Traffic Trace Info
DumpFile: 201205181400.dump
FileSize: 2511.88MB
Id: 201205181400
StartTime: Fri May 18 14:00:00 2012
EndTime: Fri May 18 14:15:00 2012
TotalTime: 899.85 seconds
TotalCapSize: 1982.26MB CapLen: 96 bytes
# of packets: 34708446 (26419.29MB)
AvgRate: 246.25Mbps stddev:41.15M
IP flow (unique src/dst pair) Information
# of flows: 1975885 (avg. 17.57 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 2.7% 2.6% 1.9% 1.5% 1.4% 1.2% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 1465750
Top 10 bandwidth usage (bytes/total in %):
13.7% 7.3% 6.0% 4.9% 4.0% 4.0% 3.9% 3.8% 2.8% 2.7%
# of IPv6 addresses: 5994
Top 10 bandwidth usage (bytes/total in %):
69.2% 61.7% 7.1% 5.2% 4.2% 3.7% 3.0% 2.8% 2.7% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201205181400.pktlen.png)
detailed numbers
[ 32- 63]: 6779167
[ 64- 127]: 7802037
[ 128- 255]: 935996
[ 256- 511]: 782490
[ 512- 1023]: 900719
[ 1024- 2047]: 17508037
Protocol Breakdown
![[protocol breakdown chart]](201205181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34708446 (100.00%) 27702631277 (100.00%) 798.15
ip 34115661 ( 98.29%) 27315892815 ( 98.60%) 800.68
tcp 28476883 ( 82.05%) 24898891013 ( 89.88%) 874.35
http(s) 15991775 ( 46.07%) 21199226450 ( 76.52%) 1325.63
http(c) 8635642 ( 24.88%) 1755667249 ( 6.34%) 203.30
squid 36736 ( 0.11%) 20921697 ( 0.08%) 569.51
smtp 62847 ( 0.18%) 23979925 ( 0.09%) 381.56
nntp 1201 ( 0.00%) 72060 ( 0.00%) 60.00
ftp 15473 ( 0.04%) 2712900 ( 0.01%) 175.33
pop3 12938 ( 0.04%) 3253900 ( 0.01%) 251.50
imap 2139 ( 0.01%) 675530 ( 0.00%) 315.82
telnet 3157 ( 0.01%) 250326 ( 0.00%) 79.29
ssh 35216 ( 0.10%) 4976160 ( 0.02%) 141.30
dns 1506 ( 0.00%) 280774 ( 0.00%) 186.44
bgp 626 ( 0.00%) 123447 ( 0.00%) 197.20
napster 410 ( 0.00%) 29568 ( 0.00%) 72.12
realaud 59 ( 0.00%) 5133 ( 0.00%) 87.00
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 23825 ( 0.07%) 12973507 ( 0.05%) 544.53
hotline 79 ( 0.00%) 5227 ( 0.00%) 66.16
other 3653250 ( 10.53%) 1873736876 ( 6.76%) 512.90
udp 3122618 ( 9.00%) 1397428701 ( 5.04%) 447.52
dns 641934 ( 1.85%) 155589142 ( 0.56%) 242.38
rip 1 ( 0.00%) 69 ( 0.00%) 69.00
realaud 7 ( 0.00%) 885 ( 0.00%) 126.43
halflif 99 ( 0.00%) 16363 ( 0.00%) 165.28
starcra 32 ( 0.00%) 7920 ( 0.00%) 247.50
everque 304 ( 0.00%) 65828 ( 0.00%) 216.54
unreal 34 ( 0.00%) 7285 ( 0.00%) 214.26
quake 18 ( 0.00%) 2340 ( 0.00%) 130.00
cuseeme 2 ( 0.00%) 201 ( 0.00%) 100.50
other 2479962 ( 7.15%) 1241645223 ( 4.48%) 500.67
icmp 1414344 ( 4.07%) 157001320 ( 0.57%) 111.01
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 3130 ( 0.01%) 931864 ( 0.00%) 297.72
ip6 1017400 ( 2.93%) 756595456 ( 2.73%) 743.66
pim 33 ( 0.00%) 1980 ( 0.00%) 60.00
other 81068 ( 0.23%) 105023211 ( 0.38%) 1295.50
frag 1170 ( 0.00%) 1066070 ( 0.00%) 911.17
ip6 592785 ( 1.71%) 386738462 ( 1.40%) 652.41
tcp6 491129 ( 1.42%) 358924249 ( 1.30%) 730.81
http(s) 41658 ( 0.12%) 41753627 ( 0.15%) 1002.30
http(c) 168119 ( 0.48%) 14925196 ( 0.05%) 88.78
smtp 107 ( 0.00%) 55137 ( 0.00%) 515.30
ftp 17 ( 0.00%) 1605 ( 0.00%) 94.41
dns 207 ( 0.00%) 50286 ( 0.00%) 242.93
bgp 90 ( 0.00%) 20135 ( 0.00%) 223.72
other 280931 ( 0.81%) 302118263 ( 1.09%) 1075.42
udp6 78196 ( 0.23%) 24049753 ( 0.09%) 307.56
dns 68474 ( 0.20%) 17022317 ( 0.06%) 248.60
halflif 1 ( 0.00%) 101 ( 0.00%) 101.00
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
cuseeme 1 ( 0.00%) 104 ( 0.00%) 104.00
other 9719 ( 0.03%) 7027125 ( 0.03%) 723.03
icmp6 22412 ( 0.06%) 2789157 ( 0.01%) 124.45
ip6 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 932 ( 0.00%) 959575 ( 0.00%) 1029.59
tcpdump file: 201205181400.dump.gz (789.94 MB)