Traffic Trace Info
DumpFile: 201205251400.dump
FileSize: 2623.32MB
Id: 201205251400
StartTime: Fri May 25 14:00:00 2012
EndTime: Fri May 25 14:15:00 2012
TotalTime: 900.09 seconds
TotalCapSize: -2030.45MB CapLen: 96 bytes
# of packets: 36553471 (29942.35MB)
AvgRate: 279.12Mbps stddev:77.50M
IP flow (unique src/dst pair) Information
# of flows: 1988659 (avg. 18.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.6% 2.8% 2.7% 1.9% 1.7% 1.6% 1.6% 1.5% 1.5% 1.5%
IP address Information
# of IPv4 addresses: 1461276
Top 10 bandwidth usage (bytes/total in %):
8.8% 8.8% 8.5% 7.8% 6.5% 4.2% 3.6% 3.5% 3.4% 3.2%
# of IPv6 addresses: 7988
Top 10 bandwidth usage (bytes/total in %):
20.3% 20.3% 18.6% 11.8% 8.4% 6.4% 4.6% 4.3% 4.3% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201205251400.pktlen.png)
detailed numbers
[ 32- 63]: 6741920
[ 64- 127]: 7180993
[ 128- 255]: 939938
[ 256- 511]: 823772
[ 512- 1023]: 739488
[ 1024- 2047]: 20127360
Protocol Breakdown
![[protocol breakdown chart]](201205251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36553471 (100.00%) 31396827345 (100.00%) 858.93
ip 35631633 ( 97.48%) 30809754714 ( 98.13%) 864.67
tcp 29162285 ( 79.78%) 27485240854 ( 87.54%) 942.49
http(s) 16743404 ( 45.81%) 22833582073 ( 72.73%) 1363.74
http(c) 8205326 ( 22.45%) 1559730787 ( 4.97%) 190.09
squid 53335 ( 0.15%) 40652609 ( 0.13%) 762.21
smtp 62317 ( 0.17%) 14200753 ( 0.05%) 227.88
nntp 13 ( 0.00%) 2566 ( 0.00%) 197.38
ftp 30223 ( 0.08%) 8505853 ( 0.03%) 281.44
pop3 4478 ( 0.01%) 1853114 ( 0.01%) 413.83
imap 1127 ( 0.00%) 169666 ( 0.00%) 150.55
telnet 747 ( 0.00%) 87771 ( 0.00%) 117.50
ssh 6081 ( 0.02%) 1639782 ( 0.01%) 269.66
dns 9459 ( 0.03%) 8179265 ( 0.03%) 864.71
bgp 646 ( 0.00%) 126957 ( 0.00%) 196.53
napster 56 ( 0.00%) 6276 ( 0.00%) 112.07
realaud 17 ( 0.00%) 2684 ( 0.00%) 157.88
icecast 10800 ( 0.03%) 5810005 ( 0.02%) 537.96
hotline 13 ( 0.00%) 1259 ( 0.00%) 96.85
other 4034243 ( 11.04%) 3010689434 ( 9.59%) 746.28
udp 3329706 ( 9.11%) 1783677265 ( 5.68%) 535.69
dns 509177 ( 1.39%) 132509236 ( 0.42%) 260.24
realaud 13 ( 0.00%) 1427 ( 0.00%) 109.77
halflif 95 ( 0.00%) 15418 ( 0.00%) 162.29
starcra 122 ( 0.00%) 16612 ( 0.00%) 136.16
everque 290 ( 0.00%) 45650 ( 0.00%) 157.41
unreal 3 ( 0.00%) 537 ( 0.00%) 179.00
quake 38 ( 0.00%) 4131 ( 0.00%) 108.71
cuseeme 6 ( 0.00%) 757 ( 0.00%) 126.17
other 2819904 ( 7.71%) 1651055484 ( 5.26%) 585.50
icmp 1523150 ( 4.17%) 167371150 ( 0.53%) 109.88
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 11454 ( 0.03%) 2408020 ( 0.01%) 210.23
ip6 1590060 ( 4.35%) 1368242761 ( 4.36%) 860.50
pim 29 ( 0.00%) 1740 ( 0.00%) 60.00
other 14764 ( 0.04%) 2793654 ( 0.01%) 189.22
frag 319 ( 0.00%) 289838 ( 0.00%) 908.58
ip6 921838 ( 2.52%) 587072631 ( 1.87%) 636.85
tcp6 813226 ( 2.22%) 551370833 ( 1.76%) 678.00
http(s) 306379 ( 0.84%) 296581469 ( 0.94%) 968.02
http(c) 77700 ( 0.21%) 7000002 ( 0.02%) 90.09
smtp 73 ( 0.00%) 35583 ( 0.00%) 487.44
ftp 2606 ( 0.01%) 229484 ( 0.00%) 88.06
pop3 15 ( 0.00%) 2465 ( 0.00%) 164.33
dns 363 ( 0.00%) 80006 ( 0.00%) 220.40
bgp 98 ( 0.00%) 28924 ( 0.00%) 295.14
other 425992 ( 1.17%) 247412900 ( 0.79%) 580.79
udp6 80707 ( 0.22%) 27669111 ( 0.09%) 342.83
dns 68617 ( 0.19%) 17066814 ( 0.05%) 248.73
quake 1 ( 0.00%) 111 ( 0.00%) 111.00
cuseeme 1 ( 0.00%) 109 ( 0.00%) 109.00
other 12088 ( 0.03%) 10602077 ( 0.03%) 877.07
icmp6 20386 ( 0.06%) 2558714 ( 0.01%) 125.51
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 7403 ( 0.02%) 5458177 ( 0.02%) 737.29
tcpdump file: 201205251400.dump.gz (831.05 MB)