Traffic Trace Info
DumpFile: 201205311400.dump
FileSize: 3357.40MB
Id: 201205311400
StartTime: Thu May 31 14:00:01 2012
EndTime: Thu May 31 14:15:00 2012
TotalTime: 899.50 seconds
TotalCapSize: -1500.02MB CapLen: 96 bytes
# of packets: 49899924 (24808.46MB)
AvgRate: 251.40Mbps stddev:41.96M
IP flow (unique src/dst pair) Information
# of flows: 11302083 (avg. 4.42 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 4.1% 2.2% 1.8% 1.5% 1.2% 1.1% 1.0% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 8750725
Top 10 bandwidth usage (bytes/total in %):
13.3% 12.4% 4.8% 4.6% 4.5% 4.3% 4.1% 3.4% 2.9% 2.4%
# of IPv6 addresses: 7426
Top 10 bandwidth usage (bytes/total in %):
7.0% 6.6% 5.1% 4.4% 3.9% 3.1% 3.1% 2.8% 2.6% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201205311400.pktlen.png)
detailed numbers
[ 32- 63]: 20224621
[ 64- 127]: 11540547
[ 128- 255]: 791935
[ 256- 511]: 905200
[ 512- 1023]: 684774
[ 1024- 2047]: 15752847
Protocol Breakdown
![[protocol breakdown chart]](201205311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 49899924 (100.00%) 26013556378 (100.00%) 521.31
ip 48419708 ( 97.03%) 24920666642 ( 95.80%) 514.68
tcp 24816893 ( 49.73%) 18549187901 ( 71.31%) 747.44
http(s) 12357733 ( 24.77%) 14688731799 ( 56.47%) 1188.63
http(c) 7568713 ( 15.17%) 1374151427 ( 5.28%) 181.56
squid 105463 ( 0.21%) 39643942 ( 0.15%) 375.90
smtp 59420 ( 0.12%) 21401800 ( 0.08%) 360.18
nntp 97 ( 0.00%) 5822 ( 0.00%) 60.02
ftp 5952 ( 0.01%) 563517 ( 0.00%) 94.68
pop3 7158 ( 0.01%) 2689942 ( 0.01%) 375.80
imap 2331 ( 0.00%) 451144 ( 0.00%) 193.54
telnet 13022 ( 0.03%) 986302 ( 0.00%) 75.74
ssh 12060 ( 0.02%) 3028351 ( 0.01%) 251.11
dns 4837 ( 0.01%) 2106452 ( 0.01%) 435.49
bgp 615 ( 0.00%) 131974 ( 0.00%) 214.59
napster 277 ( 0.00%) 18817 ( 0.00%) 67.93
realaud 67 ( 0.00%) 5662 ( 0.00%) 84.51
rtsp 12649 ( 0.03%) 12331982 ( 0.05%) 974.94
icecast 23262 ( 0.05%) 17351206 ( 0.07%) 745.90
hotline 38 ( 0.00%) 2394 ( 0.00%) 63.00
other 4643199 ( 9.31%) 2385585368 ( 9.17%) 513.78
udp 7411300 ( 14.85%) 4284776977 ( 16.47%) 578.14
dns 631320 ( 1.27%) 155221292 ( 0.60%) 245.87
realaud 15 ( 0.00%) 1497 ( 0.00%) 99.80
halflif 25 ( 0.00%) 2087 ( 0.00%) 83.48
starcra 49 ( 0.00%) 7385 ( 0.00%) 150.71
everque 315 ( 0.00%) 50140 ( 0.00%) 159.17
unreal 17 ( 0.00%) 2012 ( 0.00%) 118.35
quake 16 ( 0.00%) 2246 ( 0.00%) 140.38
cuseeme 2 ( 0.00%) 137 ( 0.00%) 68.50
other 6181999 ( 12.39%) 4090864124 ( 15.73%) 661.74
icmp 14350067 ( 28.76%) 942563042 ( 3.62%) 65.68
ipip 172 ( 0.00%) 17924 ( 0.00%) 104.21
ipsec 12242 ( 0.02%) 3556044 ( 0.01%) 290.48
ip6 1816462 ( 3.64%) 1138423902 ( 4.38%) 626.73
pim 13 ( 0.00%) 780 ( 0.00%) 60.00
other 12559 ( 0.03%) 2140072 ( 0.01%) 170.40
frag 3770993 ( 7.56%) 2869334765 ( 11.03%) 760.90
ip6 1480216 ( 2.97%) 1092889736 ( 4.20%) 738.33
tcp6 1335970 ( 2.68%) 1012963836 ( 3.89%) 758.22
http(s) 836480 ( 1.68%) 880760880 ( 3.39%) 1052.94
http(c) 142739 ( 0.29%) 14283684 ( 0.05%) 100.07
smtp 314 ( 0.00%) 115110 ( 0.00%) 366.59
dns 642 ( 0.00%) 127356 ( 0.00%) 198.37
bgp 85 ( 0.00%) 18602 ( 0.00%) 218.85
other 355710 ( 0.71%) 117658204 ( 0.45%) 330.77
udp6 122157 ( 0.24%) 75953260 ( 0.29%) 621.77
dns 74606 ( 0.15%) 18222926 ( 0.07%) 244.26
everque 2 ( 0.00%) 223 ( 0.00%) 111.50
unreal 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 2 ( 0.00%) 213 ( 0.00%) 106.50
other 47546 ( 0.10%) 57729792 ( 0.22%) 1214.19
icmp6 20612 ( 0.04%) 2732334 ( 0.01%) 132.56
ip6 79 ( 0.00%) 10772 ( 0.00%) 136.35
pim6 27 ( 0.00%) 3672 ( 0.00%) 136.00
other6 1371 ( 0.00%) 1225862 ( 0.00%) 894.14
tcpdump file: 201205311400.dump.gz (1111.24 MB)