Traffic Trace Info
DumpFile: 201211031400.dump
FileSize: 3197.92MB
Id: 201211031400
StartTime: Sat Nov 3 14:00:01 2012
EndTime: Sat Nov 3 14:15:00 2012
TotalTime: 899.64 seconds
TotalCapSize: -1604.74MB CapLen: 96 bytes
# of packets: 46310962 (21214.08MB)
AvgRate: 197.86Mbps stddev:46.67M
IP flow (unique src/dst pair) Information
# of flows: 12179755 (avg. 3.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.9% 3.8% 3.7% 2.4% 2.3% 2.1% 2.1% 2.1% 1.9% 1.8%
IP address Information
# of IPv4 addresses: 9243667
Top 10 bandwidth usage (bytes/total in %):
23.8% 18.2% 11.7% 7.0% 4.5% 4.0% 3.9% 3.9% 3.8% 2.5%
# of IPv6 addresses: 6877
Top 10 bandwidth usage (bytes/total in %):
20.6% 11.6% 11.1% 8.4% 7.3% 7.0% 6.8% 6.0% 5.7% 5.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201211031400.pktlen.png)
detailed numbers
[ 32- 63]: 17959866
[ 64- 127]: 13252855
[ 128- 255]: 562611
[ 256- 511]: 690602
[ 512- 1023]: 697815
[ 1024- 2047]: 13147213
Protocol Breakdown
![[protocol breakdown chart]](201211031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 46310962 (100.00%) 22244579877 (100.00%) 480.33
ip 45146585 ( 97.49%) 21126969568 ( 94.98%) 467.96
tcp 18171524 ( 39.24%) 17948344596 ( 80.69%) 987.72
http(s) 11239002 ( 24.27%) 14837143828 ( 66.70%) 1320.15
http(c) 4706975 ( 10.16%) 1595314443 ( 7.17%) 338.93
squid 19451 ( 0.04%) 14254817 ( 0.06%) 732.86
smtp 49400 ( 0.11%) 15438216 ( 0.07%) 312.51
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 16645 ( 0.04%) 3142179 ( 0.01%) 188.78
pop3 6030 ( 0.01%) 962340 ( 0.00%) 159.59
imap 1383 ( 0.00%) 230647 ( 0.00%) 166.77
telnet 10139 ( 0.02%) 2231773 ( 0.01%) 220.12
ssh 14597 ( 0.03%) 5054794 ( 0.02%) 346.29
dns 4019 ( 0.01%) 437814 ( 0.00%) 108.94
bgp 560 ( 0.00%) 124373 ( 0.00%) 222.09
napster 20 ( 0.00%) 1975 ( 0.00%) 98.75
realaud 20 ( 0.00%) 1894 ( 0.00%) 94.70
rtsp 7 ( 0.00%) 1450 ( 0.00%) 207.14
icecast 26668 ( 0.06%) 15179482 ( 0.07%) 569.20
hotline 16 ( 0.00%) 2090 ( 0.00%) 130.62
other 2076580 ( 4.48%) 1458821733 ( 6.56%) 702.51
udp 2295207 ( 4.96%) 1493705254 ( 6.71%) 650.79
dns 417699 ( 0.90%) 148727260 ( 0.67%) 356.06
rip 1 ( 0.00%) 68 ( 0.00%) 68.00
realaud 16 ( 0.00%) 1596 ( 0.00%) 99.75
halflif 20 ( 0.00%) 4703 ( 0.00%) 235.15
starcra 20 ( 0.00%) 1872 ( 0.00%) 93.60
everque 242 ( 0.00%) 22650 ( 0.00%) 93.60
unreal 1 ( 0.00%) 68 ( 0.00%) 68.00
quake 6 ( 0.00%) 791 ( 0.00%) 131.83
cuseeme 2 ( 0.00%) 162 ( 0.00%) 81.00
other 1877083 ( 4.05%) 1344870348 ( 6.05%) 716.47
icmp 24327398 ( 52.53%) 1558112015 ( 7.00%) 64.05
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 4985 ( 0.01%) 1759194 ( 0.01%) 352.90
ip6 298725 ( 0.65%) 112246227 ( 0.50%) 375.75
pim 16 ( 0.00%) 960 ( 0.00%) 60.00
other 48545 ( 0.10%) 12782052 ( 0.06%) 263.30
frag 72793 ( 0.16%) 74178059 ( 0.33%) 1019.03
ip6 1164377 ( 2.51%) 1117610309 ( 5.02%) 959.84
tcp6 1030928 ( 2.23%) 1084425058 ( 4.88%) 1051.89
http(s) 829661 ( 1.79%) 1018133731 ( 4.58%) 1227.17
http(c) 121216 ( 0.26%) 13921138 ( 0.06%) 114.85
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 69 ( 0.00%) 12912 ( 0.00%) 187.13
ftp 19696 ( 0.04%) 13448559 ( 0.06%) 682.81
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 59 ( 0.00%) 25076 ( 0.00%) 425.02
bgp 94 ( 0.00%) 18787 ( 0.00%) 199.86
other 60119 ( 0.13%) 38863699 ( 0.17%) 646.45
udp6 104191 ( 0.22%) 28368104 ( 0.13%) 272.27
dns 84317 ( 0.18%) 16215219 ( 0.07%) 192.31
realaud 1 ( 0.00%) 103 ( 0.00%) 103.00
everque 1 ( 0.00%) 101 ( 0.00%) 101.00
other 19872 ( 0.04%) 12152681 ( 0.05%) 611.55
icmp6 27683 ( 0.06%) 3207933 ( 0.01%) 115.88
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1461 ( 0.00%) 1593722 ( 0.01%) 1090.84
tcpdump file: 201211031400.dump.gz (920.57 MB)