Traffic Trace Info
DumpFile: 201205111400.dump
FileSize: 2737.15MB
Id: 201205111400
StartTime: Fri May 11 14:00:00 2012
EndTime: Fri May 11 14:15:00 2012
TotalTime: 899.90 seconds
TotalCapSize: -1938.02MB CapLen: 96 bytes
# of packets: 37956134 (30845.13MB)
AvgRate: 287.57Mbps stddev:40.85M
IP flow (unique src/dst pair) Information
# of flows: 1985455 (avg. 19.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 2.0% 2.0% 1.7% 1.7% 1.7% 1.4% 1.4% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 1463869
Top 10 bandwidth usage (bytes/total in %):
18.7% 6.2% 5.1% 4.3% 3.2% 3.2% 3.1% 2.7% 2.3% 2.1%
# of IPv6 addresses: 6374
Top 10 bandwidth usage (bytes/total in %):
67.4% 61.3% 18.2% 15.0% 2.7% 2.0% 1.6% 1.4% 1.4% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201205111400.pktlen.png)
detailed numbers
[ 32- 63]: 6186487
[ 64- 127]: 8328291
[ 128- 255]: 1035401
[ 256- 511]: 1011579
[ 512- 1023]: 792338
[ 1024- 2047]: 20602038
Protocol Breakdown
![[protocol breakdown chart]](201205111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37956134 (100.00%) 32343464786 (100.00%) 852.13
ip 37064108 ( 97.65%) 31742110191 ( 98.14%) 856.41
tcp 30800202 ( 81.15%) 28888950760 ( 89.32%) 937.95
http(s) 17070620 ( 44.97%) 22204447716 ( 68.65%) 1300.74
http(c) 9639975 ( 25.40%) 3643720029 ( 11.27%) 377.98
squid 395872 ( 1.04%) 268135823 ( 0.83%) 677.33
smtp 65345 ( 0.17%) 33744753 ( 0.10%) 516.41
ftp 17908 ( 0.05%) 1595628 ( 0.00%) 89.10
pop3 8234 ( 0.02%) 1846380 ( 0.01%) 224.24
imap 1935 ( 0.01%) 428249 ( 0.00%) 221.32
telnet 429 ( 0.00%) 58404 ( 0.00%) 136.14
ssh 104495 ( 0.28%) 15406404 ( 0.05%) 147.44
dns 2602 ( 0.01%) 308894 ( 0.00%) 118.71
bgp 669 ( 0.00%) 137368 ( 0.00%) 205.33
napster 95 ( 0.00%) 7015 ( 0.00%) 73.84
realaud 19 ( 0.00%) 1851 ( 0.00%) 97.42
rtsp 9940 ( 0.03%) 11584942 ( 0.04%) 1165.49
icecast 10058 ( 0.03%) 6043039 ( 0.02%) 600.82
hotline 6 ( 0.00%) 824 ( 0.00%) 137.33
other 3471999 ( 9.15%) 2701483381 ( 8.35%) 778.08
udp 3507851 ( 9.24%) 1824197877 ( 5.64%) 520.03
dns 526214 ( 1.39%) 135924287 ( 0.42%) 258.31
realaud 27 ( 0.00%) 3756 ( 0.00%) 139.11
halflif 88 ( 0.00%) 14177 ( 0.00%) 161.10
starcra 15 ( 0.00%) 1837 ( 0.00%) 122.47
everque 269 ( 0.00%) 55038 ( 0.00%) 204.60
unreal 143 ( 0.00%) 60717 ( 0.00%) 424.59
quake 52 ( 0.00%) 15684 ( 0.00%) 301.62
cuseeme 6 ( 0.00%) 782 ( 0.00%) 130.33
other 2938155 ( 7.74%) 1685499226 ( 5.21%) 573.66
icmp 1507140 ( 3.97%) 157729298 ( 0.49%) 104.65
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 37118 ( 0.10%) 11231940 ( 0.03%) 302.60
ip6 1199091 ( 3.16%) 857487547 ( 2.65%) 715.11
pim 25 ( 0.00%) 1500 ( 0.00%) 60.00
other 12497 ( 0.03%) 2492109 ( 0.01%) 199.42
frag 96128 ( 0.25%) 73385958 ( 0.23%) 763.42
ip6 892026 ( 2.35%) 601354595 ( 1.86%) 674.14
tcp6 787458 ( 2.07%) 575446481 ( 1.78%) 730.76
http(s) 163301 ( 0.43%) 148338917 ( 0.46%) 908.38
http(c) 109080 ( 0.29%) 10457741 ( 0.03%) 95.87
smtp 132 ( 0.00%) 83209 ( 0.00%) 630.37
ftp 17 ( 0.00%) 1605 ( 0.00%) 94.41
dns 286 ( 0.00%) 60254 ( 0.00%) 210.68
bgp 92 ( 0.00%) 14867 ( 0.00%) 161.60
other 514550 ( 1.36%) 416489888 ( 1.29%) 809.43
udp6 82647 ( 0.22%) 21871307 ( 0.07%) 264.64
dns 77513 ( 0.20%) 19738023 ( 0.06%) 254.64
halflif 2 ( 0.00%) 213 ( 0.00%) 106.50
everque 1 ( 0.00%) 118 ( 0.00%) 118.00
other 5131 ( 0.01%) 2132953 ( 0.01%) 415.70
icmp6 21003 ( 0.06%) 3225299 ( 0.01%) 153.56
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 803 ( 0.00%) 795880 ( 0.00%) 991.13
tcpdump file: 201205111400.dump.gz (854.13 MB)