Traffic Trace Info
DumpFile: 201206161400.dump
FileSize: 2640.18MB
Id: 201206161400
StartTime: Sat Jun 16 14:00:00 2012
EndTime: Sat Jun 16 14:15:00 2012
TotalTime: 899.73 seconds
TotalCapSize: -2029.61MB CapLen: 96 bytes
# of packets: 37603391 (28620.51MB)
AvgRate: 266.86Mbps stddev:44.16M
IP flow (unique src/dst pair) Information
# of flows: 1855368 (avg. 20.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.9% 3.9% 3.2% 1.6% 1.3% 1.2% 1.1% 1.1% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 1476601
Top 10 bandwidth usage (bytes/total in %):
25.3% 16.8% 15.7% 7.1% 7.0% 6.1% 5.3% 4.1% 3.3% 1.8%
# of IPv6 addresses: 6078
Top 10 bandwidth usage (bytes/total in %):
18.5% 8.3% 7.6% 4.5% 4.1% 3.4% 2.9% 2.5% 2.5% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201206161400.pktlen.png)
detailed numbers
[ 32- 63]: 9270020
[ 64- 127]: 5887207
[ 128- 255]: 987099
[ 256- 511]: 664138
[ 512- 1023]: 2616352
[ 1024- 2047]: 18178575
Protocol Breakdown
![[protocol breakdown chart]](201206161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37603391 (100.00%) 30010777658 (100.00%) 798.09
ip 36891764 ( 98.11%) 29502450429 ( 98.31%) 799.70
tcp 31686870 ( 84.27%) 27397103633 ( 91.29%) 864.62
http(s) 16353262 ( 43.49%) 19451891623 ( 64.82%) 1189.48
http(c) 11936999 ( 31.74%) 5775564814 ( 19.24%) 483.84
squid 168127 ( 0.45%) 68557637 ( 0.23%) 407.77
smtp 49336 ( 0.13%) 19291015 ( 0.06%) 391.01
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 24901 ( 0.07%) 2693737 ( 0.01%) 108.18
pop3 4061 ( 0.01%) 1900651 ( 0.01%) 468.03
imap 1772 ( 0.00%) 192202 ( 0.00%) 108.47
telnet 808 ( 0.00%) 85400 ( 0.00%) 105.69
ssh 148872 ( 0.40%) 12189935 ( 0.04%) 81.88
dns 1087 ( 0.00%) 199496 ( 0.00%) 183.53
bgp 660 ( 0.00%) 134595 ( 0.00%) 203.93
napster 53 ( 0.00%) 3763 ( 0.00%) 71.00
realaud 57 ( 0.00%) 5173 ( 0.00%) 90.75
icecast 12342 ( 0.03%) 11529457 ( 0.04%) 934.16
hotline 160 ( 0.00%) 11027 ( 0.00%) 68.92
other 2984357 ( 7.94%) 2052851299 ( 6.84%) 687.87
udp 2543591 ( 6.76%) 991038350 ( 3.30%) 389.62
dns 347307 ( 0.92%) 86879209 ( 0.29%) 250.15
realaud 7 ( 0.00%) 537 ( 0.00%) 76.71
halflif 20 ( 0.00%) 2968 ( 0.00%) 148.40
starcra 50 ( 0.00%) 5677 ( 0.00%) 113.54
everque 81 ( 0.00%) 18942 ( 0.00%) 233.85
unreal 13 ( 0.00%) 1916 ( 0.00%) 147.38
quake 41 ( 0.00%) 9764 ( 0.00%) 238.15
cuseeme 4 ( 0.00%) 794 ( 0.00%) 198.50
other 2195574 ( 5.84%) 904034849 ( 3.01%) 411.75
icmp 1530997 ( 4.07%) 155458648 ( 0.52%) 101.54
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 109207 ( 0.29%) 81172978 ( 0.27%) 743.29
ip6 1007208 ( 2.68%) 875164538 ( 2.92%) 868.90
pim 28 ( 0.00%) 1680 ( 0.00%) 60.00
other 13679 ( 0.04%) 2491442 ( 0.01%) 182.14
frag 1563 ( 0.00%) 1347818 ( 0.00%) 862.33
ip6 711627 ( 1.89%) 508327229 ( 1.69%) 714.32
tcp6 653566 ( 1.74%) 493902002 ( 1.65%) 755.70
http(s) 409492 ( 1.09%) 459703550 ( 1.53%) 1122.62
http(c) 133482 ( 0.35%) 11984857 ( 0.04%) 89.79
smtp 132 ( 0.00%) 31506 ( 0.00%) 238.68
ftp 185 ( 0.00%) 21589 ( 0.00%) 116.70
dns 88 ( 0.00%) 26972 ( 0.00%) 306.50
bgp 98 ( 0.00%) 22409 ( 0.00%) 228.66
other 110089 ( 0.29%) 22111119 ( 0.07%) 200.85
udp6 37491 ( 0.10%) 10869827 ( 0.04%) 289.93
dns 36406 ( 0.10%) 10749839 ( 0.04%) 295.28
other 1085 ( 0.00%) 119988 ( 0.00%) 110.59
icmp6 19578 ( 0.05%) 2666276 ( 0.01%) 136.19
ip6 86 ( 0.00%) 11698 ( 0.00%) 136.02
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 875 ( 0.00%) 873210 ( 0.00%) 997.95
tcpdump file: 201206161400.dump.gz (824.31 MB)