Traffic Trace Info
DumpFile: 201211101400.dump
FileSize: 1545.78MB
Id: 201211101400
StartTime: Sat Nov 10 14:00:01 2012
EndTime: Sat Nov 10 14:15:01 2012
TotalTime: 900.02 seconds
TotalCapSize: 1229.33MB CapLen: 96 bytes
# of packets: 20738038 (16894.28MB)
AvgRate: 157.49Mbps stddev:28.56M
IP flow (unique src/dst pair) Information
# of flows: 1168350 (avg. 17.75 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 4.6% 4.2% 2.4% 2.4% 2.3% 2.0% 2.0% 1.7% 1.7%
IP address Information
# of IPv4 addresses: 806330
Top 10 bandwidth usage (bytes/total in %):
32.3% 5.3% 4.9% 4.9% 4.4% 4.4% 4.3% 2.7% 2.5% 2.5%
# of IPv6 addresses: 8299
Top 10 bandwidth usage (bytes/total in %):
15.4% 15.4% 7.2% 7.0% 4.3% 3.5% 3.3% 2.9% 2.7% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201211101400.pktlen.png)
detailed numbers
[ 32- 63]: 3071839
[ 64- 127]: 4450642
[ 128- 255]: 618571
[ 256- 511]: 755788
[ 512- 1023]: 791440
[ 1024- 2047]: 11049758
Protocol Breakdown
![[protocol breakdown chart]](201211101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20738038 (100.00%) 17714937377 (100.00%) 854.22
ip 19703209 ( 95.01%) 16880438349 ( 95.29%) 856.74
tcp 16960604 ( 81.78%) 15992744346 ( 90.28%) 942.93
http(s) 10215072 ( 49.26%) 13243974975 ( 74.76%) 1296.51
http(c) 5002534 ( 24.12%) 1997905225 ( 11.28%) 399.38
squid 29230 ( 0.14%) 11028351 ( 0.06%) 377.30
smtp 51689 ( 0.25%) 9253413 ( 0.05%) 179.02
ftp 18212 ( 0.09%) 5993022 ( 0.03%) 329.07
pop3 2161 ( 0.01%) 569923 ( 0.00%) 263.73
imap 3609 ( 0.02%) 553315 ( 0.00%) 153.32
telnet 12311 ( 0.06%) 925278 ( 0.01%) 75.16
ssh 280551 ( 1.35%) 34495751 ( 0.19%) 122.96
dns 3994 ( 0.02%) 422876 ( 0.00%) 105.88
bgp 557 ( 0.00%) 126493 ( 0.00%) 227.10
napster 7 ( 0.00%) 432 ( 0.00%) 61.71
realaud 28 ( 0.00%) 3089 ( 0.00%) 110.32
icecast 504 ( 0.00%) 67906 ( 0.00%) 134.73
hotline 13 ( 0.00%) 2202 ( 0.00%) 169.38
other 1340131 ( 6.46%) 687422035 ( 3.88%) 512.95
udp 1456132 ( 7.02%) 583859206 ( 3.30%) 400.97
dns 429787 ( 2.07%) 194559627 ( 1.10%) 452.69
realaud 9 ( 0.00%) 647 ( 0.00%) 71.89
halflif 4 ( 0.00%) 341 ( 0.00%) 85.25
starcra 36 ( 0.00%) 6019 ( 0.00%) 167.19
everque 160 ( 0.00%) 25084 ( 0.00%) 156.78
unreal 5 ( 0.00%) 679 ( 0.00%) 135.80
quake 7 ( 0.00%) 758 ( 0.00%) 108.29
cuseeme 2 ( 0.00%) 173 ( 0.00%) 86.50
other 1026017 ( 4.95%) 389185854 ( 2.20%) 379.32
icmp 827884 ( 3.99%) 58483504 ( 0.33%) 70.64
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 10021 ( 0.05%) 4260502 ( 0.02%) 425.16
ip6 399306 ( 1.93%) 226284130 ( 1.28%) 566.69
pim 16 ( 0.00%) 960 ( 0.00%) 60.00
other 49061 ( 0.24%) 14786431 ( 0.08%) 301.39
frag 120233 ( 0.58%) 125437488 ( 0.71%) 1043.29
ip6 1034829 ( 4.99%) 834499028 ( 4.71%) 806.41
tcp6 930370 ( 4.49%) 792594827 ( 4.47%) 851.91
http(s) 520831 ( 2.51%) 543914466 ( 3.07%) 1044.32
http(c) 131537 ( 0.63%) 15589470 ( 0.09%) 118.52
squid 15 ( 0.00%) 1410 ( 0.00%) 94.00
smtp 198 ( 0.00%) 75823 ( 0.00%) 382.94
ftp 128 ( 0.00%) 11960 ( 0.00%) 93.44
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 291 ( 0.00%) 41858 ( 0.00%) 143.84
bgp 91 ( 0.00%) 16203 ( 0.00%) 178.05
other 277267 ( 1.34%) 232942629 ( 1.31%) 840.14
udp6 71486 ( 0.34%) 33646256 ( 0.19%) 470.67
dns 46439 ( 0.22%) 14563187 ( 0.08%) 313.60
quake 1 ( 0.00%) 102 ( 0.00%) 102.00
other 25046 ( 0.12%) 19082967 ( 0.11%) 761.92
icmp6 25499 ( 0.12%) 2852132 ( 0.02%) 111.85
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 7361 ( 0.04%) 5390389 ( 0.03%) 732.29
tcpdump file: 201211101400.dump.gz (480.40 MB)