Traffic Trace Info
DumpFile: 201206261400.dump
FileSize: 3265.73MB
Id: 201206261400
StartTime: Tue Jun 26 14:00:00 2012
EndTime: Tue Jun 26 14:15:00 2012
TotalTime: 900.08 seconds
TotalCapSize: -1519.71MB CapLen: 96 bytes
# of packets: 45182466 (34846.32MB)
AvgRate: 324.73Mbps stddev:41.88M
IP flow (unique src/dst pair) Information
# of flows: 3097721 (avg. 14.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 1.6% 1.5% 1.5% 1.5% 1.4% 1.4% 1.3% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 2092221
Top 10 bandwidth usage (bytes/total in %):
10.4% 10.3% 9.4% 4.7% 4.0% 3.8% 3.4% 2.2% 1.9% 1.9%
# of IPv6 addresses: 8983
Top 10 bandwidth usage (bytes/total in %):
28.8% 20.9% 10.1% 4.1% 3.5% 3.3% 3.1% 3.1% 2.5% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201206261400.pktlen.png)
detailed numbers
[ 32- 63]: 8862258
[ 64- 127]: 9643176
[ 128- 255]: 1183491
[ 256- 511]: 1362804
[ 512- 1023]: 1444695
[ 1024- 2047]: 22686042
Protocol Breakdown
![[protocol breakdown chart]](201206261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 45182466 (100.00%) 36539012596 (100.00%) 808.70
ip 42901940 ( 94.95%) 34378581915 ( 94.09%) 801.33
tcp 33374526 ( 73.87%) 29829910341 ( 81.64%) 893.79
http(s) 17086122 ( 37.82%) 23004025876 ( 62.96%) 1346.36
http(c) 11729665 ( 25.96%) 3151177864 ( 8.62%) 268.65
squid 67155 ( 0.15%) 45424506 ( 0.12%) 676.41
smtp 94256 ( 0.21%) 32806372 ( 0.09%) 348.06
nntp 4 ( 0.00%) 240 ( 0.00%) 60.00
ftp 14577 ( 0.03%) 1810066 ( 0.00%) 124.17
pop3 5869 ( 0.01%) 2962701 ( 0.01%) 504.81
imap 3106 ( 0.01%) 950964 ( 0.00%) 306.17
telnet 87748 ( 0.19%) 6506881 ( 0.02%) 74.15
ssh 22536 ( 0.05%) 6714892 ( 0.02%) 297.96
dns 2365 ( 0.01%) 393250 ( 0.00%) 166.28
bgp 670 ( 0.00%) 145718 ( 0.00%) 217.49
napster 56 ( 0.00%) 5329 ( 0.00%) 95.16
realaud 23 ( 0.00%) 2302 ( 0.00%) 100.09
rtsp 7717 ( 0.02%) 7779771 ( 0.02%) 1008.13
icecast 45191 ( 0.10%) 42210614 ( 0.12%) 934.05
hotline 256 ( 0.00%) 17529 ( 0.00%) 68.47
other 4207207 ( 9.31%) 3526975149 ( 9.65%) 838.32
udp 4335662 ( 9.60%) 3100350087 ( 8.49%) 715.08
dns 859341 ( 1.90%) 387719212 ( 1.06%) 451.18
rip 1 ( 0.00%) 68 ( 0.00%) 68.00
realaud 12 ( 0.00%) 969 ( 0.00%) 80.75
halflif 282 ( 0.00%) 23606 ( 0.00%) 83.71
starcra 27 ( 0.00%) 4742 ( 0.00%) 175.63
everque 198 ( 0.00%) 51867 ( 0.00%) 261.95
unreal 28 ( 0.00%) 8472 ( 0.00%) 302.57
quake 17 ( 0.00%) 1944 ( 0.00%) 114.35
cuseeme 4 ( 0.00%) 307 ( 0.00%) 76.75
other 3380687 ( 7.48%) 2706484867 ( 7.41%) 800.57
icmp 3360537 ( 7.44%) 271382941 ( 0.74%) 80.76
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 31490 ( 0.07%) 8855148 ( 0.02%) 281.21
ip6 1745111 ( 3.86%) 1158379920 ( 3.17%) 663.79
pim 95 ( 0.00%) 5700 ( 0.00%) 60.00
other 54334 ( 0.12%) 9678508 ( 0.03%) 178.13
frag 373810 ( 0.83%) 336515748 ( 0.92%) 900.23
ip6 2280526 ( 5.05%) 2160430681 ( 5.91%) 947.34
tcp6 2100990 ( 4.65%) 2111511875 ( 5.78%) 1005.01
http(s) 1682332 ( 3.72%) 2032565325 ( 5.56%) 1208.18
http(c) 222853 ( 0.49%) 21522896 ( 0.06%) 96.58
squid 39 ( 0.00%) 2886 ( 0.00%) 74.00
smtp 46 ( 0.00%) 17397 ( 0.00%) 378.20
ftp 1498 ( 0.00%) 147308 ( 0.00%) 98.34
dns 137 ( 0.00%) 56316 ( 0.00%) 411.07
bgp 131 ( 0.00%) 70708 ( 0.00%) 539.76
other 193954 ( 0.43%) 57129039 ( 0.16%) 294.55
udp6 146811 ( 0.32%) 43183961 ( 0.12%) 294.15
dns 86313 ( 0.19%) 22602084 ( 0.06%) 261.86
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 60497 ( 0.13%) 20581771 ( 0.06%) 340.21
icmp6 30006 ( 0.07%) 4213580 ( 0.01%) 140.42
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2604 ( 0.01%) 1505637 ( 0.00%) 578.20
tcpdump file: 201206261400.dump.gz (1021.83 MB)