Traffic Trace Info
DumpFile: 201206281400.dump
FileSize: 3021.28MB
Id: 201206281400
StartTime: Thu Jun 28 14:00:01 2012
EndTime: Thu Jun 28 14:15:00 2012
TotalTime: 899.72 seconds
TotalCapSize: -1700.58MB CapLen: 96 bytes
# of packets: 41015719 (31802.88MB)
AvgRate: 296.53Mbps stddev:55.35M
IP flow (unique src/dst pair) Information
# of flows: 1879344 (avg. 21.82 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 2.3% 1.6% 1.5% 1.4% 1.3% 1.3% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 1431170
Top 10 bandwidth usage (bytes/total in %):
10.7% 7.3% 6.2% 5.7% 5.7% 5.2% 5.2% 4.9% 4.5% 3.5%
# of IPv6 addresses: 8832
Top 10 bandwidth usage (bytes/total in %):
18.3% 11.6% 6.9% 6.9% 6.0% 4.2% 3.8% 3.0% 2.9% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201206281400.pktlen.png)
detailed numbers
[ 32- 63]: 7292015
[ 64- 127]: 9230911
[ 128- 255]: 928027
[ 256- 511]: 1210138
[ 512- 1023]: 1357475
[ 1024- 2047]: 20997153
Protocol Breakdown
![[protocol breakdown chart]](201206281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41015719 (100.00%) 33347739614 (100.00%) 813.05
ip 38990803 ( 95.06%) 31544688684 ( 94.59%) 809.03
tcp 32034320 ( 78.10%) 27806778475 ( 83.38%) 868.03
http(s) 16923455 ( 41.26%) 22220658070 ( 66.63%) 1313.01
http(c) 11123322 ( 27.12%) 2541655891 ( 7.62%) 228.50
squid 55549 ( 0.14%) 26057592 ( 0.08%) 469.09
smtp 59523 ( 0.15%) 20088800 ( 0.06%) 337.50
ftp 14607 ( 0.04%) 1780022 ( 0.01%) 121.86
pop3 8052 ( 0.02%) 6131095 ( 0.02%) 761.44
imap 1896 ( 0.00%) 255636 ( 0.00%) 134.83
telnet 3483 ( 0.01%) 283128 ( 0.00%) 81.29
ssh 13244 ( 0.03%) 3842272 ( 0.01%) 290.11
dns 5655 ( 0.01%) 495963 ( 0.00%) 87.70
bgp 4911 ( 0.01%) 438585 ( 0.00%) 89.31
napster 14 ( 0.00%) 1371 ( 0.00%) 97.93
realaud 19 ( 0.00%) 1616 ( 0.00%) 85.05
rtsp 1555 ( 0.00%) 107376 ( 0.00%) 69.05
icecast 38202 ( 0.09%) 31022598 ( 0.09%) 812.07
hotline 89 ( 0.00%) 6209 ( 0.00%) 69.76
other 3780744 ( 9.22%) 2953952251 ( 8.86%) 781.32
udp 3048999 ( 7.43%) 1673319301 ( 5.02%) 548.81
dns 970392 ( 2.37%) 598130985 ( 1.79%) 616.38
realaud 16 ( 0.00%) 2327 ( 0.00%) 145.44
halflif 168 ( 0.00%) 22987 ( 0.00%) 136.83
starcra 30 ( 0.00%) 5532 ( 0.00%) 184.40
everque 159 ( 0.00%) 23591 ( 0.00%) 148.37
unreal 17 ( 0.00%) 3643 ( 0.00%) 214.29
quake 20 ( 0.00%) 2087 ( 0.00%) 104.35
cuseeme 6 ( 0.00%) 601 ( 0.00%) 100.17
other 2078021 ( 5.07%) 1075040058 ( 3.22%) 517.34
icmp 1581679 ( 3.86%) 171980202 ( 0.52%) 108.73
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 32947 ( 0.08%) 7696530 ( 0.02%) 233.60
ip6 2262019 ( 5.52%) 1878195940 ( 5.63%) 830.32
pim 11 ( 0.00%) 660 ( 0.00%) 60.00
other 30643 ( 0.07%) 6698306 ( 0.02%) 218.59
frag 326900 ( 0.80%) 356947840 ( 1.07%) 1091.92
ip6 2024916 ( 4.94%) 1803050930 ( 5.41%) 890.43
tcp6 1790237 ( 4.36%) 1661646331 ( 4.98%) 928.17
http(s) 1369282 ( 3.34%) 1569129461 ( 4.71%) 1145.95
http(c) 240251 ( 0.59%) 25019614 ( 0.08%) 104.14
squid 39 ( 0.00%) 2886 ( 0.00%) 74.00
smtp 182 ( 0.00%) 65147 ( 0.00%) 357.95
ftp 173 ( 0.00%) 18337 ( 0.00%) 105.99
pop3 1583 ( 0.00%) 2255641 ( 0.01%) 1424.92
dns 87 ( 0.00%) 35612 ( 0.00%) 409.33
bgp 86 ( 0.00%) 27220 ( 0.00%) 316.51
other 178554 ( 0.44%) 65092413 ( 0.20%) 364.55
udp6 202393 ( 0.49%) 135332701 ( 0.41%) 668.66
dns 86721 ( 0.21%) 22386637 ( 0.07%) 258.15
everque 1 ( 0.00%) 104 ( 0.00%) 104.00
quake 1 ( 0.00%) 144 ( 0.00%) 144.00
other 115670 ( 0.28%) 112945816 ( 0.34%) 976.45
icmp6 26891 ( 0.07%) 3611559 ( 0.01%) 134.30
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5282 ( 0.01%) 2444965 ( 0.01%) 462.89
tcpdump file: 201206281400.dump.gz (954.81 MB)