Traffic Trace Info
DumpFile: 201205171400.dump
FileSize: 2926.98MB
Id: 201205171400
StartTime: Thu May 17 14:00:01 2012
EndTime: Thu May 17 14:15:01 2012
TotalTime: 899.80 seconds
TotalCapSize: -1777.30MB CapLen: 96 bytes
# of packets: 39863314 (34193.87MB)
AvgRate: 318.82Mbps stddev:49.24M
IP flow (unique src/dst pair) Information
# of flows: 1781342 (avg. 22.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.8% 3.1% 1.9% 1.7% 1.7% 1.7% 1.7% 1.1% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 1368474
Top 10 bandwidth usage (bytes/total in %):
12.0% 12.0% 8.4% 8.3% 7.9% 7.6% 3.2% 3.1% 3.0% 2.9%
# of IPv6 addresses: 6098
Top 10 bandwidth usage (bytes/total in %):
61.5% 49.0% 11.5% 8.6% 8.1% 5.1% 4.5% 3.9% 3.9% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201205171400.pktlen.png)
detailed numbers
[ 32- 63]: 6385108
[ 64- 127]: 7594922
[ 128- 255]: 863704
[ 256- 511]: 1205284
[ 512- 1023]: 981408
[ 1024- 2047]: 22832888
Protocol Breakdown
![[protocol breakdown chart]](201205171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39863314 (100.00%) 35854866814 (100.00%) 899.45
ip 38932998 ( 97.67%) 35440721198 ( 98.84%) 910.30
tcp 33024013 ( 82.84%) 32567900614 ( 90.83%) 986.19
http(s) 20480054 ( 51.38%) 27808742248 ( 77.56%) 1357.85
http(c) 9337206 ( 23.42%) 2674773241 ( 7.46%) 286.46
squid 39763 ( 0.10%) 15851087 ( 0.04%) 398.64
smtp 62680 ( 0.16%) 25268150 ( 0.07%) 403.13
ftp 12285 ( 0.03%) 1395926 ( 0.00%) 113.63
pop3 13969 ( 0.04%) 7714732 ( 0.02%) 552.28
imap 1532 ( 0.00%) 147269 ( 0.00%) 96.13
telnet 968 ( 0.00%) 93868 ( 0.00%) 96.97
ssh 164681 ( 0.41%) 93196959 ( 0.26%) 565.92
dns 1268 ( 0.00%) 205975 ( 0.00%) 162.44
bgp 651 ( 0.00%) 134723 ( 0.00%) 206.95
napster 58 ( 0.00%) 15333 ( 0.00%) 264.36
realaud 13 ( 0.00%) 4256 ( 0.00%) 327.38
rtsp 15746 ( 0.04%) 19354431 ( 0.05%) 1229.16
icecast 47280 ( 0.12%) 36914172 ( 0.10%) 780.76
hotline 5 ( 0.00%) 685 ( 0.00%) 137.00
other 2845852 ( 7.14%) 1884087439 ( 5.25%) 662.05
udp 2990226 ( 7.50%) 1312124867 ( 3.66%) 438.80
dns 668512 ( 1.68%) 160975510 ( 0.45%) 240.80
rip 1 ( 0.00%) 72 ( 0.00%) 72.00
realaud 9 ( 0.00%) 1099 ( 0.00%) 122.11
halflif 77 ( 0.00%) 12888 ( 0.00%) 167.38
starcra 20 ( 0.00%) 2817 ( 0.00%) 140.85
everque 198 ( 0.00%) 44512 ( 0.00%) 224.81
unreal 10 ( 0.00%) 1483 ( 0.00%) 148.30
quake 49 ( 0.00%) 4363 ( 0.00%) 89.04
cuseeme 15 ( 0.00%) 3072 ( 0.00%) 204.80
other 2320908 ( 5.82%) 1150964792 ( 3.21%) 495.91
icmp 1369618 ( 3.44%) 130416496 ( 0.36%) 95.22
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 10259 ( 0.03%) 6297944 ( 0.02%) 613.89
ip6 1462570 ( 3.67%) 1326433505 ( 3.70%) 906.92
pim 29 ( 0.00%) 1740 ( 0.00%) 60.00
other 76099 ( 0.19%) 97526872 ( 0.27%) 1281.58
frag 5481 ( 0.01%) 4266347 ( 0.01%) 778.39
ip6 930316 ( 2.33%) 414145616 ( 1.16%) 445.17
tcp6 803827 ( 2.02%) 382039960 ( 1.07%) 475.28
http(s) 61375 ( 0.15%) 63580411 ( 0.18%) 1035.93
http(c) 103446 ( 0.26%) 9295167 ( 0.03%) 89.86
squid 3 ( 0.00%) 230 ( 0.00%) 76.67
smtp 870 ( 0.00%) 823842 ( 0.00%) 946.94
ftp 17 ( 0.00%) 1605 ( 0.00%) 94.41
pop3 11 ( 0.00%) 981 ( 0.00%) 89.18
dns 381 ( 0.00%) 100641 ( 0.00%) 264.15
bgp 94 ( 0.00%) 20903 ( 0.00%) 222.37
other 637630 ( 1.60%) 308216180 ( 0.86%) 483.38
udp6 104873 ( 0.26%) 28475654 ( 0.08%) 271.53
dns 71127 ( 0.18%) 17545532 ( 0.05%) 246.68
realaud 1 ( 0.00%) 119 ( 0.00%) 119.00
halflif 2 ( 0.00%) 218 ( 0.00%) 109.00
everque 2 ( 0.00%) 209 ( 0.00%) 104.50
other 33741 ( 0.08%) 10929576 ( 0.03%) 323.93
icmp6 20412 ( 0.05%) 2555399 ( 0.01%) 125.19
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1089 ( 0.00%) 1058943 ( 0.00%) 972.40
tcpdump file: 201205171400.dump.gz (905.19 MB)