) 445.32
dns 525311 ( 1.04%) 116251430 ( 0.37%) 221.30
rip 2 ( 0.00%) 138 ( 0.00%) 69.00
realaud 17 ( 0.00%) 1830 ( 0.00%) 107.65
halflif 50 ( 0.00%) 11095 ( 0.00%) 221.90
starcra 17 ( 0.00%) 2473 ( 0.00%) 145.47
everque 150 ( 0.00%) 25329 ( 0.00%) 168.86
unreal 18 ( 0.00%) 2717 ( 0.00%) 150.94
quake 1042 ( 0.00%) 74347 ( 0.00%) 71.35
cuseeme 5 ( 0.00%) 497 ( 0.00%) 99.40
other 3530982 ( 7.01%) 1691292857 ( 5.35%) 478.99
icmp 15355455 ( 30.48%) 992394197 ( 3.14%) 64.63
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1083 ( 0.00%) 238778 ( 0.00%) 220.48
ip6 1494478 ( 2.97%) 1421312301 ( 4.50%) 951.04
pim 10 ( 0.00%) 600 ( 0.00%) 60.00
other 50054 ( 0.10%) 57075761 ( 0.18%) 1140.28
frag 4754 ( 0.01%) 3710585 ( 0.01%) 780.52
ip6 861900 ( 1.71%) 495877323 ( 1.57%) 575.33
tcp6 784258 ( 1.56%) 480236650 ( 1.52%) 612.35
http(s) 272355 ( 0.54%) 260320243 ( 0.82%) 955.81
http(c) 78975 ( 0.16%) 8133698 ( 0.03%) 102.99
smtp 63 ( 0.00%) 40861 ( 0.00%) 648.59
ftp 48 ( 0.00%) 4771 ( 0.00%) 99.40
dns 368 ( 0.00%) 67554 ( 0.00%) 183.57
bgp 93 ( 0.00%) 22298 ( 0.00%) 239.76
other 432356 ( 0.86%) 211647225 ( 0.67%) 489.52
udp6 50072 ( 0.10%) 11631838 ( 0.04%) 232.30
dns 44285 ( 0.09%) 10358378 ( 0.03%) 233.90
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
other 5786 ( 0.01%) 1273353 ( 0.00%) 220.07
icmp6 26950 ( 0.05%) 3475912 ( 0.01%) 128.98
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 506 ( 0.00%) 517431 ( 0.00%) 1022.59
tcpdump file: 201206031400.dump.gz (1104.77 MB)