Traffic Trace Info
DumpFile: 201205141400.dump
FileSize: 2731.58MB
Id: 201205141400
StartTime: Mon May 14 14:00:00 2012
EndTime: Mon May 14 14:15:00 2012
TotalTime: 900.16 seconds
TotalCapSize: -1945.04MB CapLen: 96 bytes
# of packets: 38051050 (30342.74MB)
AvgRate: 282.81Mbps stddev:47.11M
IP flow (unique src/dst pair) Information
# of flows: 1890012 (avg. 20.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.2% 2.2% 1.7% 1.3% 1.2% 1.1% 1.1% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 1415851
Top 10 bandwidth usage (bytes/total in %):
11.4% 9.5% 8.8% 8.4% 4.6% 3.9% 3.5% 3.1% 2.9% 2.3%
# of IPv6 addresses: 6957
Top 10 bandwidth usage (bytes/total in %):
51.3% 25.2% 14.7% 14.7% 9.8% 8.7% 6.9% 4.9% 4.0% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201205141400.pktlen.png)
detailed numbers
[ 32- 63]: 6177162
[ 64- 127]: 8579421
[ 128- 255]: 1548482
[ 256- 511]: 756952
[ 512- 1023]: 910946
[ 1024- 2047]: 20078087
Protocol Breakdown
![[protocol breakdown chart]](201205141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38051050 (100.00%) 31816664031 (100.00%) 836.16
ip 37500003 ( 98.55%) 31510744873 ( 99.04%) 840.29
tcp 31033736 ( 81.56%) 28992455663 ( 91.12%) 934.22
http(s) 18716609 ( 49.19%) 25129886020 ( 78.98%) 1342.65
http(c) 9531075 ( 25.05%) 2147007955 ( 6.75%) 225.26
squid 48645 ( 0.13%) 23040035 ( 0.07%) 473.64
smtp 55858 ( 0.15%) 18269916 ( 0.06%) 327.08
ftp 23735 ( 0.06%) 16311680 ( 0.05%) 687.24
pop3 5315 ( 0.01%) 1925875 ( 0.01%) 362.35
imap 1703 ( 0.00%) 170683 ( 0.00%) 100.22
telnet 2872 ( 0.01%) 231949 ( 0.00%) 80.76
ssh 24672 ( 0.06%) 3875656 ( 0.01%) 157.09
dns 1708 ( 0.00%) 247098 ( 0.00%) 144.67
bgp 665 ( 0.00%) 129787 ( 0.00%) 195.17
napster 14 ( 0.00%) 944 ( 0.00%) 67.43
realaud 17 ( 0.00%) 3879 ( 0.00%) 228.18
rtsp 34981 ( 0.09%) 46772194 ( 0.15%) 1337.07
icecast 15763 ( 0.04%) 11889413 ( 0.04%) 754.26
hotline 23 ( 0.00%) 1795 ( 0.00%) 78.04
other 2570081 ( 6.75%) 1592690784 ( 5.01%) 619.70
udp 4289326 ( 11.27%) 1876789582 ( 5.90%) 437.55
dns 516787 ( 1.36%) 133628877 ( 0.42%) 258.58
rip 1 ( 0.00%) 237 ( 0.00%) 237.00
realaud 8 ( 0.00%) 967 ( 0.00%) 120.88
halflif 19 ( 0.00%) 2060 ( 0.00%) 108.42
starcra 18 ( 0.00%) 1784 ( 0.00%) 99.11
everque 299 ( 0.00%) 51267 ( 0.00%) 171.46
unreal 92 ( 0.00%) 27355 ( 0.00%) 297.34
quake 13 ( 0.00%) 1240 ( 0.00%) 95.38
cuseeme 4 ( 0.00%) 389 ( 0.00%) 97.25
other 3770276 ( 9.91%) 1742806765 ( 5.48%) 462.25
icmp 1415334 ( 3.72%) 127239380 ( 0.40%) 89.90
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 91424 ( 0.24%) 36747020 ( 0.12%) 401.94
ip6 656420 ( 1.73%) 475127806 ( 1.49%) 723.82
pim 30 ( 0.00%) 1800 ( 0.00%) 60.00
other 13548 ( 0.04%) 2364352 ( 0.01%) 174.52
frag 7620 ( 0.02%) 5883746 ( 0.02%) 772.15
ip6 551047 ( 1.45%) 305919158 ( 0.96%) 555.16
tcp6 435122 ( 1.14%) 267467068 ( 0.84%) 614.69
http(s) 186432 ( 0.49%) 190440570 ( 0.60%) 1021.50
http(c) 135663 ( 0.36%) 12614449 ( 0.04%) 92.98
smtp 125 ( 0.00%) 91853 ( 0.00%) 734.82
ftp 394 ( 0.00%) 41028 ( 0.00%) 104.13
dns 325 ( 0.00%) 77803 ( 0.00%) 239.39
bgp 87 ( 0.00%) 22102 ( 0.00%) 254.05
other 112096 ( 0.29%) 64179263 ( 0.20%) 572.54
udp6 91265 ( 0.24%) 34141661 ( 0.11%) 374.09
dns 74976 ( 0.20%) 20089853 ( 0.06%) 267.95
halflif 3 ( 0.00%) 332 ( 0.00%) 110.67
everque 2 ( 0.00%) 221 ( 0.00%) 110.50
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 16283 ( 0.04%) 14051149 ( 0.04%) 862.93
icmp6 23713 ( 0.06%) 3450093 ( 0.01%) 145.49
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 833 ( 0.00%) 844844 ( 0.00%) 1014.22
tcpdump file: 201205141400.dump.gz (865.96 MB)