Traffic Trace Info
DumpFile: 201205261400.dump
FileSize: 3027.36MB
Id: 201205261400
StartTime: Sat May 26 14:00:00 2012
EndTime: Sat May 26 14:15:01 2012
TotalTime: 900.64 seconds
TotalCapSize: -1707.13MB CapLen: 96 bytes
# of packets: 41843480 (33653.07MB)
AvgRate: 313.49Mbps stddev:51.89M
IP flow (unique src/dst pair) Information
# of flows: 1914357 (avg. 21.86 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.3% 2.8% 2.4% 2.4% 2.3% 2.1% 1.8% 1.8% 1.6% 1.5%
IP address Information
# of IPv4 addresses: 1428165
Top 10 bandwidth usage (bytes/total in %):
19.8% 12.6% 6.5% 5.8% 5.1% 4.5% 3.3% 2.8% 2.8% 2.7%
# of IPv6 addresses: 6621
Top 10 bandwidth usage (bytes/total in %):
92.8% 90.8% 1.7% 1.7% 1.3% 1.3% 0.9% 0.7% 0.6% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201205261400.pktlen.png)
detailed numbers
[ 32- 63]: 9299270
[ 64- 127]: 7532577
[ 128- 255]: 1116010
[ 256- 511]: 616353
[ 512- 1023]: 698008
[ 1024- 2047]: 22581262
Protocol Breakdown
![[protocol breakdown chart]](201205261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41843480 (100.00%) 35287803007 (100.00%) 843.33
ip 37834114 ( 90.42%) 30518798900 ( 86.49%) 806.65
tcp 29031962 ( 69.38%) 25951105106 ( 73.54%) 893.88
http(s) 15969072 ( 38.16%) 22327337654 ( 63.27%) 1398.16
http(c) 7223000 ( 17.26%) 1269905856 ( 3.60%) 175.81
squid 196408 ( 0.47%) 153947485 ( 0.44%) 783.81
smtp 41314 ( 0.10%) 7708568 ( 0.02%) 186.58
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 23438 ( 0.06%) 10857681 ( 0.03%) 463.25
pop3 99614 ( 0.24%) 6613337 ( 0.02%) 66.39
imap 2117 ( 0.01%) 224172 ( 0.00%) 105.89
telnet 6921 ( 0.02%) 518352 ( 0.00%) 74.90
ssh 984711 ( 2.35%) 151044752 ( 0.43%) 153.39
dns 1798 ( 0.00%) 341095 ( 0.00%) 189.71
bgp 648 ( 0.00%) 138690 ( 0.00%) 214.03
napster 94 ( 0.00%) 6958 ( 0.00%) 74.02
realaud 114 ( 0.00%) 7582 ( 0.00%) 66.51
icecast 3248 ( 0.01%) 511869 ( 0.00%) 157.60
hotline 14 ( 0.00%) 870 ( 0.00%) 62.14
other 4479445 ( 10.71%) 2021939811 ( 5.73%) 451.38
udp 5804101 ( 13.87%) 3024502685 ( 8.57%) 521.10
dns 370782 ( 0.89%) 93302211 ( 0.26%) 251.64
realaud 8 ( 0.00%) 1056 ( 0.00%) 132.00
halflif 1134 ( 0.00%) 69262 ( 0.00%) 61.08
starcra 12 ( 0.00%) 2176 ( 0.00%) 181.33
everque 360 ( 0.00%) 65292 ( 0.00%) 181.37
unreal 1360 ( 0.00%) 261394 ( 0.00%) 192.20
quake 17 ( 0.00%) 1838 ( 0.00%) 108.12
cuseeme 5 ( 0.00%) 742 ( 0.00%) 148.40
other 4858316 ( 11.61%) 2894991061 ( 8.20%) 595.88
icmp 1489871 ( 3.56%) 156297079 ( 0.44%) 104.91
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2695 ( 0.01%) 917578 ( 0.00%) 340.47
ip6 1490841 ( 3.56%) 1383309691 ( 3.92%) 927.87
pim 30 ( 0.00%) 1800 ( 0.00%) 60.00
other 14429 ( 0.03%) 2645691 ( 0.01%) 183.36
frag 2384079 ( 5.70%) 1814725733 ( 5.14%) 761.19
ip6 4009366 ( 9.58%) 4769004107 ( 13.51%) 1189.47
tcp6 3940784 ( 9.42%) 4753977698 ( 13.47%) 1206.35
http(s) 207864 ( 0.50%) 219172423 ( 0.62%) 1054.40
http(c) 65207 ( 0.16%) 5855523 ( 0.02%) 89.80
smtp 96 ( 0.00%) 52461 ( 0.00%) 546.47
ftp 23 ( 0.00%) 2135 ( 0.00%) 92.83
dns 402 ( 0.00%) 65647 ( 0.00%) 163.30
bgp 114 ( 0.00%) 30518 ( 0.00%) 267.70
other 3667078 ( 8.76%) 4528798991 ( 12.83%) 1234.99
udp6 49782 ( 0.12%) 12033425 ( 0.03%) 241.72
dns 47206 ( 0.11%) 11614251 ( 0.03%) 246.03
unreal 1 ( 0.00%) 114 ( 0.00%) 114.00
other 2575 ( 0.01%) 419060 ( 0.00%) 162.74
icmp6 17885 ( 0.04%) 2163833 ( 0.01%) 120.99
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 802 ( 0.00%) 813759 ( 0.00%) 1014.66
tcpdump file: 201205261400.dump.gz (921.95 MB)