Traffic Trace Info
DumpFile: 201205051400.dump
FileSize: 2137.42MB
Id: 201205051400
StartTime: Sat May 5 14:00:00 2012
EndTime: Sat May 5 14:15:00 2012
TotalTime: 900.30 seconds
TotalCapSize: 1680.72MB CapLen: 96 bytes
# of packets: 29929362 (21247.53MB)
AvgRate: 197.95Mbps stddev:47.31M
IP flow (unique src/dst pair) Information
# of flows: 1820141 (avg. 16.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 1.9% 1.3% 1.2% 1.2% 1.0% 1.0% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 1410552
Top 10 bandwidth usage (bytes/total in %):
34.9% 8.3% 7.2% 4.1% 3.4% 3.4% 2.9% 2.1% 2.0% 1.7%
# of IPv6 addresses: 4800
Top 10 bandwidth usage (bytes/total in %):
75.4% 71.9% 7.0% 7.0% 4.9% 4.9% 4.7% 4.5% 4.0% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201205051400.pktlen.png)
detailed numbers
[ 32- 63]: 7276661
[ 64- 127]: 6608054
[ 128- 255]: 812624
[ 256- 511]: 472033
[ 512- 1023]: 689795
[ 1024- 2047]: 14070195
Protocol Breakdown
![[protocol breakdown chart]](201205051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29929362 (100.00%) 22279650112 (100.00%) 744.41
ip 29166917 ( 97.45%) 21624484892 ( 97.06%) 741.40
tcp 21637252 ( 72.29%) 17816102226 ( 79.97%) 823.40
http(s) 11028721 ( 36.85%) 15063939260 ( 67.61%) 1365.88
http(c) 6286900 ( 21.01%) 627986474 ( 2.82%) 99.89
squid 47533 ( 0.16%) 37316522 ( 0.17%) 785.07
smtp 35628 ( 0.12%) 5199267 ( 0.02%) 145.93
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 5489 ( 0.02%) 546753 ( 0.00%) 99.61
pop3 754 ( 0.00%) 150241 ( 0.00%) 199.26
imap 1692 ( 0.01%) 200695 ( 0.00%) 118.61
telnet 30158 ( 0.10%) 2245824 ( 0.01%) 74.47
ssh 15405 ( 0.05%) 4091722 ( 0.02%) 265.61
dns 1944 ( 0.01%) 242266 ( 0.00%) 124.62
bgp 638 ( 0.00%) 123886 ( 0.00%) 194.18
napster 52 ( 0.00%) 3350 ( 0.00%) 64.42
realaud 16 ( 0.00%) 1648 ( 0.00%) 103.00
icecast 5504 ( 0.02%) 3965369 ( 0.02%) 720.45
hotline 3134 ( 0.01%) 1722976 ( 0.01%) 549.77
other 4173678 ( 13.95%) 2068365599 ( 9.28%) 495.57
udp 3825346 ( 12.78%) 1815462171 ( 8.15%) 474.59
dns 365637 ( 1.22%) 90252234 ( 0.41%) 246.84
rip 45 ( 0.00%) 3234 ( 0.00%) 71.87
realaud 3 ( 0.00%) 248 ( 0.00%) 82.67
halflif 141 ( 0.00%) 19829 ( 0.00%) 140.63
starcra 14 ( 0.00%) 2078 ( 0.00%) 148.43
everque 473 ( 0.00%) 261098 ( 0.00%) 552.00
unreal 56 ( 0.00%) 17984 ( 0.00%) 321.14
quake 95 ( 0.00%) 15125 ( 0.00%) 159.21
cuseeme 7 ( 0.00%) 1224 ( 0.00%) 174.86
other 3455159 ( 11.54%) 1724618809 ( 7.74%) 499.14
icmp 1468886 ( 4.91%) 168076342 ( 0.75%) 114.42
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2667 ( 0.01%) 821202 ( 0.00%) 307.91
ip6 2220047 ( 7.42%) 1821761217 ( 8.18%) 820.60
pim 147 ( 0.00%) 8820 ( 0.00%) 60.00
other 12387 ( 0.04%) 2233644 ( 0.01%) 180.32
frag 9375 ( 0.03%) 7622327 ( 0.03%) 813.05
ip6 762445 ( 2.55%) 655165220 ( 2.94%) 859.30
tcp6 661203 ( 2.21%) 607515596 ( 2.73%) 918.80
http(s) 41825 ( 0.14%) 36490526 ( 0.16%) 872.46
http(c) 70080 ( 0.23%) 6274340 ( 0.03%) 89.53
smtp 48 ( 0.00%) 21580 ( 0.00%) 449.58
dns 297 ( 0.00%) 64066 ( 0.00%) 215.71
bgp 88 ( 0.00%) 15222 ( 0.00%) 172.98
other 548865 ( 1.83%) 564649862 ( 2.53%) 1028.76
udp6 77893 ( 0.26%) 43679069 ( 0.20%) 560.76
dns 44947 ( 0.15%) 10235628 ( 0.05%) 227.73
realaud 1 ( 0.00%) 119 ( 0.00%) 119.00
halflif 2 ( 0.00%) 208 ( 0.00%) 104.00
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
other 32942 ( 0.11%) 33443006 ( 0.15%) 1015.21
icmp6 22655 ( 0.08%) 3348944 ( 0.02%) 147.82
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 580 ( 0.00%) 606119 ( 0.00%) 1045.03
tcpdump file: 201205051400.dump.gz (669.28 MB)