Traffic Trace Info
DumpFile: 201206241400.dump
FileSize: 1920.93MB
Id: 201206241400
StartTime: Sun Jun 24 14:00:01 2012
EndTime: Sun Jun 24 14:15:00 2012
TotalTime: 899.47 seconds
TotalCapSize: 1511.02MB CapLen: 96 bytes
# of packets: 26863055 (19964.85MB)
AvgRate: 186.14Mbps stddev:54.26M
IP flow (unique src/dst pair) Information
# of flows: 1738250 (avg. 15.45 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.1% 3.2% 1.8% 1.8% 1.6% 1.4% 1.0% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 1385452
Top 10 bandwidth usage (bytes/total in %):
24.3% 13.4% 6.8% 5.5% 5.4% 5.4% 3.6% 3.3% 3.1% 2.8%
# of IPv6 addresses: 7626
Top 10 bandwidth usage (bytes/total in %):
24.3% 20.0% 8.9% 8.7% 7.4% 5.3% 4.7% 3.1% 2.9% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201206241400.pktlen.png)
detailed numbers
[ 32- 63]: 6003306
[ 64- 127]: 5686623
[ 128- 255]: 737218
[ 256- 511]: 686600
[ 512- 1023]: 660573
[ 1024- 2047]: 13088735
Protocol Breakdown
![[protocol breakdown chart]](201206241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26863055 (100.00%) 20934659055 (100.00%) 779.31
ip 26248064 ( 97.71%) 20421588532 ( 97.55%) 778.02
tcp 20262860 ( 75.43%) 18019738193 ( 86.08%) 889.30
http(s) 10866518 ( 40.45%) 14459683252 ( 69.07%) 1330.66
http(c) 5518658 ( 20.54%) 497479457 ( 2.38%) 90.15
squid 38472 ( 0.14%) 21790015 ( 0.10%) 566.39
smtp 42715 ( 0.16%) 11744044 ( 0.06%) 274.94
ftp 30559 ( 0.11%) 2963157 ( 0.01%) 96.97
pop3 1054 ( 0.00%) 639894 ( 0.00%) 607.11
imap 1722 ( 0.01%) 437180 ( 0.00%) 253.88
telnet 3796 ( 0.01%) 306562 ( 0.00%) 80.76
ssh 73089 ( 0.27%) 8866488 ( 0.04%) 121.31
dns 6576 ( 0.02%) 3736947 ( 0.02%) 568.27
bgp 635 ( 0.00%) 111360 ( 0.00%) 175.37
napster 107 ( 0.00%) 8436 ( 0.00%) 78.84
realaud 7 ( 0.00%) 914 ( 0.00%) 130.57
rtsp 6 ( 0.00%) 378 ( 0.00%) 63.00
icecast 7911 ( 0.03%) 4209683 ( 0.02%) 532.13
hotline 81 ( 0.00%) 5658 ( 0.00%) 69.85
other 3670954 ( 13.67%) 3007754768 ( 14.37%) 819.34
udp 3057954 ( 11.38%) 1460017894 ( 6.97%) 477.45
dns 307438 ( 1.14%) 83713030 ( 0.40%) 272.29
realaud 12 ( 0.00%) 2479 ( 0.00%) 206.58
halflif 122 ( 0.00%) 20472 ( 0.00%) 167.80
starcra 61 ( 0.00%) 5626 ( 0.00%) 92.23
everque 93 ( 0.00%) 17380 ( 0.00%) 186.88
unreal 61 ( 0.00%) 22642 ( 0.00%) 371.18
quake 5 ( 0.00%) 740 ( 0.00%) 148.00
cuseeme 1 ( 0.00%) 90 ( 0.00%) 90.00
other 2740655 ( 10.20%) 1375626688 ( 6.57%) 501.93
icmp 1484656 ( 5.53%) 148814405 ( 0.71%) 100.23
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 4845 ( 0.02%) 1552830 ( 0.01%) 320.50
ip6 1410857 ( 5.25%) 784359301 ( 3.75%) 555.95
pim 26 ( 0.00%) 1560 ( 0.00%) 60.00
other 26681 ( 0.10%) 7085079 ( 0.03%) 265.55
frag 34442 ( 0.13%) 26474918 ( 0.13%) 768.68
ip6 614991 ( 2.29%) 513070523 ( 2.45%) 834.27
tcp6 544077 ( 2.03%) 493869819 ( 2.36%) 907.72
http(s) 364467 ( 1.36%) 456194338 ( 2.18%) 1251.68
http(c) 116024 ( 0.43%) 10814394 ( 0.05%) 93.21
squid 39 ( 0.00%) 2886 ( 0.00%) 74.00
smtp 186 ( 0.00%) 72345 ( 0.00%) 388.95
ftp 149 ( 0.00%) 16242 ( 0.00%) 109.01
dns 27 ( 0.00%) 5834 ( 0.00%) 216.07
bgp 95 ( 0.00%) 25121 ( 0.00%) 264.43
other 63090 ( 0.23%) 26738659 ( 0.13%) 423.82
udp6 44669 ( 0.17%) 14793361 ( 0.07%) 331.18
dns 32494 ( 0.12%) 10661623 ( 0.05%) 328.11
quake 1 ( 0.00%) 112 ( 0.00%) 112.00
other 12174 ( 0.05%) 4131626 ( 0.02%) 339.38
icmp6 25106 ( 0.09%) 3401744 ( 0.02%) 135.50
ip6 85 ( 0.00%) 11530 ( 0.00%) 135.65
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1024 ( 0.00%) 989989 ( 0.00%) 966.79
tcpdump file: 201206241400.dump.gz (601.49 MB)