Traffic Trace Info
DumpFile: 201209121400.dump
FileSize: 2389.87MB
Id: 201209121400
StartTime: Wed Sep 12 14:00:00 2012
EndTime: Wed Sep 12 14:15:00 2012
TotalTime: 900.36 seconds
TotalCapSize: 1832.38MB CapLen: 96 bytes
# of packets: 36534725 (15346.95MB)
AvgRate: 142.94Mbps stddev:25.92M
IP flow (unique src/dst pair) Information
# of flows: 11077961 (avg. 3.30 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 3.5% 2.8% 1.5% 1.2% 1.1% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 8657431
Top 10 bandwidth usage (bytes/total in %):
9.2% 6.2% 5.8% 5.0% 4.7% 4.5% 3.9% 3.7% 3.6% 3.5%
# of IPv6 addresses: 8017
Top 10 bandwidth usage (bytes/total in %):
16.8% 15.0% 6.4% 5.5% 3.9% 3.4% 3.2% 3.1% 3.0% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201209121400.pktlen.png)
detailed numbers
[ 32- 63]: 18777693
[ 64- 127]: 6462021
[ 128- 255]: 721735
[ 256- 511]: 571135
[ 512- 1023]: 695856
[ 1024- 2047]: 9306285
Protocol Breakdown
![[protocol breakdown chart]](201209121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36534725 (100.00%) 16092445391 (100.00%) 440.47
ip 35855644 ( 98.14%) 15507483426 ( 96.36%) 432.50
tcp 17540540 ( 48.01%) 13133768495 ( 81.61%) 748.77
http(s) 7734944 ( 21.17%) 9355114871 ( 58.13%) 1209.46
http(c) 6207738 ( 16.99%) 1141803579 ( 7.10%) 183.93
squid 60800 ( 0.17%) 32188954 ( 0.20%) 529.42
smtp 71849 ( 0.20%) 15621562 ( 0.10%) 217.42
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 13994 ( 0.04%) 2990864 ( 0.02%) 213.72
pop3 5141 ( 0.01%) 4012020 ( 0.02%) 780.40
imap 6362 ( 0.02%) 5086741 ( 0.03%) 799.55
telnet 10856 ( 0.03%) 814472 ( 0.01%) 75.03
ssh 231212 ( 0.63%) 92479895 ( 0.57%) 399.98
dns 1313 ( 0.00%) 208410 ( 0.00%) 158.73
bgp 609 ( 0.00%) 155269 ( 0.00%) 254.96
napster 16 ( 0.00%) 2134 ( 0.00%) 133.38
realaud 157 ( 0.00%) 19612 ( 0.00%) 124.92
rtsp 1 ( 0.00%) 62 ( 0.00%) 62.00
icecast 18364 ( 0.05%) 15508401 ( 0.10%) 844.50
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 3177177 ( 8.70%) 2467761223 ( 15.33%) 776.72
udp 2888846 ( 7.91%) 1318965000 ( 8.20%) 456.57
dns 1022703 ( 2.80%) 401512524 ( 2.50%) 392.60
rip 1 ( 0.00%) 72 ( 0.00%) 72.00
realaud 11 ( 0.00%) 1586 ( 0.00%) 144.18
halflif 225 ( 0.00%) 17077 ( 0.00%) 75.90
starcra 39 ( 0.00%) 4211 ( 0.00%) 107.97
everque 286 ( 0.00%) 58678 ( 0.00%) 205.17
unreal 2 ( 0.00%) 298 ( 0.00%) 149.00
quake 62 ( 0.00%) 7461 ( 0.00%) 120.34
cuseeme 2 ( 0.00%) 216 ( 0.00%) 108.00
other 1865314 ( 5.11%) 917300357 ( 5.70%) 491.77
icmp 15129474 ( 41.41%) 956081767 ( 5.94%) 63.19
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 7463 ( 0.02%) 2514378 ( 0.02%) 336.91
ip6 209952 ( 0.57%) 70926866 ( 0.44%) 337.82
pim 85 ( 0.00%) 5100 ( 0.00%) 60.00
other 79099 ( 0.22%) 25202550 ( 0.16%) 318.62
frag 266934 ( 0.73%) 272022425 ( 1.69%) 1019.06
ip6 679081 ( 1.86%) 584961965 ( 3.64%) 861.40
tcp6 596827 ( 1.63%) 561844546 ( 3.49%) 941.39
http(s) 479400 ( 1.31%) 540068419 ( 3.36%) 1126.55
http(c) 108332 ( 0.30%) 11460383 ( 0.07%) 105.79
squid 5 ( 0.00%) 987 ( 0.00%) 197.40
smtp 173 ( 0.00%) 83298 ( 0.00%) 481.49
ftp 81 ( 0.00%) 7130 ( 0.00%) 88.02
imap 412 ( 0.00%) 176578 ( 0.00%) 428.59
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 333 ( 0.00%) 58064 ( 0.00%) 174.37
bgp 110 ( 0.00%) 32124 ( 0.00%) 292.04
other 7969 ( 0.02%) 9956555 ( 0.06%) 1249.41
udp6 64122 ( 0.18%) 19188076 ( 0.12%) 299.24
dns 62375 ( 0.17%) 18901254 ( 0.12%) 303.03
other 1747 ( 0.00%) 286822 ( 0.00%) 164.18
icmp6 16625 ( 0.05%) 2547966 ( 0.02%) 153.26
ip6 85 ( 0.00%) 11530 ( 0.00%) 135.65
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1392 ( 0.00%) 1365767 ( 0.01%) 981.15
tcpdump file: 201209121400.dump.gz (806.45 MB)