Traffic Trace Info
DumpFile: 201206111400.dump
FileSize: 3648.08MB
Id: 201206111400
StartTime: Mon Jun 11 14:00:01 2012
EndTime: Mon Jun 11 14:15:00 2012
TotalTime: 899.56 seconds
TotalCapSize: -1257.72MB CapLen: 96 bytes
# of packets: 53070094 (30966.17MB)
AvgRate: 288.81Mbps stddev:37.82M
IP flow (unique src/dst pair) Information
# of flows: 11199485 (avg. 4.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 4.0% 3.9% 3.1% 2.2% 2.2% 2.2% 2.2% 1.5% 1.1%
IP address Information
# of IPv4 addresses: 8736032
Top 10 bandwidth usage (bytes/total in %):
15.9% 5.8% 5.4% 4.3% 4.3% 4.2% 4.2% 4.2% 3.3% 3.2%
# of IPv6 addresses: 8361
Top 10 bandwidth usage (bytes/total in %):
29.4% 11.1% 5.7% 5.0% 4.1% 4.0% 3.7% 3.6% 2.9% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201206111400.pktlen.png)
detailed numbers
[ 32- 63]: 20234700
[ 64- 127]: 9821914
[ 128- 255]: 1225406
[ 256- 511]: 904612
[ 512- 1023]: 910580
[ 1024- 2047]: 19972882
Protocol Breakdown
![[protocol breakdown chart]](201206111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 53070094 (100.00%) 32470384909 (100.00%) 611.84
ip 51245126 ( 96.56%) 31011431540 ( 95.51%) 605.16
tcp 30345115 ( 57.18%) 26872191371 ( 82.76%) 885.55
http(s) 16251530 ( 30.62%) 21620016952 ( 66.58%) 1330.34
http(c) 9224355 ( 17.38%) 1936094960 ( 5.96%) 209.89
squid 145476 ( 0.27%) 101184376 ( 0.31%) 695.54
smtp 60131 ( 0.11%) 26285126 ( 0.08%) 437.13
nntp 3 ( 0.00%) 180 ( 0.00%) 60.00
ftp 21592 ( 0.04%) 2824146 ( 0.01%) 130.80
pop3 13720 ( 0.03%) 10221862 ( 0.03%) 745.03
imap 2316 ( 0.00%) 420254 ( 0.00%) 181.46
telnet 6973 ( 0.01%) 528353 ( 0.00%) 75.77
ssh 187895 ( 0.35%) 133879951 ( 0.41%) 712.53
dns 3267 ( 0.01%) 1997984 ( 0.01%) 611.57
bgp 651 ( 0.00%) 121255 ( 0.00%) 186.26
napster 203 ( 0.00%) 65330 ( 0.00%) 321.82
realaud 41 ( 0.00%) 3183 ( 0.00%) 77.63
rtsp 10253 ( 0.02%) 11576344 ( 0.04%) 1129.07
icecast 46694 ( 0.09%) 40495757 ( 0.12%) 867.26
hotline 12 ( 0.00%) 1590 ( 0.00%) 132.50
other 4370003 ( 8.23%) 2986473768 ( 9.20%) 683.40
udp 3191197 ( 6.01%) 1688747707 ( 5.20%) 529.19
dns 803326 ( 1.51%) 252037179 ( 0.78%) 313.74
realaud 35 ( 0.00%) 6604 ( 0.00%) 188.69
halflif 60 ( 0.00%) 8374 ( 0.00%) 139.57
starcra 41 ( 0.00%) 5744 ( 0.00%) 140.10
everque 387 ( 0.00%) 56001 ( 0.00%) 144.71
unreal 16 ( 0.00%) 3109 ( 0.00%) 194.31
quake 20 ( 0.00%) 1861 ( 0.00%) 93.05
cuseeme 3 ( 0.00%) 223 ( 0.00%) 74.33
other 2387219 ( 4.50%) 1436561416 ( 4.42%) 601.77
icmp 15975976 ( 30.10%) 1019393591 ( 3.14%) 63.81
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 1660 ( 0.00%) 529896 ( 0.00%) 319.21
ip6 1716135 ( 3.23%) 1425969430 ( 4.39%) 830.92
pim 10 ( 0.00%) 600 ( 0.00%) 60.00
other 14849 ( 0.03%) 4579785 ( 0.01%) 308.42
frag 56196 ( 0.11%) 70630286 ( 0.22%) 1256.86
ip6 1824968 ( 3.44%) 1458953369 ( 4.49%) 799.44
tcp6 1658588 ( 3.13%) 1409376270 ( 4.34%) 849.74
http(s) 1225547 ( 2.31%) 1326288316 ( 4.08%) 1082.20
http(c) 155137 ( 0.29%) 23478325 ( 0.07%) 151.34
smtp 212 ( 0.00%) 116451 ( 0.00%) 549.30
ftp 229 ( 0.00%) 25594 ( 0.00%) 111.76
pop3 26 ( 0.00%) 11060 ( 0.00%) 425.38
dns 274 ( 0.00%) 53762 ( 0.00%) 196.21
bgp 97 ( 0.00%) 26748 ( 0.00%) 275.75
other 277066 ( 0.52%) 59376014 ( 0.18%) 214.30
udp6 138328 ( 0.26%) 45116647 ( 0.14%) 326.16
dns 110036 ( 0.21%) 22889774 ( 0.07%) 208.02
realaud 1 ( 0.00%) 103 ( 0.00%) 103.00
starcra 1 ( 0.00%) 106 ( 0.00%) 106.00
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 5 ( 0.00%) 533 ( 0.00%) 106.60
other 28284 ( 0.05%) 22226024 ( 0.07%) 785.82
icmp6 26950 ( 0.05%) 3480827 ( 0.01%) 129.16
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 987 ( 0.00%) 963965 ( 0.00%) 976.66
tcpdump file: 201206111400.dump.gz (1192.87 MB)