Traffic Trace Info
DumpFile: 201112301400.dump
FileSize: 2256.70MB
Id: 201112301400
StartTime: Fri Dec 30 14:00:00 2011
EndTime: Fri Dec 30 14:15:01 2011
TotalTime: 900.64 seconds
TotalCapSize: 1769.99MB CapLen: 96 bytes
# of packets: 31896875 (22830.85MB)
AvgRate: 212.63Mbps stddev:50.19M
IP flow (unique src/dst pair) Information
# of flows: 939046 (avg. 33.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.8% 6.2% 3.1% 2.5% 1.4% 1.4% 1.3% 1.1% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 567932
Top 10 bandwidth usage (bytes/total in %):
26.2% 19.6% 11.5% 7.6% 7.0% 6.4% 3.2% 2.6% 2.6% 2.5%
# of IPv6 addresses: 4815
Top 10 bandwidth usage (bytes/total in %):
64.9% 35.5% 16.3% 13.0% 8.8% 6.2% 6.2% 5.9% 2.4% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201112301400.pktlen.png)
detailed numbers
[ 32- 63]: 7499359
[ 64- 127]: 7373923
[ 128- 255]: 800718
[ 256- 511]: 553193
[ 512- 1023]: 643627
[ 1024- 2047]: 15026055
Protocol Breakdown
![[protocol breakdown chart]](201112301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31896875 (100.00%) 23939877252 (100.00%) 750.54
ip 31557199 ( 98.94%) 23802611572 ( 99.43%) 754.27
tcp 26627967 ( 83.48%) 21520673137 ( 89.89%) 808.20
http(s) 10597500 ( 33.22%) 14440383317 ( 60.32%) 1362.62
http(c) 6356240 ( 19.93%) 526384694 ( 2.20%) 82.81
squid 375642 ( 1.18%) 456483820 ( 1.91%) 1215.21
smtp 76552 ( 0.24%) 51120456 ( 0.21%) 667.79
ftp 12856 ( 0.04%) 1126617 ( 0.00%) 87.63
pop3 6094 ( 0.02%) 434621 ( 0.00%) 71.32
imap 3844 ( 0.01%) 398725 ( 0.00%) 103.73
telnet 1249 ( 0.00%) 111278 ( 0.00%) 89.09
ssh 71086 ( 0.22%) 14438338 ( 0.06%) 203.11
dns 48583 ( 0.15%) 5065419 ( 0.02%) 104.26
bgp 661 ( 0.00%) 124349 ( 0.00%) 188.12
napster 2512 ( 0.01%) 155305 ( 0.00%) 61.83
realaud 130 ( 0.00%) 8734 ( 0.00%) 67.18
rtsp 312 ( 0.00%) 65296 ( 0.00%) 209.28
icecast 19555 ( 0.06%) 5742110 ( 0.02%) 293.64
hotline 29 ( 0.00%) 1868 ( 0.00%) 64.41
other 9055122 ( 28.39%) 6018628190 ( 25.14%) 664.67
udp 3548450 ( 11.12%) 1621253387 ( 6.77%) 456.89
dns 368729 ( 1.16%) 96387830 ( 0.40%) 261.41
realaud 9 ( 0.00%) 1032 ( 0.00%) 114.67
halflif 21 ( 0.00%) 2064 ( 0.00%) 98.29
starcra 290 ( 0.00%) 33735 ( 0.00%) 116.33
everque 185 ( 0.00%) 35132 ( 0.00%) 189.90
unreal 7 ( 0.00%) 1325 ( 0.00%) 189.29
quake 12 ( 0.00%) 1114 ( 0.00%) 92.83
cuseeme 2 ( 0.00%) 157 ( 0.00%) 78.50
other 3043699 ( 9.54%) 1516511628 ( 6.33%) 498.25
icmp 332334 ( 1.04%) 43969010 ( 0.18%) 132.30
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 182 ( 0.00%) 31940 ( 0.00%) 175.49
ip6 1039997 ( 3.26%) 615394940 ( 2.57%) 591.73
other 8085 ( 0.03%) 1269998 ( 0.01%) 157.08
frag 282399 ( 0.89%) 215155118 ( 0.90%) 761.88
ip6 339676 ( 1.06%) 137265680 ( 0.57%) 404.11
tcp6 197880 ( 0.62%) 72264411 ( 0.30%) 365.19
http(s) 5066 ( 0.02%) 5130256 ( 0.02%) 1012.68
http(c) 32345 ( 0.10%) 2912208 ( 0.01%) 90.04
smtp 34 ( 0.00%) 21287 ( 0.00%) 626.09
dns 507 ( 0.00%) 80350 ( 0.00%) 158.48
bgp 93 ( 0.00%) 15147 ( 0.00%) 162.87
napster 3 ( 0.00%) 254 ( 0.00%) 84.67
other 159832 ( 0.50%) 64104909 ( 0.27%) 401.08
udp6 44341 ( 0.14%) 11602752 ( 0.05%) 261.67
dns 29653 ( 0.09%) 7510283 ( 0.03%) 253.27
halflif 1 ( 0.00%) 99 ( 0.00%) 99.00
everque 2 ( 0.00%) 216 ( 0.00%) 108.00
unreal 1 ( 0.00%) 99 ( 0.00%) 99.00
quake 1 ( 0.00%) 110 ( 0.00%) 110.00
other 14683 ( 0.05%) 4091945 ( 0.02%) 278.69
icmp6 26697 ( 0.08%) 3642318 ( 0.02%) 136.43
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 70643 ( 0.22%) 49740571 ( 0.21%) 704.11
tcpdump file: 201112301400.dump.gz (722.33 MB)