Traffic Trace Info
DumpFile: 201205281400.dump
FileSize: 2591.00MB
Id: 201205281400
StartTime: Mon May 28 14:00:00 2012
EndTime: Mon May 28 14:15:01 2012
TotalTime: 900.85 seconds
TotalCapSize: 2043.35MB CapLen: 96 bytes
# of packets: 35889970 (25890.24MB)
AvgRate: 241.08Mbps stddev:46.83M
IP flow (unique src/dst pair) Information
# of flows: 1898257 (avg. 18.91 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 1.6% 1.3% 1.3% 1.2% 1.2% 1.1% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 1429694
Top 10 bandwidth usage (bytes/total in %):
23.2% 6.5% 6.1% 3.7% 3.7% 2.7% 2.3% 2.2% 2.2% 2.2%
# of IPv6 addresses: 8665
Top 10 bandwidth usage (bytes/total in %):
15.3% 12.6% 10.4% 10.3% 7.2% 6.5% 5.0% 5.0% 4.9% 4.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201205281400.pktlen.png)
detailed numbers
[ 32- 63]: 7188733
[ 64- 127]: 9187000
[ 128- 255]: 896874
[ 256- 511]: 770667
[ 512- 1023]: 756786
[ 1024- 2047]: 17089910
Protocol Breakdown
![[protocol breakdown chart]](201205281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35889970 (100.00%) 27147884247 (100.00%) 756.42
ip 34975177 ( 97.45%) 26699908528 ( 98.35%) 763.40
tcp 28413076 ( 79.17%) 23284149666 ( 85.77%) 819.49
http(s) 15141189 ( 42.19%) 20147146202 ( 74.21%) 1330.62
http(c) 9537955 ( 26.58%) 1654032316 ( 6.09%) 173.42
squid 83474 ( 0.23%) 26731046 ( 0.10%) 320.23
smtp 79983 ( 0.22%) 25671156 ( 0.09%) 320.96
nntp 10 ( 0.00%) 2427 ( 0.00%) 242.70
ftp 18791 ( 0.05%) 1474352 ( 0.01%) 78.46
pop3 9066 ( 0.03%) 1660706 ( 0.01%) 183.18
imap 1727 ( 0.00%) 241786 ( 0.00%) 140.00
telnet 60643 ( 0.17%) 4463533 ( 0.02%) 73.60
ssh 163464 ( 0.46%) 21216115 ( 0.08%) 129.79
dns 3188 ( 0.01%) 2013721 ( 0.01%) 631.66
bgp 665 ( 0.00%) 137419 ( 0.00%) 206.65
napster 353 ( 0.00%) 22562 ( 0.00%) 63.92
realaud 100 ( 0.00%) 8103 ( 0.00%) 81.03
rtsp 15608 ( 0.04%) 19332834 ( 0.07%) 1238.65
icecast 6889 ( 0.02%) 3246833 ( 0.01%) 471.31
hotline 10 ( 0.00%) 622 ( 0.00%) 62.20
other 3289955 ( 9.17%) 1376747573 ( 5.07%) 418.47
udp 3305630 ( 9.21%) 1666822557 ( 6.14%) 504.24
dns 549855 ( 1.53%) 142208558 ( 0.52%) 258.63
realaud 15 ( 0.00%) 1910 ( 0.00%) 127.33
halflif 899 ( 0.00%) 60081 ( 0.00%) 66.83
starcra 55 ( 0.00%) 7251 ( 0.00%) 131.84
everque 19363 ( 0.05%) 20551009 ( 0.08%) 1061.35
unreal 6 ( 0.00%) 1033 ( 0.00%) 172.17
quake 25 ( 0.00%) 3330 ( 0.00%) 133.20
cuseeme 4 ( 0.00%) 668 ( 0.00%) 167.00
other 2640873 ( 7.36%) 1497750569 ( 5.52%) 567.14
icmp 1426516 ( 3.97%) 145717947 ( 0.54%) 102.15
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 48133 ( 0.13%) 16568718 ( 0.06%) 344.23
ip6 1761531 ( 4.91%) 1581878514 ( 5.83%) 898.01
pim 11 ( 0.00%) 660 ( 0.00%) 60.00
other 20096 ( 0.06%) 4751306 ( 0.02%) 236.43
frag 233526 ( 0.65%) 178550675 ( 0.66%) 764.59
ip6 914793 ( 2.55%) 447975719 ( 1.65%) 489.70
tcp6 763865 ( 2.13%) 390850428 ( 1.44%) 511.67
http(s) 335565 ( 0.93%) 291875578 ( 1.08%) 869.80
http(c) 155181 ( 0.43%) 13130311 ( 0.05%) 84.61
smtp 126 ( 0.00%) 34544 ( 0.00%) 274.16
pop3 11 ( 0.00%) 981 ( 0.00%) 89.18
dns 360 ( 0.00%) 81030 ( 0.00%) 225.08
bgp 102 ( 0.00%) 26474 ( 0.00%) 259.55
other 272520 ( 0.76%) 85701510 ( 0.32%) 314.48
udp6 98834 ( 0.28%) 33732999 ( 0.12%) 341.31
dns 75955 ( 0.21%) 18780442 ( 0.07%) 247.26
realaud 1 ( 0.00%) 105 ( 0.00%) 105.00
starcra 5 ( 0.00%) 461 ( 0.00%) 92.20
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
unreal 1 ( 0.00%) 105 ( 0.00%) 105.00
quake 2 ( 0.00%) 212 ( 0.00%) 106.00
other 22869 ( 0.06%) 14951566 ( 0.06%) 653.79
icmp6 23324 ( 0.06%) 2984628 ( 0.01%) 127.96
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 28656 ( 0.08%) 20392172 ( 0.08%) 711.62
tcpdump file: 201205281400.dump.gz (857.02 MB)