Traffic Trace Info
DumpFile: 201211041400.dump
FileSize: 2505.65MB
Id: 201211041400
StartTime: Sun Nov 4 14:00:00 2012
EndTime: Sun Nov 4 14:15:01 2012
TotalTime: 900.18 seconds
TotalCapSize: 1939.90MB CapLen: 96 bytes
# of packets: 37076880 (13506.90MB)
AvgRate: 125.86Mbps stddev:28.60M
IP flow (unique src/dst pair) Information
# of flows: 11215194 (avg. 3.31 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 3.0% 2.9% 2.5% 2.5% 2.3% 2.3% 2.1% 1.5% 1.2%
IP address Information
# of IPv4 addresses: 8736713
Top 10 bandwidth usage (bytes/total in %):
14.2% 10.6% 10.2% 8.3% 7.1% 4.4% 4.4% 3.1% 3.0% 3.0%
# of IPv6 addresses: 6798
Top 10 bandwidth usage (bytes/total in %):
14.0% 13.9% 12.6% 9.9% 9.9% 9.4% 4.5% 4.0% 3.6% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201211041400.pktlen.png)
detailed numbers
[ 32- 63]: 17044730
[ 64- 127]: 10465167
[ 128- 255]: 651451
[ 256- 511]: 437165
[ 512- 1023]: 515946
[ 1024- 2047]: 7962421
Protocol Breakdown
![[protocol breakdown chart]](201211041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37076880 (100.00%) 14163006874 (100.00%) 381.99
ip 36235038 ( 97.73%) 13406623752 ( 94.66%) 369.99
tcp 12560105 ( 33.88%) 11289738210 ( 79.71%) 898.86
http(s) 6482259 ( 17.48%) 8450805343 ( 59.67%) 1303.68
http(c) 2762426 ( 7.45%) 614356778 ( 4.34%) 222.40
squid 26941 ( 0.07%) 20809646 ( 0.15%) 772.42
smtp 44455 ( 0.12%) 7071424 ( 0.05%) 159.07
ftp 34558 ( 0.09%) 14846188 ( 0.10%) 429.60
pop3 1752 ( 0.00%) 556900 ( 0.00%) 317.87
imap 2330 ( 0.01%) 301581 ( 0.00%) 129.43
telnet 11147 ( 0.03%) 2308478 ( 0.02%) 207.09
ssh 126848 ( 0.34%) 23359620 ( 0.16%) 184.15
dns 6973 ( 0.02%) 2560352 ( 0.02%) 367.18
bgp 621 ( 0.00%) 142703 ( 0.00%) 229.80
napster 48 ( 0.00%) 4767 ( 0.00%) 99.31
realaud 5 ( 0.00%) 638 ( 0.00%) 127.60
rtsp 10 ( 0.00%) 9409 ( 0.00%) 940.90
icecast 19720 ( 0.05%) 15598046 ( 0.11%) 790.98
hotline 3 ( 0.00%) 190 ( 0.00%) 63.33
other 3040006 ( 8.20%) 2137005967 ( 15.09%) 702.96
udp 1494518 ( 4.03%) 600590751 ( 4.24%) 401.86
dns 403543 ( 1.09%) 193340926 ( 1.37%) 479.11
rip 1 ( 0.00%) 178 ( 0.00%) 178.00
realaud 4 ( 0.00%) 552 ( 0.00%) 138.00
halflif 30 ( 0.00%) 3217 ( 0.00%) 107.23
starcra 39 ( 0.00%) 8920 ( 0.00%) 228.72
everque 113 ( 0.00%) 19662 ( 0.00%) 174.00
unreal 8 ( 0.00%) 1822 ( 0.00%) 227.75
quake 15 ( 0.00%) 1689 ( 0.00%) 112.60
cuseeme 1 ( 0.00%) 82 ( 0.00%) 82.00
other 1090513 ( 2.94%) 407003860 ( 2.87%) 373.22
icmp 21863257 ( 58.97%) 1392464732 ( 9.83%) 63.69
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 5001 ( 0.01%) 1735950 ( 0.01%) 347.12
ip6 251970 ( 0.68%) 105745327 ( 0.75%) 419.67
pim 16 ( 0.00%) 960 ( 0.00%) 60.00
other 59986 ( 0.16%) 16328552 ( 0.12%) 272.21
frag 128225 ( 0.35%) 135853594 ( 0.96%) 1059.49
ip6 841842 ( 2.27%) 756383122 ( 5.34%) 898.49
tcp6 760371 ( 2.05%) 729376602 ( 5.15%) 959.24
http(s) 600852 ( 1.62%) 666996426 ( 4.71%) 1110.08
http(c) 83227 ( 0.22%) 10212295 ( 0.07%) 122.70
smtp 1286 ( 0.00%) 1112174 ( 0.01%) 864.83
ftp 7352 ( 0.02%) 4409153 ( 0.03%) 599.72
imap 3 ( 0.00%) 254 ( 0.00%) 84.67
ssh 114 ( 0.00%) 15944 ( 0.00%) 139.86
dns 278 ( 0.00%) 31689 ( 0.00%) 113.99
bgp 104 ( 0.00%) 29051 ( 0.00%) 279.34
other 67155 ( 0.18%) 46569616 ( 0.33%) 693.46
udp6 55370 ( 0.15%) 23545621 ( 0.17%) 425.24
dns 40690 ( 0.11%) 11196050 ( 0.08%) 275.15
halflif 1 ( 0.00%) 118 ( 0.00%) 118.00
other 14679 ( 0.04%) 12349453 ( 0.09%) 841.30
icmp6 25456 ( 0.07%) 2928144 ( 0.02%) 115.03
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 530 ( 0.00%) 517095 ( 0.00%) 975.65
tcpdump file: 201211041400.dump.gz (749.61 MB)