Traffic Trace Info
DumpFile: 201206271400.dump
FileSize: 2440.34MB
Id: 201206271400
StartTime: Wed Jun 27 14:00:00 2012
EndTime: Wed Jun 27 14:15:00 2012
TotalTime: 899.49 seconds
TotalCapSize: 1929.26MB CapLen: 96 bytes
# of packets: 33493610 (24916.74MB)
AvgRate: 232.38Mbps stddev:42.37M
IP flow (unique src/dst pair) Information
# of flows: 2009053 (avg. 16.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.0% 2.0% 1.8% 1.8% 1.3% 1.0% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 1496446
Top 10 bandwidth usage (bytes/total in %):
16.6% 12.1% 9.6% 9.6% 3.7% 3.4% 2.3% 2.1% 2.0% 2.0%
# of IPv6 addresses: 8088
Top 10 bandwidth usage (bytes/total in %):
10.9% 5.3% 4.8% 4.4% 3.7% 3.5% 3.5% 3.2% 3.0% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201206271400.pktlen.png)
detailed numbers
[ 32- 63]: 6381179
[ 64- 127]: 8035848
[ 128- 255]: 884631
[ 256- 511]: 750857
[ 512- 1023]: 1230501
[ 1024- 2047]: 16210594
Protocol Breakdown
![[protocol breakdown chart]](201206271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33493610 (100.00%) 26127097865 (100.00%) 780.06
ip 31903732 ( 95.25%) 24842649272 ( 95.08%) 778.68
tcp 25549563 ( 76.28%) 21639061411 ( 82.82%) 846.94
http(s) 14351446 ( 42.85%) 18486992939 ( 70.76%) 1288.16
http(c) 8190460 ( 24.45%) 1243066033 ( 4.76%) 151.77
squid 56586 ( 0.17%) 18945323 ( 0.07%) 334.81
smtp 68634 ( 0.20%) 26892570 ( 0.10%) 391.83
nntp 24 ( 0.00%) 1496 ( 0.00%) 62.33
ftp 15552 ( 0.05%) 1916802 ( 0.01%) 123.25
pop3 44490 ( 0.13%) 10837294 ( 0.04%) 243.59
imap 16560 ( 0.05%) 1659541 ( 0.01%) 100.21
telnet 5353 ( 0.02%) 420636 ( 0.00%) 78.58
ssh 230716 ( 0.69%) 37122289 ( 0.14%) 160.90
dns 7561 ( 0.02%) 587132 ( 0.00%) 77.65
bgp 650 ( 0.00%) 120882 ( 0.00%) 185.97
napster 22 ( 0.00%) 3165 ( 0.00%) 143.86
realaud 14 ( 0.00%) 1769 ( 0.00%) 126.36
rtsp 1021 ( 0.00%) 66195 ( 0.00%) 64.83
icecast 55101 ( 0.16%) 47401148 ( 0.18%) 860.26
hotline 53 ( 0.00%) 4558 ( 0.00%) 86.00
other 2505319 ( 7.48%) 1763021579 ( 6.75%) 703.71
udp 2887592 ( 8.62%) 1479859292 ( 5.66%) 512.49
dns 750372 ( 2.24%) 350324591 ( 1.34%) 466.87
realaud 12 ( 0.00%) 2330 ( 0.00%) 194.17
halflif 107 ( 0.00%) 29417 ( 0.00%) 274.93
starcra 38 ( 0.00%) 5179 ( 0.00%) 136.29
everque 187 ( 0.00%) 36691 ( 0.00%) 196.21
unreal 70 ( 0.00%) 14354 ( 0.00%) 205.06
quake 33 ( 0.00%) 10983 ( 0.00%) 332.82
cuseeme 6 ( 0.00%) 1018 ( 0.00%) 169.67
other 2136635 ( 6.38%) 1129375727 ( 4.32%) 528.58
icmp 1507089 ( 4.50%) 152517570 ( 0.58%) 101.20
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 38377 ( 0.11%) 10587126 ( 0.04%) 275.87
ip6 1790307 ( 5.35%) 1418449498 ( 5.43%) 792.29
pim 9 ( 0.00%) 540 ( 0.00%) 60.00
other 130610 ( 0.39%) 142154565 ( 0.54%) 1088.39
frag 139367 ( 0.42%) 152137039 ( 0.58%) 1091.63
ip6 1589878 ( 4.75%) 1284448593 ( 4.92%) 807.89
tcp6 1417931 ( 4.23%) 1230401572 ( 4.71%) 867.74
http(s) 1048758 ( 3.13%) 1157892013 ( 4.43%) 1104.06
http(c) 208643 ( 0.62%) 20654129 ( 0.08%) 98.99
smtp 894 ( 0.00%) 372537 ( 0.00%) 416.71
ftp 147 ( 0.00%) 16122 ( 0.00%) 109.67
dns 58 ( 0.00%) 20726 ( 0.00%) 357.34
bgp 95 ( 0.00%) 27994 ( 0.00%) 294.67
other 159336 ( 0.48%) 51418051 ( 0.20%) 322.70
udp6 127204 ( 0.38%) 38082728 ( 0.15%) 299.38
dns 85323 ( 0.25%) 21754682 ( 0.08%) 254.97
unreal 1 ( 0.00%) 105 ( 0.00%) 105.00
quake 2 ( 0.00%) 213 ( 0.00%) 106.50
other 41878 ( 0.13%) 16327728 ( 0.06%) 389.89
icmp6 26507 ( 0.08%) 3820663 ( 0.01%) 144.14
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 18205 ( 0.05%) 12139414 ( 0.05%) 666.82
tcpdump file: 201206271400.dump.gz (785.41 MB)