Traffic Trace Info
DumpFile: 201206101400.dump
FileSize: 2819.16MB
Id: 201206101400
StartTime: Sun Jun 10 14:00:00 2012
EndTime: Sun Jun 10 14:15:00 2012
TotalTime: 900.12 seconds
TotalCapSize: -1918.36MB CapLen: 96 bytes
# of packets: 42042312 (22642.43MB)
AvgRate: 211.05Mbps stddev:47.61M
IP flow (unique src/dst pair) Information
# of flows: 11011414 (avg. 3.82 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.4% 1.9% 1.6% 1.4% 1.3% 1.2% 1.2% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 8665404
Top 10 bandwidth usage (bytes/total in %):
16.9% 8.7% 4.4% 4.0% 3.5% 3.5% 3.2% 3.0% 2.8% 2.7%
# of IPv6 addresses: 5818
Top 10 bandwidth usage (bytes/total in %):
27.4% 24.9% 24.9% 6.4% 6.0% 6.0% 5.2% 3.3% 3.3% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201206101400.pktlen.png)
detailed numbers
[ 32- 63]: 18967801
[ 64- 127]: 6651570
[ 128- 255]: 880174
[ 256- 511]: 556880
[ 512- 1023]: 598135
[ 1024- 2047]: 14387752
Protocol Breakdown
![[protocol breakdown chart]](201206101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42042312 (100.00%) 23742310657 (100.00%) 564.72
ip 40956802 ( 97.42%) 22946529832 ( 96.65%) 560.26
tcp 21384407 ( 50.86%) 19591777055 ( 82.52%) 916.17
http(s) 11991090 ( 28.52%) 16266749908 ( 68.51%) 1356.57
http(c) 6376362 ( 15.17%) 1100673963 ( 4.64%) 172.62
squid 32795 ( 0.08%) 23700024 ( 0.10%) 722.67
smtp 50445 ( 0.12%) 13049214 ( 0.05%) 258.68
ftp 23348 ( 0.06%) 2648026 ( 0.01%) 113.42
pop3 865 ( 0.00%) 277550 ( 0.00%) 320.87
imap 1300 ( 0.00%) 122801 ( 0.00%) 94.46
telnet 7865 ( 0.02%) 594847 ( 0.00%) 75.63
ssh 19271 ( 0.05%) 3153437 ( 0.01%) 163.64
dns 1115 ( 0.00%) 187833 ( 0.00%) 168.46
bgp 651 ( 0.00%) 116247 ( 0.00%) 178.57
napster 132 ( 0.00%) 9849 ( 0.00%) 74.61
rtsp 6839 ( 0.02%) 7729225 ( 0.03%) 1130.17
icecast 45488 ( 0.11%) 36790749 ( 0.15%) 808.80
hotline 15 ( 0.00%) 2293 ( 0.00%) 152.87
other 2826826 ( 6.72%) 2135971089 ( 9.00%) 755.61
udp 2897110 ( 6.89%) 1238861105 ( 5.22%) 427.62
dns 382604 ( 0.91%) 116037140 ( 0.49%) 303.28
realaud 5 ( 0.00%) 729 ( 0.00%) 145.80
halflif 15 ( 0.00%) 3913 ( 0.00%) 260.87
starcra 41 ( 0.00%) 3794 ( 0.00%) 92.54
everque 127 ( 0.00%) 22157 ( 0.00%) 174.46
unreal 8 ( 0.00%) 1896 ( 0.00%) 237.00
quake 35 ( 0.00%) 2987 ( 0.00%) 85.34
cuseeme 1 ( 0.00%) 96 ( 0.00%) 96.00
other 2504589 ( 5.96%) 1122103439 ( 4.73%) 448.02
icmp 15375665 ( 36.57%) 1007280992 ( 4.24%) 65.51
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 465 ( 0.00%) 155526 ( 0.00%) 334.46
ip6 1285443 ( 3.06%) 1105912279 ( 4.66%) 860.34
pim 14 ( 0.00%) 840 ( 0.00%) 60.00
other 13513 ( 0.03%) 2522765 ( 0.01%) 186.69
frag 46293 ( 0.11%) 47988302 ( 0.20%) 1036.62
ip6 1085510 ( 2.58%) 795780825 ( 3.35%) 733.09
tcp6 910826 ( 2.17%) 673685748 ( 2.84%) 739.64
http(s) 384173 ( 0.91%) 492126985 ( 2.07%) 1281.00
http(c) 85028 ( 0.20%) 8566854 ( 0.04%) 100.75
smtp 196 ( 0.00%) 58296 ( 0.00%) 297.43
ftp 232 ( 0.00%) 25880 ( 0.00%) 111.55
dns 167 ( 0.00%) 29014 ( 0.00%) 173.74
bgp 97 ( 0.00%) 28275 ( 0.00%) 291.49
other 440933 ( 1.05%) 172850444 ( 0.73%) 392.01
udp6 142802 ( 0.34%) 111108822 ( 0.47%) 778.06
dns 47635 ( 0.11%) 11113876 ( 0.05%) 233.31
realaud 1 ( 0.00%) 97 ( 0.00%) 97.00
cuseeme 3 ( 0.00%) 313 ( 0.00%) 104.33
other 95163 ( 0.23%) 99994536 ( 0.42%) 1050.77
icmp6 20176 ( 0.05%) 2697948 ( 0.01%) 133.72
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 11593 ( 0.03%) 8272915 ( 0.03%) 713.61
tcpdump file: 201206101400.dump.gz (915.97 MB)