Traffic Trace Info
DumpFile: 201205061400.dump
FileSize: 1863.21MB
Id: 201205061400
StartTime: Sun May 6 14:00:00 2012
EndTime: Sun May 6 14:15:00 2012
TotalTime: 900.07 seconds
TotalCapSize: 1488.30MB CapLen: 96 bytes
# of packets: 24569717 (18167.52MB)
AvgRate: 169.31Mbps stddev:31.25M
IP flow (unique src/dst pair) Information
# of flows: 1888827 (avg. 13.01 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 5.7% 4.6% 3.5% 2.9% 2.6% 2.3% 2.0% 2.0% 1.9%
IP address Information
# of IPv4 addresses: 1418072
Top 10 bandwidth usage (bytes/total in %):
24.5% 11.0% 7.0% 7.0% 3.9% 3.9% 3.3% 3.3% 3.2% 2.9%
# of IPv6 addresses: 4658
Top 10 bandwidth usage (bytes/total in %):
98.1% 53.3% 42.7% 1.0% 1.0% 0.9% 0.5% 0.3% 0.2% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201205061400.pktlen.png)
detailed numbers
[ 32- 63]: 4792921
[ 64- 127]: 6009765
[ 128- 255]: 737945
[ 256- 511]: 500872
[ 512- 1023]: 615074
[ 1024- 2047]: 11913140
Protocol Breakdown
![[protocol breakdown chart]](201205061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24569717 (100.00%) 19050030123 (100.00%) 775.35
ip 22796045 ( 92.78%) 17018212404 ( 89.33%) 746.54
tcp 14922586 ( 60.74%) 12768584711 ( 67.03%) 855.65
http(s) 7481437 ( 30.45%) 9917546258 ( 52.06%) 1325.62
http(c) 2171763 ( 8.84%) 363532253 ( 1.91%) 167.39
squid 22324 ( 0.09%) 11992811 ( 0.06%) 537.22
smtp 51084 ( 0.21%) 24186994 ( 0.13%) 473.47
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 3840 ( 0.02%) 394838 ( 0.00%) 102.82
pop3 896 ( 0.00%) 256597 ( 0.00%) 286.38
imap 566 ( 0.00%) 83074 ( 0.00%) 146.77
telnet 1349 ( 0.01%) 122680 ( 0.00%) 90.94
ssh 25508 ( 0.10%) 25351499 ( 0.13%) 993.86
dns 2241 ( 0.01%) 314904 ( 0.00%) 140.52
bgp 634 ( 0.00%) 118369 ( 0.00%) 186.70
napster 54 ( 0.00%) 3458 ( 0.00%) 64.04
realaud 46 ( 0.00%) 2872 ( 0.00%) 62.43
rtsp 76512 ( 0.31%) 4644672 ( 0.02%) 60.71
icecast 16317 ( 0.07%) 11882759 ( 0.06%) 728.24
hotline 22 ( 0.00%) 1402 ( 0.00%) 63.73
other 5067987 ( 20.63%) 2408148897 ( 12.64%) 475.17
udp 3110404 ( 12.66%) 1635198288 ( 8.58%) 525.72
dns 410814 ( 1.67%) 93986816 ( 0.49%) 228.78
realaud 18 ( 0.00%) 1699 ( 0.00%) 94.39
halflif 79 ( 0.00%) 8312 ( 0.00%) 105.22
starcra 43 ( 0.00%) 9509 ( 0.00%) 221.14
everque 133 ( 0.00%) 24210 ( 0.00%) 182.03
unreal 88 ( 0.00%) 49051 ( 0.00%) 557.40
quake 6 ( 0.00%) 490 ( 0.00%) 81.67
cuseeme 10 ( 0.00%) 1031 ( 0.00%) 103.10
other 2693854 ( 10.96%) 1540715622 ( 8.09%) 571.94
icmp 1482397 ( 6.03%) 169876686 ( 0.89%) 114.60
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1572 ( 0.01%) 552152 ( 0.00%) 351.24
ip6 3248536 ( 13.22%) 2433665561 ( 12.78%) 749.16
pim 198 ( 0.00%) 11880 ( 0.00%) 60.00
other 30167 ( 0.12%) 10303856 ( 0.05%) 341.56
frag 27697 ( 0.11%) 21400574 ( 0.11%) 772.67
ip6 1773672 ( 7.22%) 2031817719 ( 10.67%) 1145.54
tcp6 1705092 ( 6.94%) 2016047382 ( 10.58%) 1182.37
http(s) 29905 ( 0.12%) 23675892 ( 0.12%) 791.70
http(c) 92251 ( 0.38%) 8219369 ( 0.04%) 89.10
smtp 52 ( 0.00%) 13185 ( 0.00%) 253.56
dns 150 ( 0.00%) 36142 ( 0.00%) 240.95
bgp 93 ( 0.00%) 20018 ( 0.00%) 215.25
other 1582641 ( 6.44%) 1984082776 ( 10.42%) 1253.65
udp6 48899 ( 0.20%) 12170328 ( 0.06%) 248.89
dns 44843 ( 0.18%) 10747332 ( 0.06%) 239.67
starcra 1 ( 0.00%) 115 ( 0.00%) 115.00
quake 1 ( 0.00%) 119 ( 0.00%) 119.00
other 4054 ( 0.02%) 1422762 ( 0.01%) 350.95
icmp6 18862 ( 0.08%) 2909326 ( 0.02%) 154.24
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 707 ( 0.00%) 675427 ( 0.00%) 955.34
tcpdump file: 201205061400.dump.gz (547.35 MB)