Traffic Trace Info
DumpFile: 201206151400.dump
FileSize: 2606.45MB
Id: 201206151400
StartTime: Fri Jun 15 14:00:01 2012
EndTime: Fri Jun 15 14:15:00 2012
TotalTime: 899.53 seconds
TotalCapSize: -2036.75MB CapLen: 96 bytes
# of packets: 35861021 (29804.10MB)
AvgRate: 277.93Mbps stddev:43.13M
IP flow (unique src/dst pair) Information
# of flows: 940701 (avg. 38.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.2% 4.5% 3.4% 2.3% 2.2% 1.6% 1.3% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 551151
Top 10 bandwidth usage (bytes/total in %):
9.8% 9.2% 7.6% 7.5% 5.8% 5.4% 4.9% 4.8% 4.7% 4.2%
# of IPv6 addresses: 7696
Top 10 bandwidth usage (bytes/total in %):
20.3% 11.5% 7.3% 4.5% 3.9% 3.1% 2.9% 2.7% 2.3% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201206151400.pktlen.png)
detailed numbers
[ 32- 63]: 5338132
[ 64- 127]: 7667505
[ 128- 255]: 1078491
[ 256- 511]: 1136409
[ 512- 1023]: 892003
[ 1024- 2047]: 19748481
Protocol Breakdown
![[protocol breakdown chart]](201206151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35861021 (100.00%) 31251859039 (100.00%) 871.47
ip 34689236 ( 96.73%) 30232171035 ( 96.74%) 871.51
tcp 28998496 ( 80.86%) 27156669644 ( 86.90%) 936.49
http(s) 16344692 ( 45.58%) 22117420103 ( 70.77%) 1353.19
http(c) 8613443 ( 24.02%) 2073001396 ( 6.63%) 240.67
squid 35758 ( 0.10%) 13889881 ( 0.04%) 388.44
smtp 64952 ( 0.18%) 31903532 ( 0.10%) 491.19
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 40571 ( 0.11%) 3713730 ( 0.01%) 91.54
pop3 3353 ( 0.01%) 1444363 ( 0.00%) 430.77
imap 2647 ( 0.01%) 348646 ( 0.00%) 131.71
telnet 51554 ( 0.14%) 3819372 ( 0.01%) 74.08
ssh 27339 ( 0.08%) 5608203 ( 0.02%) 205.14
dns 1802 ( 0.01%) 266973 ( 0.00%) 148.15
bgp 665 ( 0.00%) 141762 ( 0.00%) 213.18
napster 103 ( 0.00%) 8872 ( 0.00%) 86.14
realaud 48 ( 0.00%) 3565 ( 0.00%) 74.27
rtsp 7757 ( 0.02%) 7781409 ( 0.02%) 1003.15
icecast 5054 ( 0.01%) 397120 ( 0.00%) 78.58
hotline 62 ( 0.00%) 6775 ( 0.00%) 109.27
other 3798693 ( 10.59%) 2896913762 ( 9.27%) 762.61
udp 4098977 ( 11.43%) 2225089158 ( 7.12%) 542.84
dns 579778 ( 1.62%) 158641048 ( 0.51%) 273.62
realaud 14 ( 0.00%) 2102 ( 0.00%) 150.14
halflif 32 ( 0.00%) 4393 ( 0.00%) 137.28
starcra 39 ( 0.00%) 5348 ( 0.00%) 137.13
everque 230 ( 0.00%) 39800 ( 0.00%) 173.04
unreal 63 ( 0.00%) 17736 ( 0.00%) 281.52
quake 536 ( 0.00%) 46173 ( 0.00%) 86.14
cuseeme 3 ( 0.00%) 301 ( 0.00%) 100.33
other 3490205 ( 9.73%) 2064571241 ( 6.61%) 591.53
icmp 541740 ( 1.51%) 129305427 ( 0.41%) 238.69
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 14067 ( 0.04%) 2297202 ( 0.01%) 163.30
ip6 1020545 ( 2.85%) 714676099 ( 2.29%) 700.29
pim 12 ( 0.00%) 720 ( 0.00%) 60.00
other 15214 ( 0.04%) 4113515 ( 0.01%) 270.38
frag 58934 ( 0.16%) 46013341 ( 0.15%) 780.76
ip6 1171785 ( 3.27%) 1019688004 ( 3.26%) 870.20
tcp6 1072347 ( 2.99%) 987543992 ( 3.16%) 920.92
http(s) 845422 ( 2.36%) 951917640 ( 3.05%) 1125.97
http(c) 126731 ( 0.35%) 12928935 ( 0.04%) 102.02
smtp 125 ( 0.00%) 29509 ( 0.00%) 236.07
ftp 187 ( 0.00%) 21779 ( 0.00%) 116.47
dns 116 ( 0.00%) 39517 ( 0.00%) 340.66
bgp 104 ( 0.00%) 29839 ( 0.00%) 286.91
other 99662 ( 0.28%) 22576773 ( 0.07%) 226.53
udp6 56810 ( 0.16%) 16032178 ( 0.05%) 282.21
dns 53854 ( 0.15%) 15670946 ( 0.05%) 290.99
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
other 2955 ( 0.01%) 361125 ( 0.00%) 122.21
icmp6 24551 ( 0.07%) 3028811 ( 0.01%) 123.37
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 17965 ( 0.05%) 13067767 ( 0.04%) 727.40
tcpdump file: 201206151400.dump.gz (816.35 MB)