Traffic Trace Info
DumpFile: 201205291400.dump
FileSize: 3341.32MB
Id: 201205291400
StartTime: Tue May 29 14:00:00 2012
EndTime: Tue May 29 14:15:00 2012
TotalTime: 900.07 seconds
TotalCapSize: -1451.92MB CapLen: 96 bytes
# of packets: 45693767 (36620.03MB)
AvgRate: 341.38Mbps stddev:72.34M
IP flow (unique src/dst pair) Information
# of flows: 1931916 (avg. 23.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 6.1% 2.5% 2.5% 2.4% 2.3% 2.2% 1.9% 1.7% 1.5%
IP address Information
# of IPv4 addresses: 1436712
Top 10 bandwidth usage (bytes/total in %):
11.9% 7.2% 6.5% 6.5% 6.4% 6.3% 6.2% 4.4% 4.3% 2.8%
# of IPv6 addresses: 8680
Top 10 bandwidth usage (bytes/total in %):
15.4% 15.4% 13.2% 13.2% 11.9% 9.5% 7.1% 5.6% 5.1% 4.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201205291400.pktlen.png)
detailed numbers
[ 32- 63]: 7917199
[ 64- 127]: 10237196
[ 128- 255]: 903369
[ 256- 511]: 1246166
[ 512- 1023]: 874308
[ 1024- 2047]: 24515529
Protocol Breakdown
![[protocol breakdown chart]](201205291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 45693767 (100.00%) 38398883033 (100.00%) 840.35
ip 44583376 ( 97.57%) 37806573388 ( 98.46%) 848.00
tcp 37542596 ( 82.16%) 33986486178 ( 88.51%) 905.28
http(s) 21520677 ( 47.10%) 29573823404 ( 77.02%) 1374.21
http(c) 11294621 ( 24.72%) 2117172990 ( 5.51%) 187.45
squid 59763 ( 0.13%) 38371686 ( 0.10%) 642.06
smtp 52911 ( 0.12%) 20167675 ( 0.05%) 381.16
nntp 4 ( 0.00%) 240 ( 0.00%) 60.00
ftp 20928 ( 0.05%) 1781188 ( 0.00%) 85.11
pop3 15471 ( 0.03%) 7106184 ( 0.02%) 459.32
imap 1839 ( 0.00%) 243442 ( 0.00%) 132.38
telnet 9235 ( 0.02%) 691620 ( 0.00%) 74.89
ssh 8869 ( 0.02%) 1637728 ( 0.00%) 184.66
dns 1760 ( 0.00%) 342342 ( 0.00%) 194.51
bgp 657 ( 0.00%) 137200 ( 0.00%) 208.83
napster 122 ( 0.00%) 9056 ( 0.00%) 74.23
realaud 42 ( 0.00%) 4144 ( 0.00%) 98.67
rtsp 19560 ( 0.04%) 23056058 ( 0.06%) 1178.74
icecast 805 ( 0.00%) 99567 ( 0.00%) 123.69
hotline 273 ( 0.00%) 16522 ( 0.00%) 60.52
other 4535057 ( 9.92%) 2201825012 ( 5.73%) 485.51
udp 3694058 ( 8.08%) 1891802049 ( 4.93%) 512.12
dns 845876 ( 1.85%) 209421019 ( 0.55%) 247.58
rip 6 ( 0.00%) 388 ( 0.00%) 64.67
realaud 14 ( 0.00%) 1495 ( 0.00%) 106.79
halflif 419 ( 0.00%) 33547 ( 0.00%) 80.06
starcra 24 ( 0.00%) 3690 ( 0.00%) 153.75
everque 3850 ( 0.01%) 3791783 ( 0.01%) 984.88
unreal 12 ( 0.00%) 1627 ( 0.00%) 135.58
quake 28 ( 0.00%) 3147 ( 0.00%) 112.39
cuseeme 6 ( 0.00%) 463 ( 0.00%) 77.17
other 2823540 ( 6.18%) 1677309375 ( 4.37%) 594.04
icmp 1508457 ( 3.30%) 167761058 ( 0.44%) 111.21
ipip 186 ( 0.00%) 19380 ( 0.00%) 104.19
ipsec 12974 ( 0.03%) 2402052 ( 0.01%) 185.14
ip6 1810761 ( 3.96%) 1755586067 ( 4.57%) 969.53
pim 13 ( 0.00%) 780 ( 0.00%) 60.00
other 14331 ( 0.03%) 2515824 ( 0.01%) 175.55
frag 42417 ( 0.09%) 32382001 ( 0.08%) 763.42
ip6 1110391 ( 2.43%) 592309645 ( 1.54%) 533.42
tcp6 1009606 ( 2.21%) 569514273 ( 1.48%) 564.10
http(s) 577627 ( 1.26%) 518358080 ( 1.35%) 897.39
http(c) 112863 ( 0.25%) 10439300 ( 0.03%) 92.50
smtp 189 ( 0.00%) 161290 ( 0.00%) 853.39
ftp 90 ( 0.00%) 8062 ( 0.00%) 89.58
dns 312 ( 0.00%) 66896 ( 0.00%) 214.41
bgp 102 ( 0.00%) 25836 ( 0.00%) 253.29
other 318423 ( 0.70%) 40454809 ( 0.11%) 127.05
udp6 76803 ( 0.17%) 18900538 ( 0.05%) 246.09
dns 74374 ( 0.16%) 18448081 ( 0.05%) 248.04
realaud 1 ( 0.00%) 103 ( 0.00%) 103.00
halflif 1 ( 0.00%) 104 ( 0.00%) 104.00
starcra 1 ( 0.00%) 109 ( 0.00%) 109.00
everque 1 ( 0.00%) 105 ( 0.00%) 105.00
quake 1 ( 0.00%) 118 ( 0.00%) 118.00
cuseeme 1 ( 0.00%) 96 ( 0.00%) 96.00
other 2423 ( 0.01%) 451822 ( 0.00%) 186.47
icmp6 22909 ( 0.05%) 2915931 ( 0.01%) 127.28
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 957 ( 0.00%) 963107 ( 0.00%) 1006.38
tcpdump file: 201205291400.dump.gz (1042.55 MB)