Traffic Trace Info
DumpFile: 201206181400.dump
FileSize: 2592.23MB
Id: 201206181400
StartTime: Mon Jun 18 14:00:00 2012
EndTime: Mon Jun 18 14:15:01 2012
TotalTime: 900.40 seconds
TotalCapSize: 2043.91MB CapLen: 96 bytes
# of packets: 35934144 (26846.17MB)
AvgRate: 250.10Mbps stddev:31.59M
IP flow (unique src/dst pair) Information
# of flows: 1849865 (avg. 19.43 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 2.1% 2.0% 1.7% 1.7% 1.6% 1.3% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 1374168
Top 10 bandwidth usage (bytes/total in %):
12.0% 6.5% 6.2% 5.6% 4.1% 3.8% 3.2% 2.7% 2.7% 2.4%
# of IPv6 addresses: 9383
Top 10 bandwidth usage (bytes/total in %):
20.9% 20.9% 15.7% 8.3% 7.9% 7.8% 6.8% 5.4% 5.4% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201206181400.pktlen.png)
detailed numbers
[ 32- 63]: 6642231
[ 64- 127]: 8607631
[ 128- 255]: 1055774
[ 256- 511]: 871026
[ 512- 1023]: 901655
[ 1024- 2047]: 17855827
Protocol Breakdown
![[protocol breakdown chart]](201206181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35934144 (100.00%) 28150251502 (100.00%) 783.38
ip 33672991 ( 93.71%) 25840329056 ( 91.79%) 767.39
tcp 25624230 ( 71.31%) 21982024744 ( 78.09%) 857.86
http(s) 13251096 ( 36.88%) 16577299063 ( 58.89%) 1251.01
http(c) 8833525 ( 24.58%) 2948127175 ( 10.47%) 333.74
squid 70391 ( 0.20%) 36326663 ( 0.13%) 516.07
smtp 45095 ( 0.13%) 19334029 ( 0.07%) 428.74
ftp 28399 ( 0.08%) 3098378 ( 0.01%) 109.10
pop3 6753 ( 0.02%) 4919110 ( 0.02%) 728.43
imap 1146 ( 0.00%) 353970 ( 0.00%) 308.87
telnet 10649 ( 0.03%) 812367 ( 0.00%) 76.29
ssh 148551 ( 0.41%) 16293261 ( 0.06%) 109.68
dns 1702 ( 0.00%) 223798 ( 0.00%) 131.49
bgp 633 ( 0.00%) 110980 ( 0.00%) 175.32
napster 53 ( 0.00%) 35888 ( 0.00%) 677.13
realaud 9 ( 0.00%) 3114 ( 0.00%) 346.00
rtsp 11189 ( 0.03%) 11678932 ( 0.04%) 1043.79
icecast 1247 ( 0.00%) 128481 ( 0.00%) 103.03
hotline 10 ( 0.00%) 686 ( 0.00%) 68.60
other 3213777 ( 8.94%) 2363278549 ( 8.40%) 735.36
udp 4407008 ( 12.26%) 2043834354 ( 7.26%) 463.77
dns 551906 ( 1.54%) 146648615 ( 0.52%) 265.71
realaud 18 ( 0.00%) 2947 ( 0.00%) 163.72
halflif 20 ( 0.00%) 2239 ( 0.00%) 111.95
starcra 6190 ( 0.02%) 3427345 ( 0.01%) 553.69
everque 407 ( 0.00%) 73123 ( 0.00%) 179.66
unreal 10 ( 0.00%) 1316 ( 0.00%) 131.60
quake 17 ( 0.00%) 1473 ( 0.00%) 86.65
cuseeme 12 ( 0.00%) 819 ( 0.00%) 68.25
other 3848276 ( 10.71%) 1893612241 ( 6.73%) 492.07
icmp 1569634 ( 4.37%) 162833869 ( 0.58%) 103.74
ipip 184 ( 0.00%) 19172 ( 0.00%) 104.20
ipsec 1061 ( 0.00%) 266414 ( 0.00%) 251.10
ip6 1985116 ( 5.52%) 1545949333 ( 5.49%) 778.77
pim 13 ( 0.00%) 780 ( 0.00%) 60.00
other 85745 ( 0.24%) 105400390 ( 0.37%) 1229.23
frag 1776 ( 0.00%) 2004741 ( 0.01%) 1128.80
ip6 2261153 ( 6.29%) 2309922446 ( 8.21%) 1021.57
tcp6 2003285 ( 5.57%) 2076857019 ( 7.38%) 1036.73
http(s) 1607242 ( 4.47%) 2024079441 ( 7.19%) 1259.35
http(c) 229572 ( 0.64%) 21720576 ( 0.08%) 94.61
squid 6 ( 0.00%) 476 ( 0.00%) 79.33
smtp 311 ( 0.00%) 105131 ( 0.00%) 338.04
ftp 187 ( 0.00%) 21779 ( 0.00%) 116.47
pop3 26 ( 0.00%) 10378 ( 0.00%) 399.15
ssh 4 ( 0.00%) 408 ( 0.00%) 102.00
dns 170 ( 0.00%) 48972 ( 0.00%) 288.07
bgp 101 ( 0.00%) 27796 ( 0.00%) 275.21
other 165666 ( 0.46%) 30842062 ( 0.11%) 186.17
udp6 228306 ( 0.64%) 227485918 ( 0.81%) 996.41
dns 63053 ( 0.18%) 19522139 ( 0.07%) 309.61
unreal 1 ( 0.00%) 106 ( 0.00%) 106.00
cuseeme 1 ( 0.00%) 107 ( 0.00%) 107.00
other 165251 ( 0.46%) 207963566 ( 0.74%) 1258.47
icmp6 26999 ( 0.08%) 3446717 ( 0.01%) 127.66
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2449 ( 0.01%) 2117300 ( 0.01%) 864.56
tcpdump file: 201206181400.dump.gz (830.08 MB)