Traffic Trace Info
DumpFile: 201205221400.dump
FileSize: 2967.02MB
Id: 201205221400
StartTime: Tue May 22 14:00:01 2012
EndTime: Tue May 22 14:15:01 2012
TotalTime: 899.84 seconds
TotalCapSize: -1743.93MB CapLen: 96 bytes
# of packets: 40301189 (29876.90MB)
AvgRate: 278.47Mbps stddev:47.64M
IP flow (unique src/dst pair) Information
# of flows: 1877043 (avg. 21.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 2.8% 2.8% 2.6% 1.5% 1.3% 1.2% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 1417047
Top 10 bandwidth usage (bytes/total in %):
14.4% 6.1% 5.8% 4.2% 4.0% 3.5% 3.4% 3.0% 3.0% 3.0%
# of IPv6 addresses: 9035
Top 10 bandwidth usage (bytes/total in %):
21.5% 21.5% 19.9% 10.4% 10.0% 10.0% 8.8% 8.8% 7.9% 5.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201205221400.pktlen.png)
detailed numbers
[ 32- 63]: 7216802
[ 64- 127]: 10235875
[ 128- 255]: 972547
[ 256- 511]: 1014938
[ 512- 1023]: 1164437
[ 1024- 2047]: 19696590
Protocol Breakdown
![[protocol breakdown chart]](201205221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40301189 (100.00%) 31328197272 (100.00%) 777.35
ip 37977861 ( 94.24%) 30408148450 ( 97.06%) 800.68
tcp 31654471 ( 78.54%) 27453369691 ( 87.63%) 867.28
http(s) 17174992 ( 42.62%) 22641278688 ( 72.27%) 1318.27
http(c) 8973226 ( 22.27%) 1699301483 ( 5.42%) 189.37
squid 145972 ( 0.36%) 163983345 ( 0.52%) 1123.39
smtp 692240 ( 1.72%) 127727665 ( 0.41%) 184.51
nntp 162 ( 0.00%) 9722 ( 0.00%) 60.01
ftp 23018 ( 0.06%) 3311891 ( 0.01%) 143.88
pop3 5483 ( 0.01%) 1567736 ( 0.01%) 285.93
imap 7434 ( 0.02%) 4200707 ( 0.01%) 565.07
telnet 1891 ( 0.00%) 160469 ( 0.00%) 84.86
ssh 553229 ( 1.37%) 109458129 ( 0.35%) 197.85
dns 10648 ( 0.03%) 7805519 ( 0.02%) 733.05
bgp 646 ( 0.00%) 123122 ( 0.00%) 190.59
napster 289 ( 0.00%) 19595 ( 0.00%) 67.80
realaud 233 ( 0.00%) 14316 ( 0.00%) 61.44
rtsp 11785 ( 0.03%) 13638313 ( 0.04%) 1157.26
icecast 22626 ( 0.06%) 23108749 ( 0.07%) 1021.34
hotline 35 ( 0.00%) 3601 ( 0.00%) 102.89
other 4030562 ( 10.00%) 2657656641 ( 8.48%) 659.38
udp 3205554 ( 7.95%) 1573045401 ( 5.02%) 490.72
dns 729585 ( 1.81%) 183886094 ( 0.59%) 252.04
rip 5 ( 0.00%) 432 ( 0.00%) 86.40
realaud 12 ( 0.00%) 1392 ( 0.00%) 116.00
halflif 44 ( 0.00%) 6715 ( 0.00%) 152.61
starcra 11 ( 0.00%) 1434 ( 0.00%) 130.36
everque 191 ( 0.00%) 45203 ( 0.00%) 236.66
unreal 55 ( 0.00%) 21098 ( 0.00%) 383.60
quake 19 ( 0.00%) 1869 ( 0.00%) 98.37
cuseeme 2 ( 0.00%) 170 ( 0.00%) 85.00
other 2475453 ( 6.14%) 1389046294 ( 4.43%) 561.13
icmp 1380103 ( 3.42%) 130940619 ( 0.42%) 94.88
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 10503 ( 0.03%) 3001370 ( 0.01%) 285.76
ip6 1709696 ( 4.24%) 1243290914 ( 3.97%) 727.20
pim 30 ( 0.00%) 1800 ( 0.00%) 60.00
other 17319 ( 0.04%) 4479385 ( 0.01%) 258.64
frag 817 ( 0.00%) 707275 ( 0.00%) 865.70
ip6 2323328 ( 5.76%) 920048822 ( 2.94%) 396.00
tcp6 2204589 ( 5.47%) 884766217 ( 2.82%) 401.33
http(s) 782975 ( 1.94%) 747665652 ( 2.39%) 954.90
http(c) 1359636 ( 3.37%) 101750566 ( 0.32%) 74.84
squid 6 ( 0.00%) 476 ( 0.00%) 79.33
smtp 27 ( 0.00%) 15123 ( 0.00%) 560.11
ftp 151 ( 0.00%) 14720 ( 0.00%) 97.48
ssh 1687 ( 0.00%) 169202 ( 0.00%) 100.30
dns 343 ( 0.00%) 82033 ( 0.00%) 239.16
bgp 94 ( 0.00%) 22661 ( 0.00%) 241.07
hotline 10 ( 0.00%) 1758 ( 0.00%) 175.80
other 59660 ( 0.15%) 35044026 ( 0.11%) 587.40
udp6 89167 ( 0.22%) 30699279 ( 0.10%) 344.29
dns 72150 ( 0.18%) 17858896 ( 0.06%) 247.52
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
everque 1 ( 0.00%) 100 ( 0.00%) 100.00
quake 3 ( 0.00%) 323 ( 0.00%) 107.67
other 17012 ( 0.04%) 12839854 ( 0.04%) 754.75
icmp6 28344 ( 0.07%) 3450517 ( 0.01%) 121.74
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1115 ( 0.00%) 1117385 ( 0.00%) 1002.14
tcpdump file: 201205221400.dump.gz (921.67 MB)