Traffic Trace Info
DumpFile: 201205101400.dump
FileSize: 3151.47MB
Id: 201205101400
StartTime: Thu May 10 14:00:01 2012
EndTime: Thu May 10 14:15:00 2012
TotalTime: 899.00 seconds
TotalCapSize: -1596.21MB CapLen: 96 bytes
# of packets: 42707933 (35088.54MB)
AvgRate: 327.40Mbps stddev:47.05M
IP flow (unique src/dst pair) Information
# of flows: 1991913 (avg. 21.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.5% 2.4% 2.3% 1.7% 1.7% 1.6% 1.5% 1.4% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 1454351
Top 10 bandwidth usage (bytes/total in %):
14.2% 13.5% 10.0% 7.3% 6.3% 5.8% 5.5% 2.7% 2.4% 2.4%
# of IPv6 addresses: 6053
Top 10 bandwidth usage (bytes/total in %):
21.7% 21.0% 18.7% 18.0% 18.0% 16.1% 5.5% 5.5% 4.9% 4.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201205101400.pktlen.png)
detailed numbers
[ 32- 63]: 6231540
[ 64- 127]: 9745948
[ 128- 255]: 1113693
[ 256- 511]: 908495
[ 512- 1023]: 1025881
[ 1024- 2047]: 23682376
Protocol Breakdown
![[protocol breakdown chart]](201205101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42707933 (100.00%) 36792998359 (100.00%) 861.50
ip 41801923 ( 97.88%) 36030728030 ( 97.93%) 861.94
tcp 34644990 ( 81.12%) 31934367095 ( 86.79%) 921.76
http(s) 17494203 ( 40.96%) 23000675333 ( 62.51%) 1314.76
http(c) 9887700 ( 23.15%) 2786944594 ( 7.57%) 281.86
squid 97776 ( 0.23%) 26287929 ( 0.07%) 268.86
smtp 88496 ( 0.21%) 38379627 ( 0.10%) 433.69
ftp 869421 ( 2.04%) 874013214 ( 2.38%) 1005.28
pop3 46122 ( 0.11%) 6996587 ( 0.02%) 151.70
imap 3375 ( 0.01%) 1690917 ( 0.00%) 501.01
telnet 18456 ( 0.04%) 1386153 ( 0.00%) 75.11
ssh 14437 ( 0.03%) 2528488 ( 0.01%) 175.14
dns 2619 ( 0.01%) 315760 ( 0.00%) 120.57
bgp 808 ( 0.00%) 281787 ( 0.00%) 348.75
napster 36 ( 0.00%) 2817 ( 0.00%) 78.25
realaud 61 ( 0.00%) 4249 ( 0.00%) 69.66
rtsp 10212 ( 0.02%) 10487751 ( 0.03%) 1027.00
icecast 36992 ( 0.09%) 30982609 ( 0.08%) 837.55
hotline 14 ( 0.00%) 1296 ( 0.00%) 92.57
other 6074262 ( 14.22%) 5153387984 ( 14.01%) 848.40
udp 3318594 ( 7.77%) 1783452910 ( 4.85%) 537.41
dns 544201 ( 1.27%) 132513229 ( 0.36%) 243.50
realaud 11 ( 0.00%) 1517 ( 0.00%) 137.91
halflif 46 ( 0.00%) 8440 ( 0.00%) 183.48
starcra 67 ( 0.00%) 6785 ( 0.00%) 101.27
everque 140 ( 0.00%) 22731 ( 0.00%) 162.36
unreal 113 ( 0.00%) 44185 ( 0.00%) 391.02
quake 21 ( 0.00%) 3049 ( 0.00%) 145.19
cuseeme 3 ( 0.00%) 282 ( 0.00%) 94.00
other 2770524 ( 6.49%) 1650503130 ( 4.49%) 595.74
icmp 1488247 ( 3.48%) 157332310 ( 0.43%) 105.72
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 42625 ( 0.10%) 21339382 ( 0.06%) 500.63
ip6 2291032 ( 5.36%) 2131460210 ( 5.79%) 930.35
pim 156 ( 0.00%) 9360 ( 0.00%) 60.00
other 16095 ( 0.04%) 2747603 ( 0.01%) 170.71
frag 18120 ( 0.04%) 17835307 ( 0.05%) 984.29
ip6 906010 ( 2.12%) 762270329 ( 2.07%) 841.35
tcp6 652984 ( 1.53%) 565806424 ( 1.54%) 866.49
http(s) 294997 ( 0.69%) 288351577 ( 0.78%) 977.47
http(c) 86736 ( 0.20%) 8373870 ( 0.02%) 96.54
smtp 208 ( 0.00%) 73774 ( 0.00%) 354.68
ftp 17 ( 0.00%) 1605 ( 0.00%) 94.41
pop3 22 ( 0.00%) 7630 ( 0.00%) 346.82
dns 433 ( 0.00%) 129330 ( 0.00%) 298.68
bgp 98 ( 0.00%) 23753 ( 0.00%) 242.38
other 270473 ( 0.63%) 268844885 ( 0.73%) 993.98
udp6 218899 ( 0.51%) 184950710 ( 0.50%) 844.91
dns 80153 ( 0.19%) 20478838 ( 0.06%) 255.50
halflif 1 ( 0.00%) 101 ( 0.00%) 101.00
starcra 2 ( 0.00%) 233 ( 0.00%) 116.50
everque 1 ( 0.00%) 102 ( 0.00%) 102.00
unreal 1 ( 0.00%) 112 ( 0.00%) 112.00
quake 3 ( 0.00%) 319 ( 0.00%) 106.33
other 138738 ( 0.32%) 164471005 ( 0.45%) 1185.48
icmp6 23281 ( 0.05%) 3507162 ( 0.01%) 150.64
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 10731 ( 0.03%) 7990405 ( 0.02%) 744.61
tcpdump file: 201205101400.dump.gz (953.77 MB)