Traffic Trace Info
DumpFile: 201211021400.dump
FileSize: 3048.88MB
Id: 201211021400
StartTime: Fri Nov 2 14:00:01 2012
EndTime: Fri Nov 2 14:15:00 2012
TotalTime: 899.48 seconds
TotalCapSize: -1725.67MB CapLen: 96 bytes
# of packets: 44469047 (20119.91MB)
AvgRate: 187.65Mbps stddev:45.03M
IP flow (unique src/dst pair) Information
# of flows: 11261315 (avg. 3.95 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.8% 1.7% 1.7% 1.6% 1.4% 1.4% 1.3% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 8742362
Top 10 bandwidth usage (bytes/total in %):
15.9% 6.5% 5.1% 3.7% 2.5% 2.4% 2.4% 2.2% 2.1% 2.1%
# of IPv6 addresses: 8515
Top 10 bandwidth usage (bytes/total in %):
12.7% 12.2% 11.1% 9.9% 6.8% 5.8% 4.7% 4.0% 3.9% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201211021400.pktlen.png)
detailed numbers
[ 32- 63]: 18148688
[ 64- 127]: 11643194
[ 128- 255]: 793706
[ 256- 511]: 701954
[ 512- 1023]: 821740
[ 1024- 2047]: 12359765
Protocol Breakdown
![[protocol breakdown chart]](201211021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 44469047 (100.00%) 21097250376 (100.00%) 474.43
ip 43092801 ( 96.91%) 19929621527 ( 94.47%) 462.48
tcp 19310722 ( 43.43%) 17356877049 ( 82.27%) 898.82
http(s) 11008495 ( 24.76%) 14122360759 ( 66.94%) 1282.86
http(c) 5569086 ( 12.52%) 1180797877 ( 5.60%) 212.03
squid 188991 ( 0.42%) 175815869 ( 0.83%) 930.29
smtp 52921 ( 0.12%) 13033955 ( 0.06%) 246.29
ftp 13513 ( 0.03%) 2994985 ( 0.01%) 221.64
pop3 3849 ( 0.01%) 1769720 ( 0.01%) 459.79
imap 2830 ( 0.01%) 525074 ( 0.00%) 185.54
telnet 10369 ( 0.02%) 781447 ( 0.00%) 75.36
ssh 338600 ( 0.76%) 296208670 ( 1.40%) 874.80
dns 4312 ( 0.01%) 456607 ( 0.00%) 105.89
bgp 784 ( 0.00%) 174062 ( 0.00%) 222.02
napster 35 ( 0.00%) 3930 ( 0.00%) 112.29
rtsp 3007 ( 0.01%) 194371 ( 0.00%) 64.64
icecast 986 ( 0.00%) 148787 ( 0.00%) 150.90
hotline 3 ( 0.00%) 210 ( 0.00%) 70.00
other 2112941 ( 4.75%) 1561610726 ( 7.40%) 739.07
udp 2333750 ( 5.25%) 1071393226 ( 5.08%) 459.09
dns 527478 ( 1.19%) 185264603 ( 0.88%) 351.23
rip 1 ( 0.00%) 72 ( 0.00%) 72.00
realaud 3 ( 0.00%) 287 ( 0.00%) 95.67
halflif 11 ( 0.00%) 870 ( 0.00%) 79.09
starcra 17 ( 0.00%) 2126 ( 0.00%) 125.06
everque 168 ( 0.00%) 31675 ( 0.00%) 188.54
unreal 4 ( 0.00%) 427 ( 0.00%) 106.75
quake 37 ( 0.00%) 3925 ( 0.00%) 106.08
cuseeme 6 ( 0.00%) 765 ( 0.00%) 127.50
other 1805880 ( 4.06%) 885958355 ( 4.20%) 490.60
icmp 20964820 ( 47.14%) 1330612940 ( 6.31%) 63.47
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 34453 ( 0.08%) 11097706 ( 0.05%) 322.11
ip6 396490 ( 0.89%) 145834749 ( 0.69%) 367.81
pim 16 ( 0.00%) 960 ( 0.00%) 60.00
other 52365 ( 0.12%) 13785627 ( 0.07%) 263.26
frag 71394 ( 0.16%) 72814102 ( 0.35%) 1019.89
ip6 1376246 ( 3.09%) 1167628849 ( 5.53%) 848.42
tcp6 1079869 ( 2.43%) 973748641 ( 4.62%) 901.73
http(s) 896353 ( 2.02%) 908421542 ( 4.31%) 1013.46
http(c) 107777 ( 0.24%) 13120983 ( 0.06%) 121.74
smtp 167 ( 0.00%) 58461 ( 0.00%) 350.07
ftp 1610 ( 0.00%) 922697 ( 0.00%) 573.10
imap 818 ( 0.00%) 569217 ( 0.00%) 695.86
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 177 ( 0.00%) 46671 ( 0.00%) 263.68
bgp 92 ( 0.00%) 20787 ( 0.00%) 225.95
other 72863 ( 0.16%) 50587275 ( 0.24%) 694.28
udp6 268858 ( 0.60%) 189841007 ( 0.90%) 706.10
dns 111633 ( 0.25%) 24173134 ( 0.11%) 216.54
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
other 157224 ( 0.35%) 165667766 ( 0.79%) 1053.71
icmp6 26370 ( 0.06%) 2993542 ( 0.01%) 113.52
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1034 ( 0.00%) 1029999 ( 0.00%) 996.13
tcpdump file: 201211021400.dump.gz (948.26 MB)