Traffic Trace Info
DumpFile: 201211011400.dump
FileSize: 3091.63MB
Id: 201211011400
StartTime: Thu Nov 1 14:00:01 2012
EndTime: Thu Nov 1 14:15:00 2012
TotalTime: 899.84 seconds
TotalCapSize: -1701.69MB CapLen: 96 bytes
# of packets: 45699186 (24288.13MB)
AvgRate: 226.47Mbps stddev:37.36M
IP flow (unique src/dst pair) Information
# of flows: 11341378 (avg. 4.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.1% 1.9% 1.9% 1.8% 1.5% 1.2% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 8805564
Top 10 bandwidth usage (bytes/total in %):
9.3% 7.6% 6.1% 5.2% 3.8% 3.8% 3.4% 3.1% 3.1% 2.3%
# of IPv6 addresses: 9318
Top 10 bandwidth usage (bytes/total in %):
11.1% 10.8% 5.2% 4.1% 4.1% 3.4% 3.2% 3.2% 2.9% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201211011400.pktlen.png)
detailed numbers
[ 32- 63]: 18448717
[ 64- 127]: 8606741
[ 128- 255]: 1221502
[ 256- 511]: 1077114
[ 512- 1023]: 1250921
[ 1024- 2047]: 15094191
Protocol Breakdown
![[protocol breakdown chart]](201211011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 45699186 (100.00%) 25467945391 (100.00%) 557.30
ip 44317055 ( 96.98%) 24361924297 ( 95.66%) 549.72
tcp 24087679 ( 52.71%) 21017944799 ( 82.53%) 872.56
http(s) 11743891 ( 25.70%) 14918473382 ( 58.58%) 1270.32
http(c) 6756326 ( 14.78%) 2019379122 ( 7.93%) 298.89
squid 87278 ( 0.19%) 63676431 ( 0.25%) 729.58
smtp 118041 ( 0.26%) 37803319 ( 0.15%) 320.26
nntp 168 ( 0.00%) 10866 ( 0.00%) 64.68
ftp 16531 ( 0.04%) 3196446 ( 0.01%) 193.36
pop3 4898 ( 0.01%) 1981394 ( 0.01%) 404.53
imap 2690 ( 0.01%) 510393 ( 0.00%) 189.74
telnet 12053 ( 0.03%) 906035 ( 0.00%) 75.17
ssh 267460 ( 0.59%) 52920528 ( 0.21%) 197.86
dns 8530 ( 0.02%) 4005151 ( 0.02%) 469.54
bgp 572 ( 0.00%) 149414 ( 0.00%) 261.21
napster 78 ( 0.00%) 40403 ( 0.00%) 517.99
realaud 331 ( 0.00%) 21845 ( 0.00%) 66.00
icecast 63539 ( 0.14%) 25802921 ( 0.10%) 406.10
other 5005293 ( 10.95%) 3889067149 ( 15.27%) 776.99
udp 3841179 ( 8.41%) 2080745958 ( 8.17%) 541.69
dns 931908 ( 2.04%) 334101532 ( 1.31%) 358.51
realaud 4 ( 0.00%) 347 ( 0.00%) 86.75
halflif 46 ( 0.00%) 4544 ( 0.00%) 98.78
starcra 52 ( 0.00%) 4717 ( 0.00%) 90.71
everque 163 ( 0.00%) 51108 ( 0.00%) 313.55
unreal 4 ( 0.00%) 467 ( 0.00%) 116.75
quake 25 ( 0.00%) 3014 ( 0.00%) 120.56
cuseeme 4 ( 0.00%) 655 ( 0.00%) 163.75
other 2907677 ( 6.36%) 1745093338 ( 6.85%) 600.17
icmp 15731312 ( 34.42%) 965059813 ( 3.79%) 61.35
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 9457 ( 0.02%) 2768434 ( 0.01%) 292.74
ip6 596067 ( 1.30%) 283107796 ( 1.11%) 474.96
pim 16 ( 0.00%) 960 ( 0.00%) 60.00
other 51161 ( 0.11%) 12277377 ( 0.05%) 239.98
frag 155086 ( 0.34%) 159082955 ( 0.62%) 1025.77
ip6 1382131 ( 3.02%) 1106021094 ( 4.34%) 800.23
tcp6 1208303 ( 2.64%) 1057303363 ( 4.15%) 875.03
http(s) 992391 ( 2.17%) 996281063 ( 3.91%) 1003.92
http(c) 161145 ( 0.35%) 17726907 ( 0.07%) 110.01
smtp 1146 ( 0.00%) 227219 ( 0.00%) 198.27
ftp 2600 ( 0.01%) 1127965 ( 0.00%) 433.83
ssh 120 ( 0.00%) 15132 ( 0.00%) 126.10
dns 248 ( 0.00%) 48413 ( 0.00%) 195.21
bgp 101 ( 0.00%) 25782 ( 0.00%) 255.27
other 50552 ( 0.11%) 41850882 ( 0.16%) 827.88
udp6 136398 ( 0.30%) 36506487 ( 0.14%) 267.65
dns 119618 ( 0.26%) 26243082 ( 0.10%) 219.39
realaud 1 ( 0.00%) 104 ( 0.00%) 104.00
halflif 1 ( 0.00%) 98 ( 0.00%) 98.00
other 16778 ( 0.04%) 10263203 ( 0.04%) 611.71
icmp6 28823 ( 0.06%) 3616941 ( 0.01%) 125.49
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 8492 ( 0.02%) 8578643 ( 0.03%) 1010.20
tcpdump file: 201211011400.dump.gz (1046.57 MB)