Traffic Trace Info
DumpFile: 201206141400.dump
FileSize: 2199.92MB
Id: 201206141400
StartTime: Thu Jun 14 14:00:01 2012
EndTime: Thu Jun 14 14:15:00 2012
TotalTime: 899.60 seconds
TotalCapSize: 1742.00MB CapLen: 96 bytes
# of packets: 30009674 (22959.20MB)
AvgRate: 214.07Mbps stddev:37.78M
IP flow (unique src/dst pair) Information
# of flows: 703917 (avg. 42.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 1.9% 1.8% 1.5% 1.4% 1.4% 1.3% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 372045
Top 10 bandwidth usage (bytes/total in %):
14.8% 10.3% 8.4% 4.8% 3.8% 3.5% 2.7% 2.3% 2.3% 2.2%
# of IPv6 addresses: 7754
Top 10 bandwidth usage (bytes/total in %):
12.3% 6.3% 4.9% 4.8% 4.6% 3.5% 2.9% 2.7% 2.6% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201206141400.pktlen.png)
detailed numbers
[ 32- 63]: 4762460
[ 64- 127]: 6847909
[ 128- 255]: 1007665
[ 256- 511]: 1135016
[ 512- 1023]: 1410848
[ 1024- 2047]: 14845776
Protocol Breakdown
![[protocol breakdown chart]](201206141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30009674 (100.00%) 24074466177 (100.00%) 802.22
ip 28799458 ( 95.97%) 22993453846 ( 95.51%) 798.40
tcp 23859635 ( 79.51%) 20332057088 ( 84.45%) 852.15
http(s) 12400496 ( 41.32%) 16245581594 ( 67.48%) 1310.08
http(c) 8478851 ( 28.25%) 2227591825 ( 9.25%) 262.72
squid 129055 ( 0.43%) 111345507 ( 0.46%) 862.78
smtp 54489 ( 0.18%) 16140182 ( 0.07%) 296.21
nntp 14 ( 0.00%) 872 ( 0.00%) 62.29
ftp 26851 ( 0.09%) 3218674 ( 0.01%) 119.87
pop3 8741 ( 0.03%) 4199086 ( 0.02%) 480.39
imap 3085 ( 0.01%) 1265286 ( 0.01%) 410.14
telnet 8533 ( 0.03%) 651359 ( 0.00%) 76.33
ssh 170031 ( 0.57%) 28710332 ( 0.12%) 168.85
dns 2323 ( 0.01%) 296615 ( 0.00%) 127.69
bgp 668 ( 0.00%) 145997 ( 0.00%) 218.56
napster 104 ( 0.00%) 11482 ( 0.00%) 110.40
realaud 5 ( 0.00%) 694 ( 0.00%) 138.80
rtsp 7789 ( 0.03%) 7779210 ( 0.03%) 998.74
icecast 46036 ( 0.15%) 42292307 ( 0.18%) 918.68
hotline 474 ( 0.00%) 34417 ( 0.00%) 72.61
other 2522087 ( 8.40%) 1642791403 ( 6.82%) 651.36
udp 3098948 ( 10.33%) 1482664692 ( 6.16%) 478.44
dns 651823 ( 2.17%) 171887037 ( 0.71%) 263.70
realaud 10 ( 0.00%) 1414 ( 0.00%) 141.40
halflif 64 ( 0.00%) 13382 ( 0.00%) 209.09
starcra 35 ( 0.00%) 3706 ( 0.00%) 105.89
everque 518 ( 0.00%) 90034 ( 0.00%) 173.81
unreal 62 ( 0.00%) 30421 ( 0.00%) 490.66
quake 22 ( 0.00%) 2397 ( 0.00%) 108.95
cuseeme 1 ( 0.00%) 68 ( 0.00%) 68.00
other 2446292 ( 8.15%) 1310571669 ( 5.44%) 535.74
icmp 408850 ( 1.36%) 86787156 ( 0.36%) 212.27
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 80203 ( 0.27%) 30710354 ( 0.13%) 382.91
ip6 1337057 ( 4.46%) 1058355372 ( 4.40%) 791.56
pim 10 ( 0.00%) 600 ( 0.00%) 60.00
other 14571 ( 0.05%) 2859424 ( 0.01%) 196.24
frag 957 ( 0.00%) 1030646 ( 0.00%) 1076.96
ip6 1210216 ( 4.03%) 1081012331 ( 4.49%) 893.24
tcp6 1114800 ( 3.71%) 1054324387 ( 4.38%) 945.75
http(s) 925709 ( 3.08%) 1025572413 ( 4.26%) 1107.88
http(c) 174985 ( 0.58%) 17583311 ( 0.07%) 100.48
smtp 675 ( 0.00%) 505664 ( 0.00%) 749.13
ftp 182 ( 0.00%) 21349 ( 0.00%) 117.30
dns 72 ( 0.00%) 30381 ( 0.00%) 421.96
bgp 95 ( 0.00%) 26491 ( 0.00%) 278.85
other 13082 ( 0.04%) 10584778 ( 0.04%) 809.11
udp6 68872 ( 0.23%) 22582556 ( 0.09%) 327.89
dns 64202 ( 0.21%) 18437283 ( 0.08%) 287.18
realaud 1 ( 0.00%) 113 ( 0.00%) 113.00
quake 2 ( 0.00%) 209 ( 0.00%) 104.50
other 4667 ( 0.02%) 4144951 ( 0.02%) 888.14
icmp6 25531 ( 0.09%) 3222295 ( 0.01%) 126.21
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 899 ( 0.00%) 867601 ( 0.00%) 965.07
tcpdump file: 201206141400.dump.gz (710.87 MB)