Traffic Trace Info
DumpFile: 201206171400.dump
FileSize: 2448.40MB
Id: 201206171400
StartTime: Sun Jun 17 14:00:01 2012
EndTime: Sun Jun 17 14:15:00 2012
TotalTime: 899.79 seconds
TotalCapSize: 1921.58MB CapLen: 96 bytes
# of packets: 34525609 (27291.70MB)
AvgRate: 254.38Mbps stddev:55.75M
IP flow (unique src/dst pair) Information
# of flows: 1734991 (avg. 19.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.3% 1.9% 1.8% 1.6% 1.6% 1.5% 1.4% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 1408631
Top 10 bandwidth usage (bytes/total in %):
21.6% 6.7% 6.0% 5.4% 5.1% 4.7% 4.3% 3.7% 3.1% 3.1%
# of IPv6 addresses: 6140
Top 10 bandwidth usage (bytes/total in %):
23.5% 12.0% 10.2% 4.6% 4.4% 3.7% 3.5% 3.4% 3.0% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201206171400.pktlen.png)
detailed numbers
[ 32- 63]: 7152091
[ 64- 127]: 6899767
[ 128- 255]: 918104
[ 256- 511]: 679487
[ 512- 1023]: 734050
[ 1024- 2047]: 18142110
Protocol Breakdown
![[protocol breakdown chart]](201206171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34525609 (100.00%) 28617423870 (100.00%) 828.88
ip 33659416 ( 97.49%) 28157100553 ( 98.39%) 836.53
tcp 26256689 ( 76.05%) 24717484085 ( 86.37%) 941.38
http(s) 14403823 ( 41.72%) 19971846117 ( 69.79%) 1386.57
http(c) 6818585 ( 19.75%) 1128489272 ( 3.94%) 165.50
squid 45331 ( 0.13%) 22530840 ( 0.08%) 497.03
smtp 35335 ( 0.10%) 8034582 ( 0.03%) 227.38
ftp 21016 ( 0.06%) 2398426 ( 0.01%) 114.12
pop3 5185 ( 0.02%) 979821 ( 0.00%) 188.97
imap 9136 ( 0.03%) 7343082 ( 0.03%) 803.75
telnet 459 ( 0.00%) 60354 ( 0.00%) 131.49
ssh 114037 ( 0.33%) 12227947 ( 0.04%) 107.23
dns 1520 ( 0.00%) 244401 ( 0.00%) 160.79
bgp 614 ( 0.00%) 105890 ( 0.00%) 172.46
napster 12 ( 0.00%) 1308 ( 0.00%) 109.00
realaud 9 ( 0.00%) 933 ( 0.00%) 103.67
icecast 6929 ( 0.02%) 501281 ( 0.00%) 72.35
hotline 6 ( 0.00%) 787 ( 0.00%) 131.17
other 4794691 ( 13.89%) 3562718984 ( 12.45%) 743.05
udp 4049449 ( 11.73%) 2101394959 ( 7.34%) 518.93
dns 344110 ( 1.00%) 82328682 ( 0.29%) 239.25
realaud 5 ( 0.00%) 787 ( 0.00%) 157.40
halflif 36 ( 0.00%) 6164 ( 0.00%) 171.22
starcra 24 ( 0.00%) 3499 ( 0.00%) 145.79
everque 122 ( 0.00%) 20887 ( 0.00%) 171.20
unreal 56 ( 0.00%) 8109 ( 0.00%) 144.80
quake 8 ( 0.00%) 912 ( 0.00%) 114.00
cuseeme 4 ( 0.00%) 634 ( 0.00%) 158.50
other 3703352 ( 10.73%) 2018729327 ( 7.05%) 545.11
icmp 1471855 ( 4.26%) 139327009 ( 0.49%) 94.66
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 1122 ( 0.00%) 287388 ( 0.00%) 256.14
ip6 1865368 ( 5.40%) 1195516019 ( 4.18%) 640.90
pim 13 ( 0.00%) 780 ( 0.00%) 60.00
other 14736 ( 0.04%) 3071153 ( 0.01%) 208.41
frag 7869 ( 0.02%) 6233997 ( 0.02%) 792.22
ip6 866193 ( 2.51%) 460323317 ( 1.61%) 531.43
tcp6 808408 ( 2.34%) 447102000 ( 1.56%) 553.06
http(s) 339828 ( 0.98%) 387889941 ( 1.36%) 1141.43
http(c) 199694 ( 0.58%) 16562287 ( 0.06%) 82.94
smtp 115 ( 0.00%) 36112 ( 0.00%) 314.02
ftp 187 ( 0.00%) 21778 ( 0.00%) 116.46
pop3 11 ( 0.00%) 981 ( 0.00%) 89.18
dns 27 ( 0.00%) 11742 ( 0.00%) 434.89
bgp 98 ( 0.00%) 29262 ( 0.00%) 298.59
other 268448 ( 0.78%) 42549897 ( 0.15%) 158.50
udp6 34962 ( 0.10%) 10027145 ( 0.04%) 286.80
dns 32311 ( 0.09%) 9469330 ( 0.03%) 293.07
everque 3 ( 0.00%) 286 ( 0.00%) 95.33
quake 1 ( 0.00%) 113 ( 0.00%) 113.00
other 2647 ( 0.01%) 557416 ( 0.00%) 210.58
icmp6 22281 ( 0.06%) 2777230 ( 0.01%) 124.65
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 427 ( 0.00%) 401282 ( 0.00%) 939.77
tcpdump file: 201206171400.dump.gz (748.66 MB)