Traffic Trace Info
DumpFile: 201206291400.dump
FileSize: 2449.31MB
Id: 201206291400
StartTime: Fri Jun 29 14:00:00 2012
EndTime: Fri Jun 29 14:15:01 2012
TotalTime: 900.59 seconds
TotalCapSize: 1937.80MB CapLen: 96 bytes
# of packets: 33521648 (23564.17MB)
AvgRate: 219.45Mbps stddev:33.35M
IP flow (unique src/dst pair) Information
# of flows: 2608407 (avg. 12.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.3% 1.7% 1.3% 1.3% 1.3% 1.3% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 1884833
Top 10 bandwidth usage (bytes/total in %):
12.2% 9.4% 7.0% 4.1% 3.6% 3.6% 3.4% 3.2% 2.5% 2.2%
# of IPv6 addresses: 7847
Top 10 bandwidth usage (bytes/total in %):
49.3% 31.1% 14.3% 5.1% 5.1% 3.7% 2.1% 2.1% 2.0% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201206291400.pktlen.png)
detailed numbers
[ 32- 63]: 6749280
[ 64- 127]: 8423100
[ 128- 255]: 978681
[ 256- 511]: 846662
[ 512- 1023]: 1515475
[ 1024- 2047]: 15008450
Protocol Breakdown
![[protocol breakdown chart]](201206291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33521648 (100.00%) 24708828150 (100.00%) 737.10
ip 31662333 ( 94.45%) 22703383087 ( 91.88%) 717.05
tcp 23681067 ( 70.64%) 19561006858 ( 79.17%) 826.02
http(s) 11954065 ( 35.66%) 15299489245 ( 61.92%) 1279.86
http(c) 7765469 ( 23.17%) 1249444145 ( 5.06%) 160.90
squid 1303787 ( 3.89%) 1577378142 ( 6.38%) 1209.84
smtp 53884 ( 0.16%) 12789900 ( 0.05%) 237.36
ftp 16178 ( 0.05%) 1862758 ( 0.01%) 115.14
pop3 6715 ( 0.02%) 2062108 ( 0.01%) 307.09
imap 1309 ( 0.00%) 150780 ( 0.00%) 115.19
telnet 9202 ( 0.03%) 703478 ( 0.00%) 76.45
ssh 304425 ( 0.91%) 42145840 ( 0.17%) 138.44
dns 6058 ( 0.02%) 510481 ( 0.00%) 84.27
bgp 504 ( 0.00%) 104866 ( 0.00%) 208.07
napster 46 ( 0.00%) 4229 ( 0.00%) 91.93
realaud 77 ( 0.00%) 19044 ( 0.00%) 247.32
rtsp 36637 ( 0.11%) 9905537 ( 0.04%) 270.37
icecast 24502 ( 0.07%) 12480172 ( 0.05%) 509.35
hotline 1 ( 0.00%) 66 ( 0.00%) 66.00
other 2198203 ( 6.56%) 1351955767 ( 5.47%) 615.03
udp 3663299 ( 10.93%) 1599052776 ( 6.47%) 436.51
dns 989349 ( 2.95%) 616393289 ( 2.49%) 623.03
realaud 9 ( 0.00%) 2221 ( 0.00%) 246.78
halflif 34 ( 0.00%) 5190 ( 0.00%) 152.65
starcra 25 ( 0.00%) 4686 ( 0.00%) 187.44
everque 189 ( 0.00%) 24157 ( 0.00%) 127.81
unreal 5 ( 0.00%) 618 ( 0.00%) 123.60
quake 71 ( 0.00%) 22674 ( 0.00%) 319.35
other 2672077 ( 7.97%) 980549945 ( 3.97%) 366.96
icmp 2140634 ( 6.39%) 201131348 ( 0.81%) 93.96
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 11048 ( 0.03%) 7071168 ( 0.03%) 640.04
ip6 2100826 ( 6.27%) 1307652368 ( 5.29%) 622.45
pim 30 ( 0.00%) 1800 ( 0.00%) 60.00
other 65244 ( 0.19%) 27447499 ( 0.11%) 420.69
frag 344383 ( 1.03%) 381707744 ( 1.54%) 1108.38
ip6 1859315 ( 5.55%) 2005445063 ( 8.12%) 1078.59
tcp6 1764772 ( 5.26%) 1981320964 ( 8.02%) 1122.71
http(s) 1465425 ( 4.37%) 1830015404 ( 7.41%) 1248.79
http(c) 187442 ( 0.56%) 20142806 ( 0.08%) 107.46
smtp 155 ( 0.00%) 28725 ( 0.00%) 185.32
ftp 250 ( 0.00%) 26318 ( 0.00%) 105.27
dns 112 ( 0.00%) 47378 ( 0.00%) 423.02
bgp 109 ( 0.00%) 33699 ( 0.00%) 309.17
other 111279 ( 0.33%) 131026634 ( 0.53%) 1177.46
udp6 63371 ( 0.19%) 19123661 ( 0.08%) 301.77
dns 60590 ( 0.18%) 17647489 ( 0.07%) 291.26
halflif 2 ( 0.00%) 214 ( 0.00%) 107.00
everque 1 ( 0.00%) 119 ( 0.00%) 119.00
other 2778 ( 0.01%) 1475839 ( 0.01%) 531.26
icmp6 30016 ( 0.09%) 3962384 ( 0.02%) 132.01
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1044 ( 0.00%) 1022798 ( 0.00%) 979.69
tcpdump file: 201206291400.dump.gz (787.24 MB)