Traffic Trace Info
DumpFile: 201205131400.dump
FileSize: 2430.99MB
Id: 201205131400
StartTime: Sun May 13 14:00:00 2012
EndTime: Sun May 13 14:15:00 2012
TotalTime: 899.63 seconds
TotalCapSize: 1903.13MB CapLen: 96 bytes
# of packets: 34593334 (29443.97MB)
AvgRate: 274.53Mbps stddev:72.02M
IP flow (unique src/dst pair) Information
# of flows: 1702537 (avg. 20.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.4% 4.2% 2.9% 2.7% 2.3% 2.1% 1.9% 1.7% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 1347061
Top 10 bandwidth usage (bytes/total in %):
17.1% 12.8% 9.4% 9.4% 5.4% 5.3% 5.2% 4.3% 4.2% 3.0%
# of IPv6 addresses: 6222
Top 10 bandwidth usage (bytes/total in %):
36.9% 34.2% 21.1% 13.9% 9.7% 6.6% 5.9% 5.3% 4.5% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201205131400.pktlen.png)
detailed numbers
[ 32- 63]: 6528995
[ 64- 127]: 6046228
[ 128- 255]: 1075556
[ 256- 511]: 592451
[ 512- 1023]: 655501
[ 1024- 2047]: 19694603
Protocol Breakdown
![[protocol breakdown chart]](201205131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34593334 (100.00%) 30874242383 (100.00%) 892.49
ip 34212949 ( 98.90%) 30690867056 ( 99.41%) 897.05
tcp 25372700 ( 73.35%) 25703485948 ( 83.25%) 1013.04
http(s) 15261976 ( 44.12%) 20878036521 ( 67.62%) 1367.98
http(c) 5410763 ( 15.64%) 1592199291 ( 5.16%) 294.27
squid 26479 ( 0.08%) 18817221 ( 0.06%) 710.65
smtp 53267 ( 0.15%) 8136393 ( 0.03%) 152.75
ftp 28736 ( 0.08%) 14791139 ( 0.05%) 514.73
pop3 786742 ( 2.27%) 53079566 ( 0.17%) 67.47
imap 16426 ( 0.05%) 1165940 ( 0.00%) 70.98
telnet 3973 ( 0.01%) 316124 ( 0.00%) 79.57
ssh 81858 ( 0.24%) 14756024 ( 0.05%) 180.26
dns 1319 ( 0.00%) 222650 ( 0.00%) 168.80
bgp 640 ( 0.00%) 129005 ( 0.00%) 201.57
napster 258 ( 0.00%) 32976 ( 0.00%) 127.81
realaud 14 ( 0.00%) 1596 ( 0.00%) 114.00
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 15528 ( 0.04%) 11867952 ( 0.04%) 764.29
hotline 1 ( 0.00%) 62 ( 0.00%) 62.00
other 3684717 ( 10.65%) 3109933308 ( 10.07%) 844.01
udp 5840835 ( 16.88%) 3862018376 ( 12.51%) 661.21
dns 328199 ( 0.95%) 76172177 ( 0.25%) 232.09
realaud 4 ( 0.00%) 537 ( 0.00%) 134.25
halflif 55493 ( 0.16%) 9682614 ( 0.03%) 174.48
starcra 3 ( 0.00%) 311 ( 0.00%) 103.67
everque 195 ( 0.00%) 35795 ( 0.00%) 183.56
unreal 27 ( 0.00%) 7900 ( 0.00%) 292.59
quake 6 ( 0.00%) 729 ( 0.00%) 121.50
cuseeme 4 ( 0.00%) 591 ( 0.00%) 147.75
other 5106189 ( 14.76%) 3755039809 ( 12.16%) 735.39
icmp 1413858 ( 4.09%) 137330365 ( 0.44%) 97.13
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 3334 ( 0.01%) 848620 ( 0.00%) 254.54
ip6 1568676 ( 4.53%) 984552655 ( 3.19%) 627.63
pim 27 ( 0.00%) 1620 ( 0.00%) 60.00
other 13334 ( 0.04%) 2610202 ( 0.01%) 195.76
frag 1167250 ( 3.37%) 890657929 ( 2.88%) 763.04
ip6 380385 ( 1.10%) 183375327 ( 0.59%) 482.08
tcp6 250635 ( 0.72%) 100346883 ( 0.33%) 400.37
http(s) 35493 ( 0.10%) 40213464 ( 0.13%) 1133.00
http(c) 96175 ( 0.28%) 8556324 ( 0.03%) 88.97
smtp 120 ( 0.00%) 65488 ( 0.00%) 545.73
ftp 17 ( 0.00%) 1605 ( 0.00%) 94.41
dns 313 ( 0.00%) 64596 ( 0.00%) 206.38
bgp 89 ( 0.00%) 20388 ( 0.00%) 229.08
other 118428 ( 0.34%) 51425018 ( 0.17%) 434.23
udp6 108691 ( 0.31%) 79609153 ( 0.26%) 732.44
dns 48557 ( 0.14%) 12078149 ( 0.04%) 248.74
realaud 1 ( 0.00%) 119 ( 0.00%) 119.00
starcra 1 ( 0.00%) 111 ( 0.00%) 111.00
everque 1 ( 0.00%) 99 ( 0.00%) 99.00
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 60130 ( 0.17%) 67530571 ( 0.22%) 1123.08
icmp6 20438 ( 0.06%) 2884736 ( 0.01%) 141.15
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 508 ( 0.00%) 519163 ( 0.00%) 1021.97
tcpdump file: 201205131400.dump.gz (750.20 MB)