Traffic Trace Info
DumpFile: 201206251400.dump
FileSize: 3020.29MB
Id: 201206251400
StartTime: Mon Jun 25 14:00:00 2012
EndTime: Mon Jun 25 14:15:01 2012
TotalTime: 900.31 seconds
TotalCapSize: -1723.12MB CapLen: 96 bytes
# of packets: 42427838 (32830.04MB)
AvgRate: 305.88Mbps stddev:39.44M
IP flow (unique src/dst pair) Information
# of flows: 1690344 (avg. 25.10 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 4.0% 3.8% 2.2% 2.2% 1.5% 1.3% 1.3% 1.3% 1.0%
IP address Information
# of IPv4 addresses: 1322370
Top 10 bandwidth usage (bytes/total in %):
9.4% 8.1% 5.7% 5.6% 4.9% 4.6% 4.5% 4.3% 4.3% 4.2%
# of IPv6 addresses: 7904
Top 10 bandwidth usage (bytes/total in %):
18.3% 9.5% 7.2% 5.4% 4.3% 3.9% 3.1% 2.8% 2.6% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201206251400.pktlen.png)
detailed numbers
[ 32- 63]: 8233029
[ 64- 127]: 9169728
[ 128- 255]: 1067531
[ 256- 511]: 1158147
[ 512- 1023]: 1032286
[ 1024- 2047]: 21767117
Protocol Breakdown
![[protocol breakdown chart]](201206251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42427838 (100.00%) 34424797095 (100.00%) 811.37
ip 40938373 ( 96.49%) 32971579186 ( 95.78%) 805.40
tcp 32015584 ( 75.46%) 27718735381 ( 80.52%) 865.79
http(s) 15289972 ( 36.04%) 19714974962 ( 57.27%) 1289.41
http(c) 9309961 ( 21.94%) 1506226807 ( 4.38%) 161.79
squid 126217 ( 0.30%) 102805492 ( 0.30%) 814.51
smtp 81545 ( 0.19%) 13896933 ( 0.04%) 170.42
nntp 12 ( 0.00%) 732 ( 0.00%) 61.00
ftp 23449 ( 0.06%) 2554085 ( 0.01%) 108.92
pop3 4033 ( 0.01%) 2064728 ( 0.01%) 511.96
imap 2737 ( 0.01%) 2229625 ( 0.01%) 814.62
telnet 6368 ( 0.02%) 495050 ( 0.00%) 77.74
ssh 37565 ( 0.09%) 5910319 ( 0.02%) 157.34
dns 2526 ( 0.01%) 297417 ( 0.00%) 117.74
bgp 650 ( 0.00%) 137184 ( 0.00%) 211.05
napster 55 ( 0.00%) 5898 ( 0.00%) 107.24
realaud 174 ( 0.00%) 18031 ( 0.00%) 103.63
rtsp 16235 ( 0.04%) 20169540 ( 0.06%) 1242.35
icecast 8730 ( 0.02%) 6409188 ( 0.02%) 734.16
other 7105353 ( 16.75%) 6340539270 ( 18.42%) 892.36
udp 5906351 ( 13.92%) 4117524490 ( 11.96%) 697.14
dns 779887 ( 1.84%) 279936096 ( 0.81%) 358.94
rip 1 ( 0.00%) 70 ( 0.00%) 70.00
realaud 8 ( 0.00%) 1651 ( 0.00%) 206.38
halflif 89 ( 0.00%) 14219 ( 0.00%) 159.76
starcra 27 ( 0.00%) 3355 ( 0.00%) 124.26
everque 137 ( 0.00%) 21837 ( 0.00%) 159.39
unreal 6 ( 0.00%) 1167 ( 0.00%) 194.50
quake 28 ( 0.00%) 3132 ( 0.00%) 111.86
cuseeme 2 ( 0.00%) 163 ( 0.00%) 81.50
other 5126068 ( 12.08%) 3837476818 ( 11.15%) 748.62
icmp 1409199 ( 3.32%) 127934012 ( 0.37%) 90.78
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 11657 ( 0.03%) 3461846 ( 0.01%) 296.98
ip6 1536622 ( 3.62%) 992880508 ( 2.88%) 646.14
pim 26 ( 0.00%) 1560 ( 0.00%) 60.00
other 58749 ( 0.14%) 11022119 ( 0.03%) 187.61
frag 86351 ( 0.20%) 96901743 ( 0.28%) 1122.18
ip6 1489465 ( 3.51%) 1453217909 ( 4.22%) 975.66
tcp6 1370056 ( 3.23%) 1411565247 ( 4.10%) 1030.30
http(s) 1163204 ( 2.74%) 1361026309 ( 3.95%) 1170.07
http(c) 150676 ( 0.36%) 15290864 ( 0.04%) 101.48
smtp 420 ( 0.00%) 188944 ( 0.00%) 449.87
ftp 211 ( 0.00%) 21407 ( 0.00%) 101.45
pop3 100 ( 0.00%) 61273 ( 0.00%) 612.73
dns 106 ( 0.00%) 44028 ( 0.00%) 415.36
bgp 103 ( 0.00%) 33089 ( 0.00%) 321.25
other 55236 ( 0.13%) 34899333 ( 0.10%) 631.82
udp6 98377 ( 0.23%) 37737349 ( 0.11%) 383.60
dns 81886 ( 0.19%) 22043173 ( 0.06%) 269.19
realaud 3 ( 0.00%) 325 ( 0.00%) 108.33
halflif 2 ( 0.00%) 216 ( 0.00%) 108.00
other 16486 ( 0.04%) 15693635 ( 0.05%) 951.94
icmp6 19865 ( 0.05%) 2912936 ( 0.01%) 146.64
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1052 ( 0.00%) 986749 ( 0.00%) 937.97
tcpdump file: 201206251400.dump.gz (967.48 MB)