Traffic Trace Info
DumpFile: 201205011400.dump
FileSize: 2948.47MB
Id: 201205011400
StartTime: Tue May 1 14:00:01 2012
EndTime: Tue May 1 14:15:01 2012
TotalTime: 900.22 seconds
TotalCapSize: -1763.74MB CapLen: 96 bytes
# of packets: 40383244 (30823.43MB)
AvgRate: 287.27Mbps stddev:59.81M
IP flow (unique src/dst pair) Information
# of flows: 2007059 (avg. 20.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.8% 7.0% 2.8% 2.4% 2.1% 2.0% 1.7% 1.6% 1.5% 1.5%
IP address Information
# of IPv4 addresses: 1448500
Top 10 bandwidth usage (bytes/total in %):
16.3% 15.3% 13.0% 10.4% 8.0% 4.8% 4.3% 3.6% 3.0% 2.5%
# of IPv6 addresses: 5570
Top 10 bandwidth usage (bytes/total in %):
65.4% 62.8% 12.8% 9.5% 9.2% 3.6% 2.7% 1.7% 1.2% 1.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201205011400.pktlen.png)
detailed numbers
[ 32- 63]: 8260953
[ 64- 127]: 8830769
[ 128- 255]: 983920
[ 256- 511]: 912297
[ 512- 1023]: 997510
[ 1024- 2047]: 20397795
Protocol Breakdown
![[protocol breakdown chart]](201205011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40383244 (100.00%) 32320711532 (100.00%) 800.35
ip 39443239 ( 97.67%) 31486447043 ( 97.42%) 798.27
tcp 32719266 ( 81.02%) 28421718709 ( 87.94%) 868.65
http(s) 16715539 ( 41.39%) 22900910192 ( 70.86%) 1370.04
http(c) 8622072 ( 21.35%) 1812139555 ( 5.61%) 210.17
squid 54237 ( 0.13%) 17465527 ( 0.05%) 322.02
smtp 44347 ( 0.11%) 17340457 ( 0.05%) 391.02
ftp 15032 ( 0.04%) 2029186 ( 0.01%) 134.99
pop3 3019 ( 0.01%) 912912 ( 0.00%) 302.39
imap 1682 ( 0.00%) 232047 ( 0.00%) 137.96
telnet 42102 ( 0.10%) 3093666 ( 0.01%) 73.48
ssh 4776 ( 0.01%) 1133956 ( 0.00%) 237.43
dns 3508 ( 0.01%) 2193424 ( 0.01%) 625.26
bgp 595 ( 0.00%) 95170 ( 0.00%) 159.95
napster 362 ( 0.00%) 23806 ( 0.00%) 65.76
realaud 55 ( 0.00%) 3940 ( 0.00%) 71.64
rtsp 6531 ( 0.02%) 7697459 ( 0.02%) 1178.60
icecast 15989 ( 0.04%) 12037960 ( 0.04%) 752.89
hotline 42 ( 0.00%) 4331 ( 0.00%) 103.12
other 7189378 ( 17.80%) 3644405121 ( 11.28%) 506.92
udp 3021623 ( 7.48%) 1415047524 ( 4.38%) 468.31
dns 486048 ( 1.20%) 115321775 ( 0.36%) 237.26
rip 2 ( 0.00%) 138 ( 0.00%) 69.00
realaud 10 ( 0.00%) 1186 ( 0.00%) 118.60
halflif 26 ( 0.00%) 2343 ( 0.00%) 90.12
starcra 26 ( 0.00%) 3102 ( 0.00%) 119.31
everque 1058 ( 0.00%) 676572 ( 0.00%) 639.48
unreal 28 ( 0.00%) 11627 ( 0.00%) 415.25
quake 94 ( 0.00%) 13106 ( 0.00%) 139.43
cuseeme 1 ( 0.00%) 70 ( 0.00%) 70.00
other 2534234 ( 6.28%) 1298980230 ( 4.02%) 512.57
icmp 1736143 ( 4.30%) 175183903 ( 0.54%) 100.90
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 4818 ( 0.01%) 1004476 ( 0.00%) 208.48
ip6 1944382 ( 4.81%) 1468594507 ( 4.54%) 755.30
pim 136 ( 0.00%) 8160 ( 0.00%) 60.00
other 16687 ( 0.04%) 4870604 ( 0.02%) 291.88
frag 481 ( 0.00%) 437432 ( 0.00%) 909.42
ip6 940005 ( 2.33%) 834264489 ( 2.58%) 887.51
tcp6 834290 ( 2.07%) 805757979 ( 2.49%) 965.80
http(s) 148798 ( 0.37%) 144765244 ( 0.45%) 972.90
http(c) 107032 ( 0.27%) 9789121 ( 0.03%) 91.46
smtp 274 ( 0.00%) 57458 ( 0.00%) 209.70
dns 404 ( 0.00%) 93729 ( 0.00%) 232.00
bgp 91 ( 0.00%) 22557 ( 0.00%) 247.88
other 577691 ( 1.43%) 651029870 ( 2.01%) 1126.95
udp6 82859 ( 0.21%) 24523073 ( 0.08%) 295.96
dns 69539 ( 0.17%) 16714763 ( 0.05%) 240.37
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
starcra 1 ( 0.00%) 109 ( 0.00%) 109.00
everque 2 ( 0.00%) 217 ( 0.00%) 108.50
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
cuseeme 1 ( 0.00%) 112 ( 0.00%) 112.00
other 13314 ( 0.03%) 7807661 ( 0.02%) 586.42
icmp6 21977 ( 0.05%) 3207612 ( 0.01%) 145.95
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 765 ( 0.00%) 760265 ( 0.00%) 993.81
tcpdump file: 201205011400.dump.gz (934.21 MB)