Traffic Trace Info
DumpFile: 201205071400.dump
FileSize: 2799.84MB
Id: 201205071400
StartTime: Mon May 7 14:00:00 2012
EndTime: Mon May 7 14:15:00 2012
TotalTime: 899.80 seconds
TotalCapSize: -1884.45MB CapLen: 96 bytes
# of packets: 38553867 (27511.74MB)
AvgRate: 256.47Mbps stddev:40.31M
IP flow (unique src/dst pair) Information
# of flows: 2145976 (avg. 17.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 2.7% 1.7% 1.5% 1.2% 1.0% 1.0% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 1515994
Top 10 bandwidth usage (bytes/total in %):
9.9% 9.3% 6.6% 6.5% 4.6% 4.4% 4.4% 3.4% 3.1% 2.9%
# of IPv6 addresses: 6487
Top 10 bandwidth usage (bytes/total in %):
21.8% 21.8% 20.6% 18.9% 17.2% 15.8% 13.5% 7.6% 2.7% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201205071400.pktlen.png)
detailed numbers
[ 32- 63]: 7599975
[ 64- 127]: 10150610
[ 128- 255]: 1043953
[ 256- 511]: 787209
[ 512- 1023]: 840563
[ 1024- 2047]: 18131557
Protocol Breakdown
![[protocol breakdown chart]](201205071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38553867 (100.00%) 28848154302 (100.00%) 748.26
ip 37805772 ( 98.06%) 28320096121 ( 98.17%) 749.09
tcp 29602845 ( 76.78%) 23899558553 ( 82.85%) 807.34
http(s) 14130587 ( 36.65%) 18899396785 ( 65.51%) 1337.48
http(c) 9001218 ( 23.35%) 1749560831 ( 6.06%) 194.37
squid 91689 ( 0.24%) 24657682 ( 0.09%) 268.93
smtp 134121 ( 0.35%) 98879305 ( 0.34%) 737.24
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 4427 ( 0.01%) 442766 ( 0.00%) 100.01
pop3 4470 ( 0.01%) 1367515 ( 0.00%) 305.93
imap 1542 ( 0.00%) 428294 ( 0.00%) 277.75
telnet 54185 ( 0.14%) 4025501 ( 0.01%) 74.29
ssh 16180 ( 0.04%) 3100667 ( 0.01%) 191.64
dns 6794 ( 0.02%) 4275056 ( 0.01%) 629.24
bgp 621 ( 0.00%) 109220 ( 0.00%) 175.88
napster 101 ( 0.00%) 6810 ( 0.00%) 67.43
realaud 64 ( 0.00%) 4066 ( 0.00%) 63.53
rtsp 9511 ( 0.02%) 11280815 ( 0.04%) 1186.08
icecast 756 ( 0.00%) 101976 ( 0.00%) 134.89
hotline 61 ( 0.00%) 19304 ( 0.00%) 316.46
other 6146516 ( 15.94%) 3101901840 ( 10.75%) 504.66
udp 4340683 ( 11.26%) 2190672877 ( 7.59%) 504.68
dns 577756 ( 1.50%) 140599262 ( 0.49%) 243.35
realaud 7 ( 0.00%) 876 ( 0.00%) 125.14
halflif 104 ( 0.00%) 22051 ( 0.00%) 212.03
starcra 78 ( 0.00%) 7590 ( 0.00%) 97.31
everque 241 ( 0.00%) 47570 ( 0.00%) 197.39
unreal 8 ( 0.00%) 828 ( 0.00%) 103.50
quake 328 ( 0.00%) 43691 ( 0.00%) 133.20
cuseeme 5 ( 0.00%) 655 ( 0.00%) 131.00
other 3762039 ( 9.76%) 2049907823 ( 7.11%) 544.89
icmp 1481210 ( 3.84%) 153894764 ( 0.53%) 103.90
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 4864 ( 0.01%) 3730400 ( 0.01%) 766.94
ip6 2361970 ( 6.13%) 2069185023 ( 7.17%) 876.04
pim 191 ( 0.00%) 11460 ( 0.00%) 60.00
other 13825 ( 0.04%) 3023884 ( 0.01%) 218.73
frag 526 ( 0.00%) 470884 ( 0.00%) 895.22
ip6 748095 ( 1.94%) 528058181 ( 1.83%) 705.87
tcp6 563728 ( 1.46%) 429017492 ( 1.49%) 761.04
http(s) 187905 ( 0.49%) 198507445 ( 0.69%) 1056.42
http(c) 125515 ( 0.33%) 11046988 ( 0.04%) 88.01
smtp 41 ( 0.00%) 13773 ( 0.00%) 335.93
pop3 176 ( 0.00%) 110478 ( 0.00%) 627.72
dns 468 ( 0.00%) 101891 ( 0.00%) 217.72
bgp 92 ( 0.00%) 15850 ( 0.00%) 172.28
other 249531 ( 0.65%) 219221067 ( 0.76%) 878.53
udp6 129059 ( 0.33%) 73670495 ( 0.26%) 570.83
dns 75681 ( 0.20%) 18629029 ( 0.06%) 246.15
realaud 2 ( 0.00%) 220 ( 0.00%) 110.00
halflif 1 ( 0.00%) 104 ( 0.00%) 104.00
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 1 ( 0.00%) 97 ( 0.00%) 97.00
cuseeme 1 ( 0.00%) 104 ( 0.00%) 104.00
other 53372 ( 0.14%) 55040833 ( 0.19%) 1031.27
icmp6 24274 ( 0.06%) 3434484 ( 0.01%) 141.49
ip6 81 ( 0.00%) 11058 ( 0.00%) 136.52
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 30922 ( 0.08%) 21920436 ( 0.08%) 708.89
tcpdump file: 201205071400.dump.gz (915.63 MB)