Traffic Trace Info
DumpFile: 201112121400.dump
FileSize: 3905.63MB
Id: 201112121400
StartTime: Mon Dec 12 14:00:01 2011
EndTime: Mon Dec 12 14:15:00 2011
TotalTime: 899.51 seconds
TotalCapSize: -1060.60MB CapLen: 96 bytes
# of packets: 57030201 (31389.53MB)
AvgRate: 292.78Mbps stddev:57.88M
IP flow (unique src/dst pair) Information
# of flows: 11442028 (avg. 4.98 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.6% 3.9% 1.7% 1.2% 1.1% 1.1% 1.0% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 8845222
Top 10 bandwidth usage (bytes/total in %):
13.6% 13.6% 8.6% 7.2% 6.7% 4.5% 3.9% 3.9% 2.8% 2.6%
# of IPv6 addresses: 4768
Top 10 bandwidth usage (bytes/total in %):
35.5% 20.7% 10.1% 9.7% 9.2% 7.9% 7.1% 6.8% 4.2% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201112121400.pktlen.png)
detailed numbers
[ 32- 63]: 22151916
[ 64- 127]: 11656221
[ 128- 255]: 1358983
[ 256- 511]: 820757
[ 512- 1023]: 875309
[ 1024- 2047]: 20167015
Protocol Breakdown
![[protocol breakdown chart]](201112121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 57030201 (100.00%) 32914307516 (100.00%) 577.14
ip 56331980 ( 98.78%) 32791599060 ( 99.63%) 582.11
tcp 34141538 ( 59.87%) 27960943073 ( 84.95%) 818.97
http(s) 17912758 ( 31.41%) 24716730114 ( 75.09%) 1379.84
http(c) 10197734 ( 17.88%) 1250166128 ( 3.80%) 122.59
squid 279001 ( 0.49%) 245790812 ( 0.75%) 880.97
smtp 116726 ( 0.20%) 63479186 ( 0.19%) 543.83
ftp 27907 ( 0.05%) 18298203 ( 0.06%) 655.69
pop3 21779 ( 0.04%) 2095199 ( 0.01%) 96.20
imap 1881 ( 0.00%) 335434 ( 0.00%) 178.33
telnet 3937 ( 0.01%) 321073 ( 0.00%) 81.55
ssh 37261 ( 0.07%) 16922489 ( 0.05%) 454.16
dns 50515 ( 0.09%) 4286601 ( 0.01%) 84.86
bgp 635 ( 0.00%) 113311 ( 0.00%) 178.44
napster 841 ( 0.00%) 63912 ( 0.00%) 76.00
realaud 92 ( 0.00%) 6123 ( 0.00%) 66.55
rtsp 11249 ( 0.02%) 11698866 ( 0.04%) 1039.99
icecast 1685 ( 0.00%) 671244 ( 0.00%) 398.36
hotline 10 ( 0.00%) 626 ( 0.00%) 62.60
other 5477525 ( 9.60%) 1629963588 ( 4.95%) 297.57
udp 4137464 ( 7.25%) 1727129501 ( 5.25%) 417.44
dns 581065 ( 1.02%) 140035550 ( 0.43%) 241.00
rip 4 ( 0.00%) 300 ( 0.00%) 75.00
realaud 12 ( 0.00%) 1600 ( 0.00%) 133.33
halflif 31 ( 0.00%) 3574 ( 0.00%) 115.29
starcra 88 ( 0.00%) 9857 ( 0.00%) 112.01
everque 611 ( 0.00%) 140022 ( 0.00%) 229.17
unreal 87 ( 0.00%) 16490 ( 0.00%) 189.54
quake 33 ( 0.00%) 3319 ( 0.00%) 100.58
cuseeme 9 ( 0.00%) 1651 ( 0.00%) 183.44
other 3540193 ( 6.21%) 1585924172 ( 4.82%) 447.98
icmp 15975860 ( 28.01%) 1033251548 ( 3.14%) 64.68
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 3282 ( 0.01%) 1023868 ( 0.00%) 311.96
ip6 2062784 ( 3.62%) 2066336338 ( 6.28%) 1001.72
other 10867 ( 0.02%) 2895462 ( 0.01%) 266.45
frag 99120 ( 0.17%) 76322217 ( 0.23%) 770.00
ip6 698221 ( 1.22%) 122708456 ( 0.37%) 175.74
tcp6 598596 ( 1.05%) 98548382 ( 0.30%) 164.63
http(s) 18787 ( 0.03%) 17860223 ( 0.05%) 950.67
http(c) 338774 ( 0.59%) 27534039 ( 0.08%) 81.28
smtp 254 ( 0.00%) 233564 ( 0.00%) 919.54
ftp 51 ( 0.00%) 4664 ( 0.00%) 91.45
pop3 70 ( 0.00%) 6237 ( 0.00%) 89.10
dns 330 ( 0.00%) 72280 ( 0.00%) 219.03
bgp 83 ( 0.00%) 12122 ( 0.00%) 146.05
other 240247 ( 0.42%) 52825253 ( 0.16%) 219.88
udp6 74971 ( 0.13%) 18938176 ( 0.06%) 252.61
dns 47953 ( 0.08%) 13963269 ( 0.04%) 291.19
realaud 1 ( 0.00%) 104 ( 0.00%) 104.00
everque 1 ( 0.00%) 119 ( 0.00%) 119.00
unreal 1 ( 0.00%) 90 ( 0.00%) 90.00
other 27015 ( 0.05%) 4974594 ( 0.02%) 184.14
icmp6 22309 ( 0.04%) 3466334 ( 0.01%) 155.38
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2233 ( 0.00%) 1740308 ( 0.01%) 779.36
tcpdump file: 201112121400.dump.gz (1284.66 MB)