Traffic Trace Info
DumpFile: 201206221400.dump
FileSize: 2466.43MB
Id: 201206221400
StartTime: Fri Jun 22 14:00:00 2012
EndTime: Fri Jun 22 14:15:00 2012
TotalTime: 899.77 seconds
TotalCapSize: 1951.47MB CapLen: 96 bytes
# of packets: 33748460 (25985.42MB)
AvgRate: 242.27Mbps stddev:30.24M
IP flow (unique src/dst pair) Information
# of flows: 2057554 (avg. 16.40 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 2.4% 2.4% 2.2% 1.8% 1.8% 1.7% 1.7% 1.7% 1.6%
IP address Information
# of IPv4 addresses: 1527704
Top 10 bandwidth usage (bytes/total in %):
9.4% 8.0% 7.6% 6.2% 5.5% 5.4% 5.4% 3.2% 2.6% 2.4%
# of IPv6 addresses: 7981
Top 10 bandwidth usage (bytes/total in %):
50.3% 41.3% 4.7% 3.9% 3.3% 2.2% 2.1% 2.1% 1.8% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201206221400.pktlen.png)
detailed numbers
[ 32- 63]: 5937934
[ 64- 127]: 8127165
[ 128- 255]: 904940
[ 256- 511]: 785330
[ 512- 1023]: 841778
[ 1024- 2047]: 17151313
Protocol Breakdown
![[protocol breakdown chart]](201206221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33748460 (100.00%) 27247691947 (100.00%) 807.38
ip 32120542 ( 95.18%) 25653109137 ( 94.15%) 798.65
tcp 24732468 ( 73.28%) 21880814773 ( 80.30%) 884.70
http(s) 12001285 ( 35.56%) 15896252314 ( 58.34%) 1324.55
http(c) 7362613 ( 21.82%) 1719303380 ( 6.31%) 233.52
squid 68829 ( 0.20%) 55822753 ( 0.20%) 811.04
smtp 68690 ( 0.20%) 32896563 ( 0.12%) 478.91
nntp 8 ( 0.00%) 494 ( 0.00%) 61.75
ftp 18814 ( 0.06%) 2098378 ( 0.01%) 111.53
pop3 5854 ( 0.02%) 2928185 ( 0.01%) 500.20
imap 1982 ( 0.01%) 1262197 ( 0.00%) 636.83
telnet 5375 ( 0.02%) 460396 ( 0.00%) 85.66
ssh 288145 ( 0.85%) 21738641 ( 0.08%) 75.44
dns 5720 ( 0.02%) 2164328 ( 0.01%) 378.38
bgp 1299 ( 0.00%) 740116 ( 0.00%) 569.76
napster 37 ( 0.00%) 4266 ( 0.00%) 115.30
realaud 12 ( 0.00%) 1290 ( 0.00%) 107.50
rtsp 10176 ( 0.03%) 7949362 ( 0.03%) 781.19
icecast 242649 ( 0.72%) 240677922 ( 0.88%) 991.88
hotline 7 ( 0.00%) 762 ( 0.00%) 108.86
other 4650973 ( 13.78%) 3896513426 ( 14.30%) 837.78
udp 4220588 ( 12.51%) 2477578773 ( 9.09%) 587.02
dns 508978 ( 1.51%) 128374164 ( 0.47%) 252.22
realaud 31 ( 0.00%) 2866 ( 0.00%) 92.45
halflif 2245 ( 0.01%) 2735324 ( 0.01%) 1218.41
starcra 75 ( 0.00%) 7842 ( 0.00%) 104.56
everque 91 ( 0.00%) 17514 ( 0.00%) 192.46
unreal 26 ( 0.00%) 5727 ( 0.00%) 220.27
quake 42 ( 0.00%) 3520 ( 0.00%) 83.81
cuseeme 3 ( 0.00%) 510 ( 0.00%) 170.00
other 3529099 ( 10.46%) 2334384998 ( 8.57%) 661.47
icmp 1631837 ( 4.84%) 194939411 ( 0.72%) 119.46
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 15531 ( 0.05%) 3891042 ( 0.01%) 250.53
ip6 1496166 ( 4.43%) 1091060906 ( 4.00%) 729.24
pim 30 ( 0.00%) 1800 ( 0.00%) 60.00
other 23737 ( 0.07%) 4803162 ( 0.02%) 202.35
frag 866543 ( 2.57%) 656132082 ( 2.41%) 757.18
ip6 1627918 ( 4.82%) 1594582810 ( 5.85%) 979.52
tcp6 1536389 ( 4.55%) 1569929247 ( 5.76%) 1021.83
http(s) 1238565 ( 3.67%) 1532479768 ( 5.62%) 1237.30
http(c) 178331 ( 0.53%) 16523635 ( 0.06%) 92.66
squid 21 ( 0.00%) 1554 ( 0.00%) 74.00
smtp 138 ( 0.00%) 67669 ( 0.00%) 490.36
ftp 1524 ( 0.00%) 206904 ( 0.00%) 135.76
dns 208 ( 0.00%) 88697 ( 0.00%) 426.43
bgp 341 ( 0.00%) 267322 ( 0.00%) 783.94
other 117261 ( 0.35%) 20293698 ( 0.07%) 173.06
udp6 66074 ( 0.20%) 20104705 ( 0.07%) 304.28
dns 61579 ( 0.18%) 19387957 ( 0.07%) 314.85
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
everque 3 ( 0.00%) 284 ( 0.00%) 94.67
quake 2 ( 0.00%) 222 ( 0.00%) 111.00
other 4489 ( 0.01%) 716136 ( 0.00%) 159.53
icmp6 24235 ( 0.07%) 3453012 ( 0.01%) 142.48
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1106 ( 0.00%) 1080354 ( 0.00%) 976.81
tcpdump file: 201206221400.dump.gz (780.22 MB)