Traffic Trace Info
DumpFile: 201205271400.dump
FileSize: 2217.40MB
Id: 201205271400
StartTime: Sun May 27 14:00:00 2012
EndTime: Sun May 27 14:15:01 2012
TotalTime: 900.67 seconds
TotalCapSize: 1743.94MB CapLen: 96 bytes
# of packets: 31028224 (24936.39MB)
AvgRate: 232.25Mbps stddev:46.17M
IP flow (unique src/dst pair) Information
# of flows: 1767613 (avg. 17.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.3% 2.3% 1.9% 1.5% 1.5% 1.4% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 1372562
Top 10 bandwidth usage (bytes/total in %):
34.2% 7.8% 6.8% 5.8% 4.4% 4.0% 3.2% 2.4% 2.4% 2.1%
# of IPv6 addresses: 6595
Top 10 bandwidth usage (bytes/total in %):
81.6% 73.9% 6.1% 6.1% 1.9% 1.9% 1.3% 1.2% 1.1% 1.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201205271400.pktlen.png)
detailed numbers
[ 32- 63]: 6609065
[ 64- 127]: 6225333
[ 128- 255]: 587679
[ 256- 511]: 476397
[ 512- 1023]: 407610
[ 1024- 2047]: 16722140
Protocol Breakdown
![[protocol breakdown chart]](201205271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31028224 (100.00%) 26147701165 (100.00%) 842.71
ip 29911306 ( 96.40%) 25204779973 ( 96.39%) 842.65
tcp 23572342 ( 75.97%) 22168203895 ( 84.78%) 940.43
http(s) 13922200 ( 44.87%) 19681575869 ( 75.27%) 1413.68
http(c) 6104841 ( 19.68%) 549299759 ( 2.10%) 89.98
squid 110384 ( 0.36%) 81859985 ( 0.31%) 741.59
smtp 46776 ( 0.15%) 7161213 ( 0.03%) 153.10
nntp 46 ( 0.00%) 2788 ( 0.00%) 60.61
ftp 17151 ( 0.06%) 2973659 ( 0.01%) 173.38
pop3 2254 ( 0.01%) 1268207 ( 0.00%) 562.65
imap 2635 ( 0.01%) 425868 ( 0.00%) 161.62
telnet 692 ( 0.00%) 75500 ( 0.00%) 109.10
ssh 27271 ( 0.09%) 17378039 ( 0.07%) 637.24
dns 14962 ( 0.05%) 14254689 ( 0.05%) 952.73
bgp 718 ( 0.00%) 151030 ( 0.00%) 210.35
napster 219 ( 0.00%) 14011 ( 0.00%) 63.98
realaud 6 ( 0.00%) 366 ( 0.00%) 61.00
rtsp 17938 ( 0.06%) 26542941 ( 0.10%) 1479.70
icecast 11723 ( 0.04%) 6111004 ( 0.02%) 521.28
hotline 23 ( 0.00%) 1944 ( 0.00%) 84.52
other 3292502 ( 10.61%) 1779105613 ( 6.80%) 540.35
udp 3241071 ( 10.45%) 1433861596 ( 5.48%) 442.40
dns 310314 ( 1.00%) 77076156 ( 0.29%) 248.38
realaud 7 ( 0.00%) 722 ( 0.00%) 103.14
halflif 42 ( 0.00%) 4720 ( 0.00%) 112.38
starcra 28 ( 0.00%) 2783 ( 0.00%) 99.39
everque 187 ( 0.00%) 25117 ( 0.00%) 134.32
unreal 23 ( 0.00%) 1792 ( 0.00%) 77.91
quake 7 ( 0.00%) 887 ( 0.00%) 126.71
cuseeme 5 ( 0.00%) 450 ( 0.00%) 90.00
other 2911151 ( 9.38%) 1355552930 ( 5.18%) 465.64
icmp 1398808 ( 4.51%) 145145836 ( 0.56%) 103.76
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1338 ( 0.00%) 433420 ( 0.00%) 323.93
ip6 1661146 ( 5.35%) 1420142826 ( 5.43%) 854.92
pim 9 ( 0.00%) 540 ( 0.00%) 60.00
other 36407 ( 0.12%) 36972590 ( 0.14%) 1015.54
frag 250879 ( 0.81%) 191494995 ( 0.73%) 763.30
ip6 1116918 ( 3.60%) 942921192 ( 3.61%) 844.22
tcp6 1005150 ( 3.24%) 871904393 ( 3.33%) 867.44
http(s) 111418 ( 0.36%) 115366218 ( 0.44%) 1035.44
http(c) 80758 ( 0.26%) 7030922 ( 0.03%) 87.06
smtp 30 ( 0.00%) 11520 ( 0.00%) 384.00
dns 364 ( 0.00%) 72500 ( 0.00%) 199.18
bgp 119 ( 0.00%) 35751 ( 0.00%) 300.43
other 812461 ( 2.62%) 749387482 ( 2.87%) 922.37
udp6 89012 ( 0.29%) 68003174 ( 0.26%) 763.98
dns 40954 ( 0.13%) 9733841 ( 0.04%) 237.68
unreal 1 ( 0.00%) 113 ( 0.00%) 113.00
quake 1 ( 0.00%) 117 ( 0.00%) 117.00
other 48056 ( 0.15%) 58269103 ( 0.22%) 1212.53
icmp6 22215 ( 0.07%) 2559267 ( 0.01%) 115.20
ip6 84 ( 0.00%) 11462 ( 0.00%) 136.45
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 427 ( 0.00%) 438816 ( 0.00%) 1027.67
tcpdump file: 201205271400.dump.gz (697.96 MB)