Traffic Trace Info
DumpFile: 201205241400.dump
FileSize: 2800.01MB
Id: 201205241400
StartTime: Thu May 24 14:00:01 2012
EndTime: Thu May 24 14:15:00 2012
TotalTime: 899.39 seconds
TotalCapSize: -1886.17MB CapLen: 96 bytes
# of packets: 38677661 (30540.35MB)
AvgRate: 284.71Mbps stddev:51.17M
IP flow (unique src/dst pair) Information
# of flows: 1884257 (avg. 20.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 3.4% 2.6% 2.6% 2.1% 1.7% 1.2% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 1424664
Top 10 bandwidth usage (bytes/total in %):
7.9% 5.9% 4.7% 3.7% 3.7% 3.7% 3.7% 3.6% 3.6% 3.3%
# of IPv6 addresses: 7848
Top 10 bandwidth usage (bytes/total in %):
13.6% 11.4% 11.4% 9.8% 9.7% 9.1% 8.6% 7.2% 6.6% 6.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201205241400.pktlen.png)
detailed numbers
[ 32- 63]: 7370719
[ 64- 127]: 8175113
[ 128- 255]: 954825
[ 256- 511]: 996266
[ 512- 1023]: 851770
[ 1024- 2047]: 20328968
Protocol Breakdown
![[protocol breakdown chart]](201205241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38677661 (100.00%) 32023872859 (100.00%) 827.97
ip 37822803 ( 97.79%) 31373158152 ( 97.97%) 829.48
tcp 32030868 ( 82.81%) 28656288929 ( 89.48%) 894.65
http(s) 17065449 ( 44.12%) 22518987098 ( 70.32%) 1319.57
http(c) 10080224 ( 26.06%) 3019782381 ( 9.43%) 299.57
squid 151712 ( 0.39%) 68335970 ( 0.21%) 450.43
smtp 49593 ( 0.13%) 16682160 ( 0.05%) 336.38
ftp 15631 ( 0.04%) 2810941 ( 0.01%) 179.83
pop3 9461 ( 0.02%) 4651586 ( 0.01%) 491.66
imap 2918 ( 0.01%) 417940 ( 0.00%) 143.23
telnet 4733 ( 0.01%) 366168 ( 0.00%) 77.36
ssh 79846 ( 0.21%) 9710528 ( 0.03%) 121.62
dns 5296 ( 0.01%) 3454630 ( 0.01%) 652.31
bgp 656 ( 0.00%) 138547 ( 0.00%) 211.20
napster 210 ( 0.00%) 18805 ( 0.00%) 89.55
realaud 122 ( 0.00%) 9785 ( 0.00%) 80.20
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 45912 ( 0.12%) 36974499 ( 0.12%) 805.33
hotline 18 ( 0.00%) 2918 ( 0.00%) 162.11
other 4519086 ( 11.68%) 2973944913 ( 9.29%) 658.09
udp 3181119 ( 8.22%) 1768524352 ( 5.52%) 555.94
dns 527171 ( 1.36%) 134170577 ( 0.42%) 254.51
realaud 9 ( 0.00%) 1132 ( 0.00%) 125.78
halflif 69 ( 0.00%) 20207 ( 0.00%) 292.86
starcra 59 ( 0.00%) 10668 ( 0.00%) 180.81
everque 1290 ( 0.00%) 242032 ( 0.00%) 187.62
unreal 54 ( 0.00%) 19632 ( 0.00%) 363.56
quake 26 ( 0.00%) 5660 ( 0.00%) 217.69
cuseeme 2 ( 0.00%) 231 ( 0.00%) 115.50
other 2603886 ( 6.73%) 1631090683 ( 5.09%) 626.41
icmp 1389040 ( 3.59%) 157487903 ( 0.49%) 113.38
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 15207 ( 0.04%) 3360778 ( 0.01%) 221.00
ip6 1185170 ( 3.06%) 781546662 ( 2.44%) 659.44
pim 25 ( 0.00%) 1500 ( 0.00%) 60.00
other 21189 ( 0.05%) 5928758 ( 0.02%) 279.80
frag 105749 ( 0.27%) 80680597 ( 0.25%) 762.94
ip6 854858 ( 2.21%) 650714707 ( 2.03%) 761.20
tcp6 703924 ( 1.82%) 565050875 ( 1.76%) 802.72
http(s) 514331 ( 1.33%) 502667893 ( 1.57%) 977.32
http(c) 86791 ( 0.22%) 7925682 ( 0.02%) 91.32
smtp 454 ( 0.00%) 170059 ( 0.00%) 374.58
dns 231 ( 0.00%) 47940 ( 0.00%) 207.53
bgp 96 ( 0.00%) 22505 ( 0.00%) 234.43
other 102021 ( 0.26%) 54216796 ( 0.17%) 531.43
udp6 121520 ( 0.31%) 79832009 ( 0.25%) 656.95
dns 68322 ( 0.18%) 17500223 ( 0.05%) 256.14
halflif 3 ( 0.00%) 323 ( 0.00%) 107.67
starcra 1 ( 0.00%) 113 ( 0.00%) 113.00
quake 1 ( 0.00%) 118 ( 0.00%) 118.00
other 53193 ( 0.14%) 62331232 ( 0.19%) 1171.79
icmp6 26011 ( 0.07%) 3239919 ( 0.01%) 124.56
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3289 ( 0.01%) 2576412 ( 0.01%) 783.34
tcpdump file: 201205241400.dump.gz (911.70 MB)