Traffic Trace Info
DumpFile: 201205151400.dump
FileSize: 2674.08MB
Id: 201205151400
StartTime: Tue May 15 14:00:01 2012
EndTime: Tue May 15 14:15:00 2012
TotalTime: 899.18 seconds
TotalCapSize: -1988.97MB CapLen: 96 bytes
# of packets: 37161943 (29728.87MB)
AvgRate: 277.28Mbps stddev:46.64M
IP flow (unique src/dst pair) Information
# of flows: 1775028 (avg. 20.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 3.4% 1.6% 1.5% 1.4% 1.4% 1.4% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 1373127
Top 10 bandwidth usage (bytes/total in %):
13.7% 11.5% 4.3% 4.2% 4.2% 4.0% 3.6% 3.5% 3.4% 3.4%
# of IPv6 addresses: 7266
Top 10 bandwidth usage (bytes/total in %):
47.4% 37.4% 16.6% 7.6% 6.6% 5.9% 5.5% 4.0% 3.9% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201205151400.pktlen.png)
detailed numbers
[ 32- 63]: 6530459
[ 64- 127]: 7739783
[ 128- 255]: 1020529
[ 256- 511]: 1016692
[ 512- 1023]: 1240593
[ 1024- 2047]: 19613887
Protocol Breakdown
![[protocol breakdown chart]](201205151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37161943 (100.00%) 31172975533 (100.00%) 838.84
ip 36675484 ( 98.69%) 30997410726 ( 99.44%) 845.18
tcp 30683100 ( 82.57%) 28198385266 ( 90.46%) 919.02
http(s) 16702929 ( 44.95%) 22529809214 ( 72.27%) 1348.85
http(c) 8223123 ( 22.13%) 1576373658 ( 5.06%) 191.70
squid 71090 ( 0.19%) 59117612 ( 0.19%) 831.59
smtp 51476 ( 0.14%) 12709648 ( 0.04%) 246.90
ftp 125643 ( 0.34%) 18630821 ( 0.06%) 148.28
pop3 5554 ( 0.01%) 1497629 ( 0.00%) 269.65
imap 2487 ( 0.01%) 959099 ( 0.00%) 385.64
telnet 2000 ( 0.01%) 169499 ( 0.00%) 84.75
ssh 86967 ( 0.23%) 8166628 ( 0.03%) 93.90
dns 2171 ( 0.01%) 284547 ( 0.00%) 131.07
bgp 730 ( 0.00%) 192929 ( 0.00%) 264.29
napster 61 ( 0.00%) 18220 ( 0.00%) 298.69
realaud 1 ( 0.00%) 60 ( 0.00%) 60.00
rtsp 16344 ( 0.04%) 19858957 ( 0.06%) 1215.06
icecast 33950 ( 0.09%) 29284945 ( 0.09%) 862.59
hotline 72 ( 0.00%) 6292 ( 0.00%) 87.39
other 5358498 ( 14.42%) 3941305180 ( 12.64%) 735.52
udp 3397411 ( 9.14%) 1587405952 ( 5.09%) 467.24
dns 625517 ( 1.68%) 153132880 ( 0.49%) 244.81
realaud 12 ( 0.00%) 1538 ( 0.00%) 128.17
halflif 28 ( 0.00%) 3780 ( 0.00%) 135.00
starcra 29 ( 0.00%) 4663 ( 0.00%) 160.79
everque 210 ( 0.00%) 41380 ( 0.00%) 197.05
unreal 84 ( 0.00%) 19456 ( 0.00%) 231.62
quake 14 ( 0.00%) 1445 ( 0.00%) 103.21
cuseeme 12 ( 0.00%) 1582 ( 0.00%) 131.83
other 2734340 ( 7.36%) 1431917066 ( 4.59%) 523.68
icmp 1401448 ( 3.77%) 144805944 ( 0.46%) 103.33
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 10452 ( 0.03%) 2479384 ( 0.01%) 237.22
ip6 1169215 ( 3.15%) 1061859425 ( 3.41%) 908.18
pim 33 ( 0.00%) 1980 ( 0.00%) 60.00
other 13641 ( 0.04%) 2453615 ( 0.01%) 179.87
frag 84974 ( 0.23%) 64905349 ( 0.21%) 763.83
ip6 486459 ( 1.31%) 175564807 ( 0.56%) 360.90
tcp6 370397 ( 1.00%) 149069028 ( 0.48%) 402.46
http(s) 115933 ( 0.31%) 101751893 ( 0.33%) 877.68
http(c) 84260 ( 0.23%) 7691890 ( 0.02%) 91.29
smtp 161 ( 0.00%) 127492 ( 0.00%) 791.88
ftp 52 ( 0.00%) 4836 ( 0.00%) 93.00
dns 317 ( 0.00%) 93588 ( 0.00%) 295.23
bgp 91 ( 0.00%) 14716 ( 0.00%) 161.71
other 169583 ( 0.46%) 39384613 ( 0.13%) 232.24
udp6 83621 ( 0.23%) 21340248 ( 0.07%) 255.20
dns 78600 ( 0.21%) 20676660 ( 0.07%) 263.06
realaud 1 ( 0.00%) 109 ( 0.00%) 109.00
halflif 1 ( 0.00%) 104 ( 0.00%) 104.00
everque 2 ( 0.00%) 211 ( 0.00%) 105.50
other 5017 ( 0.01%) 663164 ( 0.00%) 132.18
icmp6 31417 ( 0.08%) 4210125 ( 0.01%) 134.01
ip6 85 ( 0.00%) 11530 ( 0.00%) 135.65
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 908 ( 0.00%) 929660 ( 0.00%) 1023.85
tcpdump file: 201205151400.dump.gz (859.48 MB)