Traffic Trace Info
DumpFile: 201112291400.dump
FileSize: 2532.20MB
Id: 201112291400
StartTime: Thu Dec 29 14:00:00 2011
EndTime: Thu Dec 29 14:15:00 2011
TotalTime: 900.15 seconds
TotalCapSize: 1987.22MB CapLen: 96 bytes
# of packets: 35715281 (24324.82MB)
AvgRate: 226.73Mbps stddev:49.29M
IP flow (unique src/dst pair) Information
# of flows: 679033 (avg. 52.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 2.7% 2.6% 2.4% 1.7% 1.6% 1.3% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 384408
Top 10 bandwidth usage (bytes/total in %):
19.9% 16.5% 9.0% 6.0% 5.9% 3.9% 3.8% 3.2% 3.1% 2.8%
# of IPv6 addresses: 4815
Top 10 bandwidth usage (bytes/total in %):
44.1% 43.2% 40.7% 27.6% 4.9% 4.6% 4.4% 3.4% 1.8% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201112291400.pktlen.png)
detailed numbers
[ 32- 63]: 8738702
[ 64- 127]: 8880262
[ 128- 255]: 1012942
[ 256- 511]: 511595
[ 512- 1023]: 473039
[ 1024- 2047]: 16098741
Protocol Breakdown
![[protocol breakdown chart]](201112291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35715281 (100.00%) 25506427643 (100.00%) 714.16
ip 35374813 ( 99.05%) 25250137034 ( 99.00%) 713.79
tcp 30845905 ( 86.37%) 23110054566 ( 90.60%) 749.21
http(s) 11758315 ( 32.92%) 16258953650 ( 63.74%) 1382.76
http(c) 10022661 ( 28.06%) 857785950 ( 3.36%) 85.58
squid 615589 ( 1.72%) 691620898 ( 2.71%) 1123.51
smtp 48721 ( 0.14%) 18448458 ( 0.07%) 378.66
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 40695 ( 0.11%) 22893012 ( 0.09%) 562.55
pop3 2745 ( 0.01%) 1238467 ( 0.00%) 451.17
imap 2332 ( 0.01%) 1290336 ( 0.01%) 553.32
telnet 1311 ( 0.00%) 115982 ( 0.00%) 88.47
ssh 64909 ( 0.18%) 11678835 ( 0.05%) 179.93
dns 52644 ( 0.15%) 5481039 ( 0.02%) 104.12
bgp 638 ( 0.00%) 112595 ( 0.00%) 176.48
napster 140 ( 0.00%) 22291 ( 0.00%) 159.22
realaud 34 ( 0.00%) 2516 ( 0.00%) 74.00
rtsp 101 ( 0.00%) 14882 ( 0.00%) 147.35
icecast 10518 ( 0.03%) 1314427 ( 0.01%) 124.97
hotline 63 ( 0.00%) 5089 ( 0.00%) 80.78
other 8224488 ( 23.03%) 5239076079 ( 20.54%) 637.01
udp 3245892 ( 9.09%) 1366386515 ( 5.36%) 420.96
dns 419735 ( 1.18%) 110554729 ( 0.43%) 263.39
realaud 13 ( 0.00%) 1993 ( 0.00%) 153.31
halflif 8614 ( 0.02%) 1968852 ( 0.01%) 228.56
starcra 211 ( 0.00%) 32626 ( 0.00%) 154.63
everque 296 ( 0.00%) 48955 ( 0.00%) 165.39
unreal 7 ( 0.00%) 957 ( 0.00%) 136.71
quake 23 ( 0.00%) 3029 ( 0.00%) 131.70
cuseeme 7 ( 0.00%) 470 ( 0.00%) 67.14
other 2816972 ( 7.89%) 1253768448 ( 4.92%) 445.08
icmp 283955 ( 0.80%) 28210800 ( 0.11%) 99.35
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 684 ( 0.00%) 259448 ( 0.00%) 379.31
ip6 990703 ( 2.77%) 742376935 ( 2.91%) 749.34
other 7489 ( 0.02%) 2829500 ( 0.01%) 377.82
frag 156 ( 0.00%) 154811 ( 0.00%) 992.38
ip6 340468 ( 0.95%) 256290609 ( 1.00%) 752.76
tcp6 274581 ( 0.77%) 238763755 ( 0.94%) 869.56
http(s) 77350 ( 0.22%) 111910822 ( 0.44%) 1446.81
http(c) 75526 ( 0.21%) 6730353 ( 0.03%) 89.11
smtp 104 ( 0.00%) 20770 ( 0.00%) 199.71
ftp 26 ( 0.00%) 2313 ( 0.00%) 88.96
dns 460 ( 0.00%) 71206 ( 0.00%) 154.80
bgp 97 ( 0.00%) 14832 ( 0.00%) 152.91
other 121018 ( 0.34%) 120013459 ( 0.47%) 991.70
udp6 42914 ( 0.12%) 13057147 ( 0.05%) 304.26
dns 34497 ( 0.10%) 8738970 ( 0.03%) 253.33
realaud 1 ( 0.00%) 102 ( 0.00%) 102.00
everque 4 ( 0.00%) 586 ( 0.00%) 146.50
quake 2 ( 0.00%) 225 ( 0.00%) 112.50
other 8410 ( 0.02%) 4317264 ( 0.02%) 513.35
icmp6 20845 ( 0.06%) 2987989 ( 0.01%) 143.34
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2016 ( 0.01%) 1466462 ( 0.01%) 727.41
tcpdump file: 201112291400.dump.gz (815.27 MB)