Traffic Trace Info
DumpFile: 201205081400.dump
FileSize: 3210.84MB
Id: 201205081400
StartTime: Tue May 8 14:00:00 2012
EndTime: Tue May 8 14:15:00 2012
TotalTime: 899.35 seconds
TotalCapSize: -1556.48MB CapLen: 96 bytes
# of packets: 43995124 (31812.69MB)
AvgRate: 296.72Mbps stddev:48.57M
IP flow (unique src/dst pair) Information
# of flows: 2246720 (avg. 19.58 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 4.2% 3.7% 1.3% 1.3% 1.2% 1.2% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 1568867
Top 10 bandwidth usage (bytes/total in %):
9.9% 8.5% 5.3% 5.3% 5.2% 4.6% 4.4% 4.4% 4.3% 4.0%
# of IPv6 addresses: 6246
Top 10 bandwidth usage (bytes/total in %):
62.0% 57.1% 13.9% 9.9% 5.5% 5.5% 4.0% 3.2% 3.2% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201205081400.pktlen.png)
detailed numbers
[ 32- 63]: 8799384
[ 64- 127]: 11057965
[ 128- 255]: 1241034
[ 256- 511]: 823226
[ 512- 1023]: 970417
[ 1024- 2047]: 21103098
Protocol Breakdown
![[protocol breakdown chart]](201205081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 43995124 (100.00%) 33358022135 (100.00%) 758.22
ip 42948972 ( 97.62%) 32636866645 ( 97.84%) 759.90
tcp 34320862 ( 78.01%) 27419280315 ( 82.20%) 798.91
http(s) 16059425 ( 36.50%) 20886089188 ( 62.61%) 1300.55
http(c) 10022410 ( 22.78%) 2289224040 ( 6.86%) 228.41
squid 168654 ( 0.38%) 87953518 ( 0.26%) 521.50
smtp 54976 ( 0.12%) 23716437 ( 0.07%) 431.40
nntp 3 ( 0.00%) 180 ( 0.00%) 60.00
ftp 10530 ( 0.02%) 991283 ( 0.00%) 94.14
pop3 33191 ( 0.08%) 5752488 ( 0.02%) 173.31
imap 2661 ( 0.01%) 678198 ( 0.00%) 254.87
telnet 6883 ( 0.02%) 530453 ( 0.00%) 77.07
ssh 293622 ( 0.67%) 34099435 ( 0.10%) 116.13
dns 2620 ( 0.01%) 349340 ( 0.00%) 133.34
bgp 745 ( 0.00%) 193550 ( 0.00%) 259.80
napster 92 ( 0.00%) 10936 ( 0.00%) 118.87
realaud 45 ( 0.00%) 3243 ( 0.00%) 72.07
rtsp 10649 ( 0.02%) 13526214 ( 0.04%) 1270.19
icecast 46220 ( 0.11%) 35875734 ( 0.11%) 776.20
hotline 1702 ( 0.00%) 106387 ( 0.00%) 62.51
other 7606432 ( 17.29%) 4040179571 ( 12.11%) 531.15
udp 4720508 ( 10.73%) 2805241741 ( 8.41%) 594.27
dns 582031 ( 1.32%) 143385390 ( 0.43%) 246.35
realaud 8 ( 0.00%) 1003 ( 0.00%) 125.38
halflif 60 ( 0.00%) 14166 ( 0.00%) 236.10
starcra 42 ( 0.00%) 4957 ( 0.00%) 118.02
everque 309 ( 0.00%) 65574 ( 0.00%) 212.21
unreal 72 ( 0.00%) 26501 ( 0.00%) 368.07
quake 23 ( 0.00%) 3617 ( 0.00%) 157.26
cuseeme 1 ( 0.00%) 87 ( 0.00%) 87.00
other 4123560 ( 9.37%) 2660787637 ( 7.98%) 645.26
icmp 1537044 ( 3.49%) 175275031 ( 0.53%) 114.03
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 6624 ( 0.02%) 2627472 ( 0.01%) 396.66
ip6 2295649 ( 5.22%) 2151882677 ( 6.45%) 937.37
pim 134 ( 0.00%) 8040 ( 0.00%) 60.00
other 67967 ( 0.15%) 82532209 ( 0.25%) 1214.30
frag 50078 ( 0.11%) 38063749 ( 0.11%) 760.09
ip6 1046152 ( 2.38%) 721155490 ( 2.16%) 689.34
tcp6 913649 ( 2.08%) 674303773 ( 2.02%) 738.03
http(s) 166380 ( 0.38%) 165565569 ( 0.50%) 995.10
http(c) 192086 ( 0.44%) 17064132 ( 0.05%) 88.84
smtp 93 ( 0.00%) 54784 ( 0.00%) 589.08
ftp 17 ( 0.00%) 1605 ( 0.00%) 94.41
pop3 135 ( 0.00%) 11983 ( 0.00%) 88.76
dns 293 ( 0.00%) 88476 ( 0.00%) 301.97
bgp 98 ( 0.00%) 22916 ( 0.00%) 233.84
other 554547 ( 1.26%) 491494308 ( 1.47%) 886.30
udp6 100345 ( 0.23%) 36525851 ( 0.11%) 364.00
dns 76139 ( 0.17%) 18769660 ( 0.06%) 246.52
realaud 1 ( 0.00%) 108 ( 0.00%) 108.00
halflif 1 ( 0.00%) 110 ( 0.00%) 110.00
quake 1 ( 0.00%) 111 ( 0.00%) 111.00
other 24203 ( 0.06%) 17755862 ( 0.05%) 733.62
icmp6 22734 ( 0.05%) 3472910 ( 0.01%) 152.76
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 9312 ( 0.02%) 6837700 ( 0.02%) 734.29
tcpdump file: 201205081400.dump.gz (1030.82 MB)