Traffic Trace Info
DumpFile: 201206211400.dump
FileSize: 2698.91MB
Id: 201206211400
StartTime: Thu Jun 21 14:00:00 2012
EndTime: Thu Jun 21 14:15:01 2012
TotalTime: 900.52 seconds
TotalCapSize: -1957.44MB CapLen: 96 bytes
# of packets: 36721986 (25389.27MB)
AvgRate: 236.50Mbps stddev:40.38M
IP flow (unique src/dst pair) Information
# of flows: 2285139 (avg. 16.07 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.5% 2.0% 1.8% 1.7% 1.6% 1.3% 1.3% 1.3% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 1577131
Top 10 bandwidth usage (bytes/total in %):
11.4% 9.3% 8.7% 6.8% 6.5% 6.3% 3.4% 2.5% 2.5% 2.1%
# of IPv6 addresses: 8190
Top 10 bandwidth usage (bytes/total in %):
31.6% 23.3% 8.7% 8.5% 8.5% 6.1% 5.2% 4.8% 2.8% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201206211400.pktlen.png)
detailed numbers
[ 32- 63]: 7320752
[ 64- 127]: 10168014
[ 128- 255]: 986467
[ 256- 511]: 732136
[ 512- 1023]: 1024689
[ 1024- 2047]: 16489928
Protocol Breakdown
![[protocol breakdown chart]](201206211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36721986 (100.00%) 26622583740 (100.00%) 724.98
ip 34703205 ( 94.50%) 24373068840 ( 91.55%) 702.33
tcp 27944706 ( 76.10%) 21762078968 ( 81.74%) 778.75
http(s) 13874478 ( 37.78%) 17842918694 ( 67.02%) 1286.02
http(c) 9841645 ( 26.80%) 1503365503 ( 5.65%) 152.76
squid 38145 ( 0.10%) 19287295 ( 0.07%) 505.63
smtp 49988 ( 0.14%) 18334462 ( 0.07%) 366.78
ftp 148831 ( 0.41%) 10088942 ( 0.04%) 67.79
pop3 5423 ( 0.01%) 3365286 ( 0.01%) 620.56
imap 1549 ( 0.00%) 473462 ( 0.00%) 305.66
telnet 2340 ( 0.01%) 196046 ( 0.00%) 83.78
ssh 1161211 ( 3.16%) 211644909 ( 0.79%) 182.26
dns 4292 ( 0.01%) 427467 ( 0.00%) 99.60
bgp 719 ( 0.00%) 173021 ( 0.00%) 240.64
napster 51 ( 0.00%) 17518 ( 0.00%) 343.49
realaud 93 ( 0.00%) 6712 ( 0.00%) 72.17
rtsp 8749 ( 0.02%) 7858337 ( 0.03%) 898.20
icecast 6830 ( 0.02%) 3232703 ( 0.01%) 473.31
hotline 7 ( 0.00%) 458 ( 0.00%) 65.43
other 2800330 ( 7.63%) 2140686653 ( 8.04%) 764.44
udp 3713715 ( 10.11%) 1614188851 ( 6.06%) 434.66
dns 677239 ( 1.84%) 183940984 ( 0.69%) 271.60
rip 4 ( 0.00%) 288 ( 0.00%) 72.00
realaud 11 ( 0.00%) 1691 ( 0.00%) 153.73
halflif 107 ( 0.00%) 17911 ( 0.00%) 167.39
starcra 51 ( 0.00%) 6764 ( 0.00%) 132.63
everque 210 ( 0.00%) 41694 ( 0.00%) 198.54
unreal 124 ( 0.00%) 28781 ( 0.00%) 232.10
quake 15 ( 0.00%) 1746 ( 0.00%) 116.40
cuseeme 3 ( 0.00%) 279 ( 0.00%) 93.00
other 3016392 ( 8.21%) 1428945892 ( 5.37%) 473.73
icmp 1495384 ( 4.07%) 151566238 ( 0.57%) 101.36
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 15140 ( 0.04%) 2786968 ( 0.01%) 184.08
ip6 1511777 ( 4.12%) 837970250 ( 3.15%) 554.29
pim 27 ( 0.00%) 1620 ( 0.00%) 60.00
other 22271 ( 0.06%) 4456675 ( 0.02%) 200.11
frag 39773 ( 0.11%) 30453820 ( 0.11%) 765.69
ip6 2018781 ( 5.50%) 2249514900 ( 8.45%) 1114.29
tcp6 1914641 ( 5.21%) 2214107150 ( 8.32%) 1156.41
http(s) 1723532 ( 4.69%) 2184273695 ( 8.20%) 1267.32
http(c) 172477 ( 0.47%) 16675487 ( 0.06%) 96.68
smtp 172 ( 0.00%) 74573 ( 0.00%) 433.56
ftp 1547 ( 0.00%) 209534 ( 0.00%) 135.45
dns 80 ( 0.00%) 28214 ( 0.00%) 352.68
bgp 93 ( 0.00%) 26410 ( 0.00%) 283.98
other 16740 ( 0.05%) 12819237 ( 0.05%) 765.78
udp6 78541 ( 0.21%) 30454019 ( 0.11%) 387.75
dns 64104 ( 0.17%) 19556350 ( 0.07%) 305.07
unreal 1 ( 0.00%) 110 ( 0.00%) 110.00
cuseeme 1 ( 0.00%) 118 ( 0.00%) 118.00
other 14435 ( 0.04%) 10897441 ( 0.04%) 754.93
icmp6 23723 ( 0.06%) 3299207 ( 0.01%) 139.07
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1761 ( 0.00%) 1638864 ( 0.01%) 930.64
tcpdump file: 201206211400.dump.gz (869.81 MB)