Traffic Trace Info
DumpFile: 201206131400.dump
FileSize: 2439.41MB
Id: 201206131400
StartTime: Wed Jun 13 14:00:01 2012
EndTime: Wed Jun 13 14:15:00 2012
TotalTime: 899.42 seconds
TotalCapSize: 1934.78MB CapLen: 96 bytes
# of packets: 33070782 (26057.16MB)
AvgRate: 243.03Mbps stddev:40.18M
IP flow (unique src/dst pair) Information
# of flows: 798261 (avg. 41.43 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 3.8% 2.4% 2.2% 1.7% 1.7% 1.3% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 414690
Top 10 bandwidth usage (bytes/total in %):
10.3% 7.3% 5.9% 5.5% 4.5% 4.4% 4.1% 3.6% 2.8% 2.6%
# of IPv6 addresses: 7950
Top 10 bandwidth usage (bytes/total in %):
19.8% 11.0% 10.9% 8.8% 8.1% 7.7% 3.5% 2.5% 2.4% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201206131400.pktlen.png)
detailed numbers
[ 32- 63]: 4639929
[ 64- 127]: 8435411
[ 128- 255]: 971603
[ 256- 511]: 832391
[ 512- 1023]: 822030
[ 1024- 2047]: 17369418
Protocol Breakdown
![[protocol breakdown chart]](201206131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33070782 (100.00%) 27322916266 (100.00%) 826.20
ip 31057110 ( 93.91%) 25993268410 ( 95.13%) 836.95
tcp 25679793 ( 77.65%) 23291106290 ( 85.24%) 906.98
http(s) 14566130 ( 44.05%) 19467026016 ( 71.25%) 1336.46
http(c) 7883865 ( 23.84%) 1174482131 ( 4.30%) 148.97
squid 118219 ( 0.36%) 84039979 ( 0.31%) 710.88
smtp 114941 ( 0.35%) 88752097 ( 0.32%) 772.15
nntp 18 ( 0.00%) 1122 ( 0.00%) 62.33
ftp 24367 ( 0.07%) 3001366 ( 0.01%) 123.17
pop3 5261 ( 0.02%) 2546311 ( 0.01%) 484.00
imap 1936 ( 0.01%) 249230 ( 0.00%) 128.73
telnet 5671 ( 0.02%) 444328 ( 0.00%) 78.35
ssh 13000 ( 0.04%) 2648477 ( 0.01%) 203.73
dns 1811 ( 0.01%) 249208 ( 0.00%) 137.61
bgp 652 ( 0.00%) 133803 ( 0.00%) 205.22
napster 143 ( 0.00%) 9784 ( 0.00%) 68.42
realaud 6 ( 0.00%) 378 ( 0.00%) 63.00
rtsp 6771 ( 0.02%) 7720468 ( 0.03%) 1140.23
icecast 10940 ( 0.03%) 11456773 ( 0.04%) 1047.24
hotline 23 ( 0.00%) 3029 ( 0.00%) 131.70
other 2926039 ( 8.85%) 2448341790 ( 8.96%) 836.74
udp 3562519 ( 10.77%) 1630348239 ( 5.97%) 457.64
dns 667250 ( 2.02%) 178506405 ( 0.65%) 267.53
realaud 20 ( 0.00%) 3712 ( 0.00%) 185.60
halflif 27113 ( 0.08%) 10922130 ( 0.04%) 402.84
starcra 7 ( 0.00%) 1318 ( 0.00%) 188.29
everque 18967 ( 0.06%) 3745876 ( 0.01%) 197.49
unreal 34 ( 0.00%) 34530 ( 0.00%) 1015.59
quake 12 ( 0.00%) 1012 ( 0.00%) 84.33
cuseeme 2 ( 0.00%) 140 ( 0.00%) 70.00
other 2846985 ( 8.61%) 1436947099 ( 5.26%) 504.73
icmp 471799 ( 1.43%) 107038055 ( 0.39%) 226.87
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 86102 ( 0.26%) 57650956 ( 0.21%) 669.57
ip6 1241047 ( 3.75%) 902581654 ( 3.30%) 727.27
pim 13 ( 0.00%) 780 ( 0.00%) 60.00
other 15652 ( 0.05%) 4523166 ( 0.02%) 288.98
frag 6100 ( 0.02%) 4770910 ( 0.02%) 782.12
ip6 2013672 ( 6.09%) 1329647856 ( 4.87%) 660.31
tcp6 1886717 ( 5.71%) 1293680713 ( 4.73%) 685.68
http(s) 923725 ( 2.79%) 1065108662 ( 3.90%) 1153.06
http(c) 200969 ( 0.61%) 19810050 ( 0.07%) 98.57
smtp 256 ( 0.00%) 98375 ( 0.00%) 384.28
ftp 1023 ( 0.00%) 129092 ( 0.00%) 126.19
ssh 3610 ( 0.01%) 699404 ( 0.00%) 193.74
dns 133 ( 0.00%) 24891 ( 0.00%) 187.15
bgp 93 ( 0.00%) 27082 ( 0.00%) 291.20
other 756908 ( 2.29%) 207783157 ( 0.76%) 274.52
udp6 92272 ( 0.28%) 20884235 ( 0.08%) 226.33
dns 77401 ( 0.23%) 19042590 ( 0.07%) 246.03
halflif 4 ( 0.00%) 441 ( 0.00%) 110.25
starcra 1 ( 0.00%) 104 ( 0.00%) 104.00
everque 4 ( 0.00%) 423 ( 0.00%) 105.75
unreal 1 ( 0.00%) 119 ( 0.00%) 119.00
other 14861 ( 0.04%) 1840558 ( 0.01%) 123.85
icmp6 25174 ( 0.08%) 3289782 ( 0.01%) 130.68
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 9394 ( 0.03%) 11777498 ( 0.04%) 1253.73
tcpdump file: 201206131400.dump.gz (761.74 MB)