Traffic Trace Info
DumpFile: 201206231400.dump
FileSize: 2722.99MB
Id: 201206231400
StartTime: Sat Jun 23 14:00:01 2012
EndTime: Sat Jun 23 14:15:01 2012
TotalTime: 900.03 seconds
TotalCapSize: -1945.80MB CapLen: 96 bytes
# of packets: 37538165 (27276.07MB)
AvgRate: 254.18Mbps stddev:45.97M
IP flow (unique src/dst pair) Information
# of flows: 1893896 (avg. 19.82 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 3.3% 3.1% 2.4% 2.1% 2.1% 1.8% 1.7% 1.5% 1.1%
IP address Information
# of IPv4 addresses: 1441397
Top 10 bandwidth usage (bytes/total in %):
14.1% 11.2% 7.5% 7.5% 6.5% 3.9% 3.6% 3.5% 3.3% 3.3%
# of IPv6 addresses: 6384
Top 10 bandwidth usage (bytes/total in %):
45.9% 39.6% 7.5% 7.5% 6.3% 4.7% 3.5% 2.7% 2.3% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201206231400.pktlen.png)
detailed numbers
[ 32- 63]: 7319453
[ 64- 127]: 9347480
[ 128- 255]: 1246681
[ 256- 511]: 768314
[ 512- 1023]: 936322
[ 1024- 2047]: 17919915
Protocol Breakdown
![[protocol breakdown chart]](201206231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37538165 (100.00%) 28601032726 (100.00%) 761.92
ip 36185803 ( 96.40%) 27447777898 ( 95.97%) 758.52
tcp 28836072 ( 76.82%) 23841075452 ( 83.36%) 826.78
http(s) 12652379 ( 33.71%) 16946235280 ( 59.25%) 1339.37
http(c) 7602206 ( 20.25%) 1470620361 ( 5.14%) 193.45
squid 124336 ( 0.33%) 40532908 ( 0.14%) 325.99
smtp 41838 ( 0.11%) 8347089 ( 0.03%) 199.51
nntp 17 ( 0.00%) 1412 ( 0.00%) 83.06
ftp 16793 ( 0.04%) 1948823 ( 0.01%) 116.05
pop3 648 ( 0.00%) 138458 ( 0.00%) 213.67
imap 2127 ( 0.01%) 548182 ( 0.00%) 257.73
telnet 61172 ( 0.16%) 4551900 ( 0.02%) 74.41
ssh 2192308 ( 5.84%) 337875110 ( 1.18%) 154.12
dns 8005 ( 0.02%) 2291386 ( 0.01%) 286.24
bgp 633 ( 0.00%) 109189 ( 0.00%) 172.49
napster 97 ( 0.00%) 8647 ( 0.00%) 89.14
realaud 28 ( 0.00%) 3326 ( 0.00%) 118.79
rtsp 25 ( 0.00%) 5547 ( 0.00%) 221.88
icecast 537 ( 0.00%) 295647 ( 0.00%) 550.55
hotline 174 ( 0.00%) 11869 ( 0.00%) 68.21
other 6132742 ( 16.34%) 5027548890 ( 17.58%) 819.79
udp 4241458 ( 11.30%) 2308319156 ( 8.07%) 544.23
dns 405051 ( 1.08%) 102883337 ( 0.36%) 254.00
realaud 9 ( 0.00%) 1376 ( 0.00%) 152.89
halflif 27 ( 0.00%) 3993 ( 0.00%) 147.89
starcra 17 ( 0.00%) 2414 ( 0.00%) 142.00
everque 108 ( 0.00%) 19389 ( 0.00%) 179.53
unreal 80 ( 0.00%) 36371 ( 0.00%) 454.64
quake 14 ( 0.00%) 1861 ( 0.00%) 132.93
cuseeme 4 ( 0.00%) 634 ( 0.00%) 158.50
other 3583575 ( 9.55%) 2189834206 ( 7.66%) 611.08
icmp 1506914 ( 4.01%) 130652521 ( 0.46%) 86.70
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 6344 ( 0.02%) 1882992 ( 0.01%) 296.81
ip6 1568735 ( 4.18%) 1158782830 ( 4.05%) 738.67
pim 27 ( 0.00%) 1620 ( 0.00%) 60.00
other 26068 ( 0.07%) 7044057 ( 0.02%) 270.22
frag 989247 ( 2.64%) 753926735 ( 2.64%) 762.12
ip6 1352362 ( 3.60%) 1153254828 ( 4.03%) 852.77
tcp6 1234104 ( 3.29%) 1099812084 ( 3.85%) 891.18
http(s) 389828 ( 1.04%) 425996591 ( 1.49%) 1092.78
http(c) 113094 ( 0.30%) 10636036 ( 0.04%) 94.05
squid 51 ( 0.00%) 3774 ( 0.00%) 74.00
smtp 189 ( 0.00%) 60879 ( 0.00%) 322.11
ftp 211 ( 0.00%) 22279 ( 0.00%) 105.59
dns 73 ( 0.00%) 28711 ( 0.00%) 393.30
bgp 97 ( 0.00%) 27565 ( 0.00%) 284.18
other 730561 ( 1.95%) 663036249 ( 2.32%) 907.57
udp6 93363 ( 0.25%) 48064202 ( 0.17%) 514.81
dns 48933 ( 0.13%) 14144283 ( 0.05%) 289.05
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 1 ( 0.00%) 113 ( 0.00%) 113.00
other 44428 ( 0.12%) 33919700 ( 0.12%) 763.48
icmp6 22183 ( 0.06%) 3277175 ( 0.01%) 147.73
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2599 ( 0.01%) 2085975 ( 0.01%) 802.61
tcpdump file: 201206231400.dump.gz (886.57 MB)