Traffic Trace Info
DumpFile: 201211061400.dump
FileSize: 3533.24MB
Id: 201211061400
StartTime: Tue Nov 6 14:00:01 2012
EndTime: Tue Nov 6 14:15:00 2012
TotalTime: 899.49 seconds
TotalCapSize: -1344.95MB CapLen: 96 bytes
# of packets: 51261221 (26718.84MB)
AvgRate: 249.23Mbps stddev:35.04M
IP flow (unique src/dst pair) Information
# of flows: 12699890 (avg. 4.04 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 5.0% 2.8% 2.1% 2.0% 1.7% 1.6% 1.6% 1.5% 1.4%
IP address Information
# of IPv4 addresses: 9811764
Top 10 bandwidth usage (bytes/total in %):
16.7% 11.3% 6.8% 5.9% 5.4% 5.3% 4.7% 4.4% 2.9% 2.3%
# of IPv6 addresses: 10005
Top 10 bandwidth usage (bytes/total in %):
13.0% 10.9% 9.9% 6.1% 4.9% 4.9% 3.7% 3.7% 3.6% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201211061400.pktlen.png)
detailed numbers
[ 32- 63]: 19930291
[ 64- 127]: 11388033
[ 128- 255]: 1215997
[ 256- 511]: 795629
[ 512- 1023]: 1078138
[ 1024- 2047]: 16853133
Protocol Breakdown
![[protocol breakdown chart]](201211061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 51261221 (100.00%) 28016732250 (100.00%) 546.55
ip 49503434 ( 96.57%) 26531904036 ( 94.70%) 535.96
tcp 25695330 ( 50.13%) 23661726465 ( 84.46%) 920.86
http(s) 15073749 ( 29.41%) 19779746258 ( 70.60%) 1312.20
http(c) 7075981 ( 13.80%) 1148544696 ( 4.10%) 162.32
squid 79489 ( 0.16%) 68871009 ( 0.25%) 866.42
smtp 60953 ( 0.12%) 12065282 ( 0.04%) 197.94
ftp 18671 ( 0.04%) 3417466 ( 0.01%) 183.04
pop3 4791 ( 0.01%) 2149466 ( 0.01%) 448.65
imap 2313 ( 0.00%) 555464 ( 0.00%) 240.15
telnet 55062 ( 0.11%) 5542868 ( 0.02%) 100.67
ssh 58743 ( 0.11%) 12059363 ( 0.04%) 205.29
dns 4625 ( 0.01%) 471020 ( 0.00%) 101.84
bgp 604 ( 0.00%) 154116 ( 0.00%) 255.16
napster 107 ( 0.00%) 9515 ( 0.00%) 88.93
realaud 1690 ( 0.00%) 1446181 ( 0.01%) 855.73
rtsp 195 ( 0.00%) 14698 ( 0.00%) 75.37
icecast 48575 ( 0.09%) 45930841 ( 0.16%) 945.57
hotline 15 ( 0.00%) 1289 ( 0.00%) 85.93
other 3209766 ( 6.26%) 2580746873 ( 9.21%) 804.03
udp 2663099 ( 5.20%) 1087887393 ( 3.88%) 408.50
dns 577652 ( 1.13%) 205524384 ( 0.73%) 355.79
rip 1 ( 0.00%) 62 ( 0.00%) 62.00
realaud 11 ( 0.00%) 929 ( 0.00%) 84.45
halflif 14 ( 0.00%) 1536 ( 0.00%) 109.71
starcra 55 ( 0.00%) 7261 ( 0.00%) 132.02
everque 166 ( 0.00%) 34589 ( 0.00%) 208.37
unreal 13 ( 0.00%) 2685 ( 0.00%) 206.54
quake 30 ( 0.00%) 3078 ( 0.00%) 102.60
cuseeme 5 ( 0.00%) 733 ( 0.00%) 146.60
other 2085046 ( 4.07%) 882261670 ( 3.15%) 423.14
icmp 20293905 ( 39.59%) 1272152214 ( 4.54%) 62.69
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 29191 ( 0.06%) 4729010 ( 0.02%) 162.00
ip6 756445 ( 1.48%) 488673310 ( 1.74%) 646.01
pim 16 ( 0.00%) 960 ( 0.00%) 60.00
other 65263 ( 0.13%) 16715414 ( 0.06%) 256.12
frag 88759 ( 0.17%) 90461322 ( 0.32%) 1019.18
ip6 1757787 ( 3.43%) 1484828214 ( 5.30%) 844.71
tcp6 1585892 ( 3.09%) 1419479619 ( 5.07%) 895.07
http(s) 1270836 ( 2.48%) 1299297158 ( 4.64%) 1022.40
http(c) 225838 ( 0.44%) 22691748 ( 0.08%) 100.48
squid 20 ( 0.00%) 2000 ( 0.00%) 100.00
smtp 474 ( 0.00%) 270324 ( 0.00%) 570.30
ftp 162 ( 0.00%) 14295 ( 0.00%) 88.24
pop3 18 ( 0.00%) 4108 ( 0.00%) 228.22
ssh 72 ( 0.00%) 12136 ( 0.00%) 168.56
dns 151 ( 0.00%) 31187 ( 0.00%) 206.54
bgp 108 ( 0.00%) 24318 ( 0.00%) 225.17
other 88213 ( 0.17%) 97132345 ( 0.35%) 1101.11
udp6 145575 ( 0.28%) 61239090 ( 0.22%) 420.67
dns 73020 ( 0.14%) 21045921 ( 0.08%) 288.22
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 1 ( 0.00%) 99 ( 0.00%) 99.00
other 72553 ( 0.14%) 40192963 ( 0.14%) 553.98
icmp6 25089 ( 0.05%) 2997778 ( 0.01%) 119.49
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1116 ( 0.00%) 1096067 ( 0.00%) 982.14
tcpdump file: 201211061400.dump.gz (1127.13 MB)