Traffic Trace Info
DumpFile: 201205121400.dump
FileSize: 2324.64MB
Id: 201205121400
StartTime: Sat May 12 14:00:01 2012
EndTime: Sat May 12 14:15:01 2012
TotalTime: 900.06 seconds
TotalCapSize: 1837.48MB CapLen: 96 bytes
# of packets: 31926066 (24954.03MB)
AvgRate: 232.52Mbps stddev:43.32M
IP flow (unique src/dst pair) Information
# of flows: 1896676 (avg. 16.83 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 2.1% 2.0% 1.8% 1.8% 1.7% 1.6% 1.2% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 1470415
Top 10 bandwidth usage (bytes/total in %):
15.3% 13.5% 6.6% 6.3% 3.5% 2.9% 2.6% 2.3% 2.2% 2.1%
# of IPv6 addresses: 7151
Top 10 bandwidth usage (bytes/total in %):
19.7% 18.9% 14.0% 13.8% 12.8% 9.7% 9.1% 8.2% 7.8% 6.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201205121400.pktlen.png)
detailed numbers
[ 32- 63]: 5116487
[ 64- 127]: 7641752
[ 128- 255]: 1091188
[ 256- 511]: 827228
[ 512- 1023]: 808087
[ 1024- 2047]: 16441324
Protocol Breakdown
![[protocol breakdown chart]](201205121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31926066 (100.00%) 26166193244 (100.00%) 819.59
ip 31130782 ( 97.51%) 25820378615 ( 98.68%) 829.42
tcp 24159361 ( 75.67%) 22001387059 ( 84.08%) 910.68
http(s) 13524725 ( 42.36%) 17610323221 ( 67.30%) 1302.08
http(c) 7561168 ( 23.68%) 2307162017 ( 8.82%) 305.13
squid 87374 ( 0.27%) 53843852 ( 0.21%) 616.25
smtp 54876 ( 0.17%) 18144604 ( 0.07%) 330.65
nntp 4 ( 0.00%) 240 ( 0.00%) 60.00
ftp 24209 ( 0.08%) 17161253 ( 0.07%) 708.88
pop3 2572 ( 0.01%) 889188 ( 0.00%) 345.72
imap 1118 ( 0.00%) 96867 ( 0.00%) 86.64
telnet 1488 ( 0.00%) 133830 ( 0.00%) 89.94
ssh 16783 ( 0.05%) 5375597 ( 0.02%) 320.30
dns 1861 ( 0.01%) 229210 ( 0.00%) 123.16
bgp 648 ( 0.00%) 115686 ( 0.00%) 178.53
napster 336 ( 0.00%) 22198 ( 0.00%) 66.07
realaud 19 ( 0.00%) 2178 ( 0.00%) 114.63
rtsp 6733 ( 0.02%) 7722047 ( 0.03%) 1146.90
icecast 8677 ( 0.03%) 6033594 ( 0.02%) 695.35
hotline 14 ( 0.00%) 1793 ( 0.00%) 128.07
other 2866754 ( 8.98%) 1974129564 ( 7.54%) 688.63
udp 2952413 ( 9.25%) 1430604480 ( 5.47%) 484.55
dns 386260 ( 1.21%) 90973707 ( 0.35%) 235.52
realaud 10 ( 0.00%) 1659 ( 0.00%) 165.90
halflif 98 ( 0.00%) 34550 ( 0.00%) 352.55
starcra 24 ( 0.00%) 2200 ( 0.00%) 91.67
everque 121 ( 0.00%) 27170 ( 0.00%) 224.55
unreal 45 ( 0.00%) 6583 ( 0.00%) 146.29
quake 10 ( 0.00%) 1020 ( 0.00%) 102.00
cuseeme 10 ( 0.00%) 985 ( 0.00%) 98.50
other 2559971 ( 8.02%) 1339177151 ( 5.12%) 523.12
icmp 1509427 ( 4.73%) 163264460 ( 0.62%) 108.16
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 42514 ( 0.13%) 28344756 ( 0.11%) 666.72
ip6 2364607 ( 7.41%) 2060074037 ( 7.87%) 871.21
pim 31 ( 0.00%) 1860 ( 0.00%) 60.00
other 102245 ( 0.32%) 136682803 ( 0.52%) 1336.82
frag 13780 ( 0.04%) 10578602 ( 0.04%) 767.68
ip6 795284 ( 2.49%) 345814629 ( 1.32%) 434.83
tcp6 593246 ( 1.86%) 214216306 ( 0.82%) 361.09
http(s) 52879 ( 0.17%) 45951366 ( 0.18%) 868.99
http(c) 93251 ( 0.29%) 8631739 ( 0.03%) 92.56
smtp 35 ( 0.00%) 17580 ( 0.00%) 502.29
ftp 17 ( 0.00%) 1605 ( 0.00%) 94.41
pop3 1 ( 0.00%) 74 ( 0.00%) 74.00
dns 271 ( 0.00%) 64330 ( 0.00%) 237.38
bgp 88 ( 0.00%) 15648 ( 0.00%) 177.82
other 446704 ( 1.40%) 159533964 ( 0.61%) 357.14
udp6 126531 ( 0.40%) 90011936 ( 0.34%) 711.38
dns 55670 ( 0.17%) 14086605 ( 0.05%) 253.04
realaud 3 ( 0.00%) 315 ( 0.00%) 105.00
starcra 1 ( 0.00%) 118 ( 0.00%) 118.00
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 1 ( 0.00%) 111 ( 0.00%) 111.00
cuseeme 2 ( 0.00%) 213 ( 0.00%) 106.50
other 70853 ( 0.22%) 75924467 ( 0.29%) 1071.58
icmp6 21014 ( 0.07%) 3726925 ( 0.01%) 177.35
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 54380 ( 0.17%) 37844088 ( 0.14%) 695.92
tcpdump file: 201205121400.dump.gz (730.34 MB)