Traffic Trace Info
DumpFile: 201206301400.dump
FileSize: 2113.71MB
Id: 201206301400
StartTime: Sat Jun 30 14:00:00 2012
EndTime: Sat Jun 30 14:15:01 2012
TotalTime: 900.46 seconds
TotalCapSize: 1655.69MB CapLen: 96 bytes
# of packets: 30015773 (23652.31MB)
AvgRate: 220.32Mbps stddev:62.68M
IP flow (unique src/dst pair) Information
# of flows: 1865881 (avg. 16.09 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 2.0% 1.5% 1.4% 1.4% 1.2% 1.2% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 1469816
Top 10 bandwidth usage (bytes/total in %):
21.8% 12.2% 7.6% 6.0% 5.7% 3.4% 2.3% 2.2% 2.2% 2.1%
# of IPv6 addresses: 6174
Top 10 bandwidth usage (bytes/total in %):
16.6% 16.3% 6.1% 6.0% 5.4% 4.9% 4.8% 3.5% 3.2% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201206301400.pktlen.png)
detailed numbers
[ 32- 63]: 6593263
[ 64- 127]: 5507168
[ 128- 255]: 828744
[ 256- 511]: 634390
[ 512- 1023]: 985110
[ 1024- 2047]: 15467098
Protocol Breakdown
![[protocol breakdown chart]](201206301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30015773 (100.00%) 24801239836 (100.00%) 826.27
ip 29060974 ( 96.82%) 24092494032 ( 97.14%) 829.03
tcp 22523786 ( 75.04%) 20801447407 ( 83.87%) 923.53
http(s) 12351697 ( 41.15%) 16614434168 ( 66.99%) 1345.11
http(c) 6041621 ( 20.13%) 613143230 ( 2.47%) 101.49
squid 1229573 ( 4.10%) 1403791976 ( 5.66%) 1141.69
smtp 46182 ( 0.15%) 8023033 ( 0.03%) 173.73
ftp 15042 ( 0.05%) 3000373 ( 0.01%) 199.47
pop3 1647 ( 0.01%) 529050 ( 0.00%) 321.22
imap 2104 ( 0.01%) 677989 ( 0.00%) 322.24
telnet 10048 ( 0.03%) 767211 ( 0.00%) 76.35
ssh 34288 ( 0.11%) 4555665 ( 0.02%) 132.86
dns 2800 ( 0.01%) 312970 ( 0.00%) 111.78
bgp 572 ( 0.00%) 151934 ( 0.00%) 265.62
napster 33 ( 0.00%) 5211 ( 0.00%) 157.91
realaud 82 ( 0.00%) 7946 ( 0.00%) 96.90
icecast 28951 ( 0.10%) 21363947 ( 0.09%) 737.93
hotline 19 ( 0.00%) 2512 ( 0.00%) 132.21
other 2759127 ( 9.19%) 2130680192 ( 8.59%) 772.23
udp 3782762 ( 12.60%) 2236218303 ( 9.02%) 591.16
dns 748072 ( 2.49%) 507473660 ( 2.05%) 678.38
realaud 5 ( 0.00%) 731 ( 0.00%) 146.20
halflif 52 ( 0.00%) 8866 ( 0.00%) 170.50
starcra 35 ( 0.00%) 4419 ( 0.00%) 126.26
everque 235 ( 0.00%) 31320 ( 0.00%) 133.28
unreal 25 ( 0.00%) 2747 ( 0.00%) 109.88
quake 4 ( 0.00%) 419 ( 0.00%) 104.75
cuseeme 8 ( 0.00%) 1542 ( 0.00%) 192.75
other 3032383 ( 10.10%) 1726772730 ( 6.96%) 569.44
icmp 1587222 ( 5.29%) 175690859 ( 0.71%) 110.69
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 3207 ( 0.01%) 1062426 ( 0.00%) 331.28
ip6 1137189 ( 3.79%) 870112027 ( 3.51%) 765.14
pim 22 ( 0.00%) 1320 ( 0.00%) 60.00
other 26601 ( 0.09%) 7942420 ( 0.03%) 298.58
frag 326557 ( 1.09%) 361897176 ( 1.46%) 1108.22
ip6 954799 ( 3.18%) 708745804 ( 2.86%) 742.30
tcp6 882515 ( 2.94%) 691571612 ( 2.79%) 783.64
http(s) 571024 ( 1.90%) 623617805 ( 2.51%) 1092.10
http(c) 161237 ( 0.54%) 14745344 ( 0.06%) 91.45
squid 51 ( 0.00%) 3774 ( 0.00%) 74.00
smtp 108 ( 0.00%) 31939 ( 0.00%) 295.73
ftp 170 ( 0.00%) 18079 ( 0.00%) 106.35
dns 105 ( 0.00%) 38885 ( 0.00%) 370.33
bgp 97 ( 0.00%) 26446 ( 0.00%) 272.64
other 149723 ( 0.50%) 53089340 ( 0.21%) 354.58
udp6 39821 ( 0.13%) 11864152 ( 0.05%) 297.94
dns 38287 ( 0.13%) 11400827 ( 0.05%) 297.77
realaud 1 ( 0.00%) 106 ( 0.00%) 106.00
unreal 1 ( 0.00%) 105 ( 0.00%) 105.00
quake 1 ( 0.00%) 110 ( 0.00%) 110.00
other 1531 ( 0.01%) 463004 ( 0.00%) 302.42
icmp6 31479 ( 0.10%) 4449184 ( 0.02%) 141.34
ip6 85 ( 0.00%) 11530 ( 0.00%) 135.65
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 868 ( 0.00%) 845110 ( 0.00%) 973.63
tcpdump file: 201206301400.dump.gz (679.66 MB)