Traffic Trace Info
DumpFile: 201205031400.dump
FileSize: 2119.35MB
Id: 201205031400
StartTime: Thu May 3 14:00:00 2012
EndTime: Thu May 3 14:15:00 2012
TotalTime: 900.26 seconds
TotalCapSize: 1666.17MB CapLen: 96 bytes
# of packets: 29698877 (20166.86MB)
AvgRate: 187.92Mbps stddev:39.47M
IP flow (unique src/dst pair) Information
# of flows: 1716544 (avg. 17.30 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 3.2% 3.0% 1.9% 1.7% 1.4% 1.0% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 1346128
Top 10 bandwidth usage (bytes/total in %):
19.9% 10.2% 8.5% 6.4% 4.5% 3.7% 3.6% 3.4% 3.2% 3.1%
# of IPv6 addresses: 5414
Top 10 bandwidth usage (bytes/total in %):
60.6% 32.0% 23.5% 15.9% 7.2% 6.1% 4.9% 3.2% 2.9% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201205031400.pktlen.png)
detailed numbers
[ 32- 63]: 7023838
[ 64- 127]: 7509434
[ 128- 255]: 863475
[ 256- 511]: 554295
[ 512- 1023]: 573810
[ 1024- 2047]: 13174025
Protocol Breakdown
![[protocol breakdown chart]](201205031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29698877 (100.00%) 21146481083 (100.00%) 712.03
ip 29191644 ( 98.29%) 20816962959 ( 98.44%) 713.11
tcp 23392898 ( 78.77%) 18479586279 ( 87.39%) 789.97
http(s) 10956747 ( 36.89%) 15161743830 ( 71.70%) 1383.78
http(c) 7667498 ( 25.82%) 926532065 ( 4.38%) 120.84
squid 20791 ( 0.07%) 11299437 ( 0.05%) 543.48
smtp 55673 ( 0.19%) 11196109 ( 0.05%) 201.10
ftp 54736 ( 0.18%) 4520060 ( 0.02%) 82.58
pop3 486241 ( 1.64%) 32254807 ( 0.15%) 66.34
imap 2294 ( 0.01%) 343004 ( 0.00%) 149.52
telnet 5305 ( 0.02%) 398050 ( 0.00%) 75.03
ssh 34048 ( 0.11%) 7524978 ( 0.04%) 221.01
dns 1264 ( 0.00%) 231153 ( 0.00%) 182.87
bgp 669 ( 0.00%) 146927 ( 0.00%) 219.62
napster 134 ( 0.00%) 9271 ( 0.00%) 69.19
realaud 5 ( 0.00%) 312 ( 0.00%) 62.40
rtsp 8 ( 0.00%) 480 ( 0.00%) 60.00
icecast 23294 ( 0.08%) 19891610 ( 0.09%) 853.94
hotline 42 ( 0.00%) 3317 ( 0.00%) 78.98
other 4084149 ( 13.75%) 2303490869 ( 10.89%) 564.01
udp 2911369 ( 9.80%) 1076079550 ( 5.09%) 369.61
dns 427247 ( 1.44%) 112511184 ( 0.53%) 263.34
rip 1 ( 0.00%) 70 ( 0.00%) 70.00
realaud 1 ( 0.00%) 93 ( 0.00%) 93.00
halflif 11 ( 0.00%) 1254 ( 0.00%) 114.00
starcra 62 ( 0.00%) 7536 ( 0.00%) 121.55
everque 115 ( 0.00%) 25538 ( 0.00%) 222.07
unreal 803 ( 0.00%) 90728 ( 0.00%) 112.99
quake 92 ( 0.00%) 14137 ( 0.00%) 153.66
cuseeme 11 ( 0.00%) 1849 ( 0.00%) 168.09
other 2482785 ( 8.36%) 963360214 ( 4.56%) 388.02
icmp 1442125 ( 4.86%) 155284384 ( 0.73%) 107.68
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1153 ( 0.00%) 434438 ( 0.00%) 376.79
ip6 1425720 ( 4.80%) 1102283854 ( 5.21%) 773.14
pim 158 ( 0.00%) 9480 ( 0.00%) 60.00
other 18036 ( 0.06%) 3265704 ( 0.02%) 181.07
frag 2163 ( 0.01%) 1695979 ( 0.01%) 784.09
ip6 507233 ( 1.71%) 329518124 ( 1.56%) 649.64
tcp6 415287 ( 1.40%) 300780675 ( 1.42%) 724.27
http(s) 192594 ( 0.65%) 210773563 ( 1.00%) 1094.39
http(c) 106527 ( 0.36%) 9219345 ( 0.04%) 86.54
smtp 161 ( 0.00%) 84228 ( 0.00%) 523.16
dns 315 ( 0.00%) 68442 ( 0.00%) 217.28
bgp 100 ( 0.00%) 24082 ( 0.00%) 240.82
other 115590 ( 0.39%) 80611015 ( 0.38%) 697.39
udp6 68488 ( 0.23%) 24767288 ( 0.12%) 361.63
dns 52384 ( 0.18%) 11874143 ( 0.06%) 226.67
everque 4 ( 0.00%) 434 ( 0.00%) 108.50
unreal 1 ( 0.00%) 102 ( 0.00%) 102.00
cuseeme 1 ( 0.00%) 106 ( 0.00%) 106.00
other 16098 ( 0.05%) 12892503 ( 0.06%) 800.88
icmp6 22851 ( 0.08%) 3445153 ( 0.02%) 150.77
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 492 ( 0.00%) 509380 ( 0.00%) 1035.33
tcpdump file: 201205031400.dump.gz (693.50 MB)