Traffic Trace Info
DumpFile: 201205021400.dump
FileSize: 2795.24MB
Id: 201205021400
StartTime: Wed May 2 14:00:00 2012
EndTime: Wed May 2 14:15:00 2012
TotalTime: 899.97 seconds
TotalCapSize: -1896.08MB CapLen: 96 bytes
# of packets: 39014160 (30104.95MB)
AvgRate: 280.61Mbps stddev:47.99M
IP flow (unique src/dst pair) Information
# of flows: 2010647 (avg. 19.40 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 2.8% 2.2% 1.5% 1.5% 1.4% 1.3% 1.3% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 1482702
Top 10 bandwidth usage (bytes/total in %):
14.1% 13.4% 7.6% 7.1% 5.7% 4.0% 3.2% 2.9% 2.6% 2.4%
# of IPv6 addresses: 6015
Top 10 bandwidth usage (bytes/total in %):
46.8% 31.6% 23.5% 23.5% 12.4% 11.8% 4.0% 2.5% 2.5% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201205021400.pktlen.png)
detailed numbers
[ 32- 63]: 7732178
[ 64- 127]: 8571357
[ 128- 255]: 987735
[ 256- 511]: 819195
[ 512- 1023]: 813629
[ 1024- 2047]: 20090066
Protocol Breakdown
![[protocol breakdown chart]](201205021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39014160 (100.00%) 31567326485 (100.00%) 809.12
ip 38572629 ( 98.87%) 31329187321 ( 99.25%) 812.21
tcp 32100883 ( 82.28%) 28595538827 ( 90.59%) 890.80
http(s) 14658582 ( 37.57%) 19826652224 ( 62.81%) 1352.56
http(c) 7433708 ( 19.05%) 1148182288 ( 3.64%) 154.46
squid 22017 ( 0.06%) 13580680 ( 0.04%) 616.83
smtp 66482 ( 0.17%) 23635127 ( 0.07%) 355.51
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 319270 ( 0.82%) 458504463 ( 1.45%) 1436.10
pop3 5820 ( 0.01%) 1708683 ( 0.01%) 293.59
imap 2383 ( 0.01%) 527056 ( 0.00%) 221.17
telnet 875 ( 0.00%) 88690 ( 0.00%) 101.36
ssh 14675 ( 0.04%) 2098526 ( 0.01%) 143.00
dns 2731 ( 0.01%) 1896967 ( 0.01%) 694.61
bgp 626 ( 0.00%) 111199 ( 0.00%) 177.63
napster 134 ( 0.00%) 14718 ( 0.00%) 109.84
realaud 22 ( 0.00%) 1906 ( 0.00%) 86.64
rtsp 6535 ( 0.02%) 7696239 ( 0.02%) 1177.70
icecast 24849 ( 0.06%) 15908168 ( 0.05%) 640.19
hotline 24 ( 0.00%) 1550 ( 0.00%) 64.58
other 9542144 ( 24.46%) 7094929969 ( 22.48%) 743.54
udp 3794597 ( 9.73%) 1727076815 ( 5.47%) 455.14
dns 561430 ( 1.44%) 142061856 ( 0.45%) 253.04
realaud 8 ( 0.00%) 762 ( 0.00%) 95.25
halflif 87 ( 0.00%) 13495 ( 0.00%) 155.11
starcra 23 ( 0.00%) 2283 ( 0.00%) 99.26
everque 1070 ( 0.00%) 719893 ( 0.00%) 672.80
unreal 65 ( 0.00%) 25030 ( 0.00%) 385.08
quake 94 ( 0.00%) 12929 ( 0.00%) 137.54
cuseeme 2 ( 0.00%) 188 ( 0.00%) 94.00
other 3196977 ( 8.19%) 1582042083 ( 5.01%) 494.86
icmp 1537546 ( 3.94%) 175776023 ( 0.56%) 114.32
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2183 ( 0.01%) 955370 ( 0.00%) 437.64
ip6 1119610 ( 2.87%) 824957847 ( 2.61%) 736.83
pim 220 ( 0.00%) 13200 ( 0.00%) 60.00
other 17405 ( 0.04%) 4849969 ( 0.02%) 278.65
frag 75877 ( 0.19%) 57984365 ( 0.18%) 764.19
ip6 441531 ( 1.13%) 238139164 ( 0.75%) 539.35
tcp6 347336 ( 0.89%) 216679249 ( 0.69%) 623.83
http(s) 136395 ( 0.35%) 128494461 ( 0.41%) 942.08
http(c) 107461 ( 0.28%) 9365726 ( 0.03%) 87.15
smtp 516 ( 0.00%) 224943 ( 0.00%) 435.94
ssh 10 ( 0.00%) 1180 ( 0.00%) 118.00
dns 269 ( 0.00%) 58827 ( 0.00%) 218.69
bgp 89 ( 0.00%) 16072 ( 0.00%) 180.58
other 102596 ( 0.26%) 78518040 ( 0.25%) 765.31
udp6 72729 ( 0.19%) 17554136 ( 0.06%) 241.36
dns 70416 ( 0.18%) 17232947 ( 0.05%) 244.73
realaud 1 ( 0.00%) 118 ( 0.00%) 118.00
halflif 1 ( 0.00%) 96 ( 0.00%) 96.00
everque 3 ( 0.00%) 325 ( 0.00%) 108.33
unreal 1 ( 0.00%) 105 ( 0.00%) 105.00
cuseeme 1 ( 0.00%) 108 ( 0.00%) 108.00
other 2306 ( 0.01%) 320437 ( 0.00%) 138.96
icmp6 20470 ( 0.05%) 3007724 ( 0.01%) 146.93
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 881 ( 0.00%) 882395 ( 0.00%) 1001.58
tcpdump file: 201205021400.dump.gz (907.78 MB)