Traffic Trace Info
DumpFile: 201211091400.dump
FileSize: 3792.30MB
Id: 201211091400
StartTime: Fri Nov 9 14:00:01 2012
EndTime: Fri Nov 9 14:15:01 2012
TotalTime: 900.16 seconds
TotalCapSize: -1143.44MB CapLen: 96 bytes
# of packets: 55032695 (31408.98MB)
AvgRate: 292.61Mbps stddev:55.45M
IP flow (unique src/dst pair) Information
# of flows: 12261892 (avg. 4.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 3.8% 3.4% 2.4% 2.0% 1.6% 1.5% 1.4% 1.4% 1.2%
IP address Information
# of IPv4 addresses: 9507734
Top 10 bandwidth usage (bytes/total in %):
25.6% 5.2% 4.4% 4.3% 4.0% 3.9% 3.7% 3.4% 2.9% 2.7%
# of IPv6 addresses: 11095
Top 10 bandwidth usage (bytes/total in %):
50.5% 42.8% 15.6% 14.2% 2.6% 2.4% 2.4% 2.0% 1.8% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201211091400.pktlen.png)
detailed numbers
[ 32- 63]: 20936131
[ 64- 127]: 10566928
[ 128- 255]: 1044281
[ 256- 511]: 930482
[ 512- 1023]: 954307
[ 1024- 2047]: 20600566
Protocol Breakdown
![[protocol breakdown chart]](201211091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 55032695 (100.00%) 32934703306 (100.00%) 598.46
ip 51028499 ( 92.72%) 29275868091 ( 88.89%) 573.72
tcp 28474872 ( 51.74%) 25624522743 ( 77.80%) 899.90
http(s) 11047393 ( 20.07%) 14267928742 ( 43.32%) 1291.52
http(c) 5210200 ( 9.47%) 982158688 ( 2.98%) 188.51
squid 52901 ( 0.10%) 34190120 ( 0.10%) 646.30
smtp 76390 ( 0.14%) 24731776 ( 0.08%) 323.76
ftp 22016 ( 0.04%) 6246651 ( 0.02%) 283.73
pop3 4722 ( 0.01%) 1829042 ( 0.01%) 387.34
imap 8443 ( 0.02%) 6759508 ( 0.02%) 800.60
telnet 16410 ( 0.03%) 2294762 ( 0.01%) 139.84
ssh 194499 ( 0.35%) 186207713 ( 0.57%) 957.37
dns 4183 ( 0.01%) 440512 ( 0.00%) 105.31
bgp 537 ( 0.00%) 122679 ( 0.00%) 228.45
napster 19 ( 0.00%) 1629 ( 0.00%) 85.74
realaud 226 ( 0.00%) 14795 ( 0.00%) 65.46
rtsp 3 ( 0.00%) 180 ( 0.00%) 60.00
icecast 13338 ( 0.02%) 11781064 ( 0.04%) 883.27
hotline 65 ( 0.00%) 5798 ( 0.00%) 89.20
other 11823526 ( 21.48%) 10099809002 ( 30.67%) 854.21
udp 3231401 ( 5.87%) 2072616677 ( 6.29%) 641.40
dns 650701 ( 1.18%) 303661100 ( 0.92%) 466.67
realaud 6 ( 0.00%) 517 ( 0.00%) 86.17
halflif 7 ( 0.00%) 864 ( 0.00%) 123.43
starcra 17 ( 0.00%) 2165 ( 0.00%) 127.35
everque 143 ( 0.00%) 33621 ( 0.00%) 235.11
unreal 2 ( 0.00%) 293 ( 0.00%) 146.50
quake 63 ( 0.00%) 4540 ( 0.00%) 72.06
cuseeme 2 ( 0.00%) 693 ( 0.00%) 346.50
other 2341032 ( 4.25%) 1754394950 ( 5.33%) 749.41
icmp 18621787 ( 33.84%) 1162991065 ( 3.53%) 62.45
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 14677 ( 0.03%) 3356070 ( 0.01%) 228.66
ip6 632014 ( 1.15%) 397138983 ( 1.21%) 628.37
pim 16 ( 0.00%) 960 ( 0.00%) 60.00
other 53548 ( 0.10%) 15222433 ( 0.05%) 284.28
frag 738554 ( 1.34%) 612458675 ( 1.86%) 829.27
ip6 4004194 ( 7.28%) 3658835095 ( 11.11%) 913.75
tcp6 3835191 ( 6.97%) 3576881649 ( 10.86%) 932.65
http(s) 1677938 ( 3.05%) 1945889826 ( 5.91%) 1159.69
http(c) 333653 ( 0.61%) 32305400 ( 0.10%) 96.82
smtp 400 ( 0.00%) 107925 ( 0.00%) 269.81
ftp 994 ( 0.00%) 92562 ( 0.00%) 93.12
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 270 ( 0.00%) 97292 ( 0.00%) 360.34
bgp 100 ( 0.00%) 30484 ( 0.00%) 304.84
other 1821824 ( 3.31%) 1598357152 ( 4.85%) 877.34
udp6 136188 ( 0.25%) 75485548 ( 0.23%) 554.27
dns 63671 ( 0.12%) 18537430 ( 0.06%) 291.14
everque 10 ( 0.00%) 996 ( 0.00%) 99.60
other 72507 ( 0.13%) 56947122 ( 0.17%) 785.40
icmp6 28313 ( 0.05%) 3037755 ( 0.01%) 107.29
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 4388 ( 0.01%) 3414633 ( 0.01%) 778.18
tcpdump file: 201211091400.dump.gz (1196.62 MB)