Traffic Trace Info
DumpFile: 201205301400.dump
FileSize: 4155.88MB
Id: 201205301400
StartTime: Wed May 30 14:00:01 2012
EndTime: Wed May 30 14:15:00 2012
TotalTime: 899.32 seconds
TotalCapSize: -857.95MB CapLen: 96 bytes
# of packets: 60150187 (33401.27MB)
AvgRate: 311.55Mbps stddev:52.25M
IP flow (unique src/dst pair) Information
# of flows: 12400658 (avg. 4.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.8% 4.3% 2.3% 2.0% 1.6% 1.3% 1.3% 1.3% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 9785668
Top 10 bandwidth usage (bytes/total in %):
10.7% 6.3% 5.5% 5.1% 5.0% 4.8% 4.6% 4.2% 3.7% 3.4%
# of IPv6 addresses: 8900
Top 10 bandwidth usage (bytes/total in %):
17.0% 11.5% 11.5% 8.0% 5.6% 5.2% 3.2% 3.0% 3.0% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201205301400.pktlen.png)
detailed numbers
[ 32- 63]: 21973680
[ 64- 127]: 13298390
[ 128- 255]: 1210870
[ 256- 511]: 1292451
[ 512- 1023]: 1085999
[ 1024- 2047]: 21288797
Protocol Breakdown
![[protocol breakdown chart]](201205301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 60150187 (100.00%) 35023769012 (100.00%) 582.27
ip 58298825 ( 96.92%) 33615485785 ( 95.98%) 576.61
tcp 34713184 ( 57.71%) 28399819052 ( 81.09%) 818.13
http(s) 17018493 ( 28.29%) 22554005320 ( 64.40%) 1325.26
http(c) 12088243 ( 20.10%) 2387889985 ( 6.82%) 197.54
squid 162080 ( 0.27%) 157536421 ( 0.45%) 971.97
smtp 65740 ( 0.11%) 22885622 ( 0.07%) 348.12
nntp 4 ( 0.00%) 240 ( 0.00%) 60.00
ftp 6040 ( 0.01%) 559889 ( 0.00%) 92.70
pop3 5017 ( 0.01%) 1528314 ( 0.00%) 304.63
imap 3012 ( 0.01%) 1054417 ( 0.00%) 350.07
telnet 3036 ( 0.01%) 245528 ( 0.00%) 80.87
ssh 229437 ( 0.38%) 48250702 ( 0.14%) 210.30
dns 3263 ( 0.01%) 350561 ( 0.00%) 107.44
bgp 659 ( 0.00%) 134927 ( 0.00%) 204.75
napster 202 ( 0.00%) 14052 ( 0.00%) 69.56
realaud 90 ( 0.00%) 8806 ( 0.00%) 97.84
rtsp 984 ( 0.00%) 63734 ( 0.00%) 64.77
icecast 46621 ( 0.08%) 40496883 ( 0.12%) 868.64
hotline 7 ( 0.00%) 438 ( 0.00%) 62.57
other 5080255 ( 8.45%) 3184791803 ( 9.09%) 626.90
udp 4156817 ( 6.91%) 1933728865 ( 5.52%) 465.19
dns 803829 ( 1.34%) 186447286 ( 0.53%) 231.95
rip 1 ( 0.00%) 72 ( 0.00%) 72.00
realaud 19 ( 0.00%) 1766 ( 0.00%) 92.95
halflif 21 ( 0.00%) 2677 ( 0.00%) 127.48
starcra 47 ( 0.00%) 6261 ( 0.00%) 133.21
everque 522 ( 0.00%) 143202 ( 0.00%) 274.33
unreal 18 ( 0.00%) 1530 ( 0.00%) 85.00
quake 48 ( 0.00%) 5269 ( 0.00%) 109.77
cuseeme 13 ( 0.00%) 1095 ( 0.00%) 84.23
other 3351931 ( 5.57%) 1747044144 ( 4.99%) 521.21
icmp 17213070 ( 28.62%) 1119238482 ( 3.20%) 65.02
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2097 ( 0.00%) 850550 ( 0.00%) 405.60
ip6 2158287 ( 3.59%) 2097869448 ( 5.99%) 972.01
pim 12 ( 0.00%) 720 ( 0.00%) 60.00
other 55173 ( 0.09%) 63959398 ( 0.18%) 1159.25
frag 1328 ( 0.00%) 1155061 ( 0.00%) 869.77
ip6 1851362 ( 3.08%) 1408283227 ( 4.02%) 760.67
tcp6 1734678 ( 2.88%) 1380723484 ( 3.94%) 795.95
http(s) 1171336 ( 1.95%) 1291443840 ( 3.69%) 1102.54
http(c) 147897 ( 0.25%) 14248057 ( 0.04%) 96.34
smtp 2247 ( 0.00%) 297999 ( 0.00%) 132.62
pop3 3 ( 0.00%) 222 ( 0.00%) 74.00
dns 480 ( 0.00%) 103588 ( 0.00%) 215.81
bgp 110 ( 0.00%) 26474 ( 0.00%) 240.67
other 412605 ( 0.69%) 74603304 ( 0.21%) 180.81
udp6 93000 ( 0.15%) 23762455 ( 0.07%) 255.51
dns 86465 ( 0.14%) 22041906 ( 0.06%) 254.92
realaud 2 ( 0.00%) 218 ( 0.00%) 109.00
halflif 2 ( 0.00%) 210 ( 0.00%) 105.00
quake 2 ( 0.00%) 211 ( 0.00%) 105.50
cuseeme 1 ( 0.00%) 106 ( 0.00%) 106.00
other 6528 ( 0.01%) 1719804 ( 0.00%) 263.45
icmp6 22697 ( 0.04%) 2901126 ( 0.01%) 127.82
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 872 ( 0.00%) 880502 ( 0.00%) 1009.75
tcpdump file: 201205301400.dump.gz (1373.33 MB)