Traffic Trace Info
DumpFile: 201205091400.dump
FileSize: 2887.23MB
Id: 201205091400
StartTime: Wed May 9 14:00:00 2012
EndTime: Wed May 9 14:15:00 2012
TotalTime: 899.68 seconds
TotalCapSize: -1817.79MB CapLen: 96 bytes
# of packets: 39911658 (28928.41MB)
AvgRate: 269.74Mbps stddev:55.97M
IP flow (unique src/dst pair) Information
# of flows: 2032112 (avg. 19.64 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.1% 1.8% 1.6% 1.1% 1.1% 1.0% 0.9% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 1440393
Top 10 bandwidth usage (bytes/total in %):
17.9% 5.2% 5.2% 4.0% 3.8% 3.2% 3.0% 2.9% 2.1% 2.1%
# of IPv6 addresses: 6528
Top 10 bandwidth usage (bytes/total in %):
37.7% 31.2% 16.9% 11.8% 11.8% 11.3% 9.8% 9.7% 9.7% 6.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201205091400.pktlen.png)
detailed numbers
[ 32- 63]: 8317405
[ 64- 127]: 9653523
[ 128- 255]: 1042198
[ 256- 511]: 828319
[ 512- 1023]: 1051770
[ 1024- 2047]: 19018443
Protocol Breakdown
![[protocol breakdown chart]](201205091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39911658 (100.00%) 30333631895 (100.00%) 760.02
ip 39233607 ( 98.30%) 29888512292 ( 98.53%) 761.81
tcp 32051859 ( 80.31%) 26655970637 ( 87.88%) 831.65
http(s) 16939428 ( 42.44%) 22275248798 ( 73.43%) 1314.99
http(c) 8983117 ( 22.51%) 2097717342 ( 6.92%) 233.52
squid 34401 ( 0.09%) 21224030 ( 0.07%) 616.96
smtp 58028 ( 0.15%) 15134457 ( 0.05%) 260.81
nntp 8 ( 0.00%) 480 ( 0.00%) 60.00
ftp 4520 ( 0.01%) 435923 ( 0.00%) 96.44
pop3 11837 ( 0.03%) 9274224 ( 0.03%) 783.49
imap 3364 ( 0.01%) 1754956 ( 0.01%) 521.69
telnet 1914 ( 0.00%) 162014 ( 0.00%) 84.65
ssh 50659 ( 0.13%) 26435010 ( 0.09%) 521.82
dns 2752 ( 0.01%) 342868 ( 0.00%) 124.59
bgp 667 ( 0.00%) 150086 ( 0.00%) 225.02
napster 149 ( 0.00%) 9613 ( 0.00%) 64.52
realaud 994 ( 0.00%) 64624 ( 0.00%) 65.01
rtsp 32364 ( 0.08%) 31688682 ( 0.10%) 979.13
icecast 41863 ( 0.10%) 33425768 ( 0.11%) 798.46
hotline 127 ( 0.00%) 8417 ( 0.00%) 66.28
other 5885667 ( 14.75%) 2142893345 ( 7.06%) 364.09
udp 4017215 ( 10.07%) 1750794451 ( 5.77%) 435.82
dns 534099 ( 1.34%) 133657344 ( 0.44%) 250.25
realaud 11 ( 0.00%) 1259 ( 0.00%) 114.45
halflif 93 ( 0.00%) 46135 ( 0.00%) 496.08
starcra 28 ( 0.00%) 3461 ( 0.00%) 123.61
everque 643 ( 0.00%) 178877 ( 0.00%) 278.19
unreal 95 ( 0.00%) 65198 ( 0.00%) 686.29
quake 10 ( 0.00%) 1798 ( 0.00%) 179.80
cuseeme 7 ( 0.00%) 1112 ( 0.00%) 158.86
other 3482019 ( 8.72%) 1616786288 ( 5.33%) 464.32
icmp 1461863 ( 3.66%) 144955474 ( 0.48%) 99.16
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 5289 ( 0.01%) 945990 ( 0.00%) 178.86
ip6 1681825 ( 4.21%) 1332889626 ( 4.39%) 792.53
pim 137 ( 0.00%) 8220 ( 0.00%) 60.00
other 15234 ( 0.04%) 2928624 ( 0.01%) 192.24
frag 976 ( 0.00%) 810386 ( 0.00%) 830.31
ip6 678051 ( 1.70%) 445119603 ( 1.47%) 656.47
tcp6 534446 ( 1.34%) 377305822 ( 1.24%) 705.98
http(s) 253584 ( 0.64%) 245169960 ( 0.81%) 966.82
http(c) 92617 ( 0.23%) 8638801 ( 0.03%) 93.27
smtp 674 ( 0.00%) 301964 ( 0.00%) 448.02
ftp 55 ( 0.00%) 5417 ( 0.00%) 98.49
dns 333 ( 0.00%) 78183 ( 0.00%) 234.78
bgp 97 ( 0.00%) 19397 ( 0.00%) 199.97
other 187086 ( 0.47%) 123092100 ( 0.41%) 657.94
udp6 116237 ( 0.29%) 63264221 ( 0.21%) 544.27
dns 76547 ( 0.19%) 18775899 ( 0.06%) 245.29
halflif 1 ( 0.00%) 118 ( 0.00%) 118.00
quake 3 ( 0.00%) 322 ( 0.00%) 107.33
other 39686 ( 0.10%) 44487882 ( 0.15%) 1121.00
icmp6 26180 ( 0.07%) 3472864 ( 0.01%) 132.65
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1075 ( 0.00%) 1061272 ( 0.00%) 987.23
tcpdump file: 201205091400.dump.gz (952.83 MB)