Traffic Trace Info
DumpFile: 201211051400.dump
FileSize: 3253.26MB
Id: 201211051400
StartTime: Mon Nov 5 14:00:01 2012
EndTime: Mon Nov 5 14:15:01 2012
TotalTime: 899.75 seconds
TotalCapSize: -1571.24MB CapLen: 96 bytes
# of packets: 47742474 (26418.38MB)
AvgRate: 246.34Mbps stddev:43.18M
IP flow (unique src/dst pair) Information
# of flows: 11456972 (avg. 4.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 3.2% 2.3% 2.1% 1.9% 1.8% 1.8% 1.5% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 8797209
Top 10 bandwidth usage (bytes/total in %):
10.3% 9.8% 9.2% 6.6% 4.4% 3.9% 3.8% 3.7% 3.5% 3.1%
# of IPv6 addresses: 9244
Top 10 bandwidth usage (bytes/total in %):
15.8% 8.7% 8.4% 7.0% 5.7% 5.6% 4.2% 3.0% 3.0% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201211051400.pktlen.png)
detailed numbers
[ 32- 63]: 19399907
[ 64- 127]: 8534467
[ 128- 255]: 816901
[ 256- 511]: 1150748
[ 512- 1023]: 1035525
[ 1024- 2047]: 16804926
Protocol Breakdown
![[protocol breakdown chart]](201211051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 47742474 (100.00%) 27701680718 (100.00%) 580.23
ip 46128415 ( 96.62%) 26320294278 ( 95.01%) 570.59
tcp 26610103 ( 55.74%) 24105124423 ( 87.02%) 905.86
http(s) 12081304 ( 25.31%) 15519706158 ( 56.02%) 1284.61
http(c) 7051833 ( 14.77%) 2207186747 ( 7.97%) 312.99
squid 162976 ( 0.34%) 82747567 ( 0.30%) 507.73
smtp 52542 ( 0.11%) 15871563 ( 0.06%) 302.07
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 16842 ( 0.04%) 2897220 ( 0.01%) 172.02
pop3 5902 ( 0.01%) 3127928 ( 0.01%) 529.98
imap 3106 ( 0.01%) 1151258 ( 0.00%) 370.66
telnet 20158 ( 0.04%) 2974518 ( 0.01%) 147.56
ssh 40744 ( 0.09%) 18240977 ( 0.07%) 447.70
dns 4846 ( 0.01%) 517693 ( 0.00%) 106.83
bgp 510 ( 0.00%) 128313 ( 0.00%) 251.59
napster 34 ( 0.00%) 3200 ( 0.00%) 94.12
realaud 7 ( 0.00%) 570 ( 0.00%) 81.43
rtsp 3 ( 0.00%) 184 ( 0.00%) 61.33
icecast 46117 ( 0.10%) 38652888 ( 0.14%) 838.15
hotline 29 ( 0.00%) 1792 ( 0.00%) 61.79
other 7123146 ( 14.92%) 6211915607 ( 22.42%) 872.07
udp 1718653 ( 3.60%) 842505988 ( 3.04%) 490.21
dns 634561 ( 1.33%) 283786640 ( 1.02%) 447.22
realaud 8 ( 0.00%) 836 ( 0.00%) 104.50
halflif 17 ( 0.00%) 3975 ( 0.00%) 233.82
starcra 38 ( 0.00%) 3735 ( 0.00%) 98.29
everque 78 ( 0.00%) 12326 ( 0.00%) 158.03
unreal 5 ( 0.00%) 478 ( 0.00%) 95.60
quake 15 ( 0.00%) 1813 ( 0.00%) 120.87
cuseeme 5 ( 0.00%) 362 ( 0.00%) 72.40
other 1083525 ( 2.27%) 558477587 ( 2.02%) 515.43
icmp 17129951 ( 35.88%) 1061915624 ( 3.83%) 61.99
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 30752 ( 0.06%) 6007288 ( 0.02%) 195.35
ip6 502426 ( 1.05%) 230047365 ( 0.83%) 457.87
pim 16 ( 0.00%) 960 ( 0.00%) 60.00
other 136329 ( 0.29%) 74673360 ( 0.27%) 547.74
frag 168159 ( 0.35%) 171275443 ( 0.62%) 1018.53
ip6 1614059 ( 3.38%) 1381386440 ( 4.99%) 855.85
tcp6 1321140 ( 2.77%) 1204510380 ( 4.35%) 911.72
http(s) 1093110 ( 2.29%) 1099082342 ( 3.97%) 1005.46
http(c) 114653 ( 0.24%) 13319037 ( 0.05%) 116.17
squid 788 ( 0.00%) 303471 ( 0.00%) 385.12
smtp 396 ( 0.00%) 115853 ( 0.00%) 292.56
ftp 540 ( 0.00%) 76359 ( 0.00%) 141.41
imap 144 ( 0.00%) 19578 ( 0.00%) 135.96
ssh 67 ( 0.00%) 11394 ( 0.00%) 170.06
dns 244 ( 0.00%) 49291 ( 0.00%) 202.01
bgp 90 ( 0.00%) 16376 ( 0.00%) 181.96
other 111108 ( 0.23%) 91516679 ( 0.33%) 823.67
udp6 246942 ( 0.52%) 159656416 ( 0.58%) 646.53
dns 72063 ( 0.15%) 21097768 ( 0.08%) 292.77
other 174879 ( 0.37%) 138558648 ( 0.50%) 792.31
icmp6 26357 ( 0.06%) 3170749 ( 0.01%) 120.30
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 19507 ( 0.04%) 14033521 ( 0.05%) 719.41
tcpdump file: 201211051400.dump.gz (1056.52 MB)