Traffic Trace Info
DumpFile: 201211111400.dump
FileSize: 1425.04MB
Id: 201211111400
StartTime: Sun Nov 11 14:00:00 2012
EndTime: Sun Nov 11 14:15:00 2012
TotalTime: 899.72 seconds
TotalCapSize: 1126.53MB CapLen: 96 bytes
# of packets: 19562534 (15928.80MB)
AvgRate: 148.52Mbps stddev:35.95M
IP flow (unique src/dst pair) Information
# of flows: 955414 (avg. 20.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 4.3% 3.6% 2.7% 2.7% 2.4% 2.4% 2.2% 1.9% 1.8%
IP address Information
# of IPv4 addresses: 473118
Top 10 bandwidth usage (bytes/total in %):
18.5% 8.0% 6.1% 6.1% 4.6% 4.6% 4.1% 3.9% 3.8% 3.6%
# of IPv6 addresses: 7656
Top 10 bandwidth usage (bytes/total in %):
39.5% 33.2% 9.1% 2.4% 2.2% 2.2% 2.2% 2.1% 2.1% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201211111400.pktlen.png)
detailed numbers
[ 32- 63]: 2593113
[ 64- 127]: 4703604
[ 128- 255]: 533656
[ 256- 511]: 509521
[ 512- 1023]: 611765
[ 1024- 2047]: 10610875
Protocol Breakdown
![[protocol breakdown chart]](201211111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19562534 (100.00%) 16702561001 (100.00%) 853.80
ip 18547377 ( 94.81%) 15809031440 ( 94.65%) 852.36
tcp 15248356 ( 77.95%) 14106194484 ( 84.46%) 925.10
http(s) 7665319 ( 39.18%) 9801107674 ( 58.68%) 1278.63
http(c) 3810417 ( 19.48%) 1652156747 ( 9.89%) 433.59
squid 38147 ( 0.20%) 9933833 ( 0.06%) 260.41
smtp 49073 ( 0.25%) 11323801 ( 0.07%) 230.75
ftp 56461 ( 0.29%) 28736502 ( 0.17%) 508.96
pop3 2778 ( 0.01%) 2196321 ( 0.01%) 790.61
imap 2256 ( 0.01%) 374149 ( 0.00%) 165.85
telnet 6040 ( 0.03%) 462174 ( 0.00%) 76.52
ssh 386078 ( 1.97%) 42484086 ( 0.25%) 110.04
dns 6163 ( 0.03%) 2453297 ( 0.01%) 398.07
bgp 551 ( 0.00%) 125181 ( 0.00%) 227.19
napster 30 ( 0.00%) 4076 ( 0.00%) 135.87
realaud 17 ( 0.00%) 2147 ( 0.00%) 126.29
rtsp 54333 ( 0.28%) 53079208 ( 0.32%) 976.92
icecast 1449 ( 0.01%) 172804 ( 0.00%) 119.26
hotline 15 ( 0.00%) 2042 ( 0.00%) 136.13
other 3169229 ( 16.20%) 2501580442 ( 14.98%) 789.33
udp 2443653 ( 12.49%) 1468941814 ( 8.79%) 601.13
dns 406511 ( 2.08%) 180806192 ( 1.08%) 444.78
realaud 4 ( 0.00%) 859 ( 0.00%) 214.75
halflif 7 ( 0.00%) 1153 ( 0.00%) 164.71
starcra 16 ( 0.00%) 2076 ( 0.00%) 129.75
everque 163 ( 0.00%) 21787 ( 0.00%) 133.66
unreal 2 ( 0.00%) 417 ( 0.00%) 208.50
quake 73 ( 0.00%) 5149 ( 0.00%) 70.53
cuseeme 1 ( 0.00%) 95 ( 0.00%) 95.00
other 2036807 ( 10.41%) 1288051542 ( 7.71%) 632.39
icmp 395046 ( 2.02%) 33130217 ( 0.20%) 83.86
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 9707 ( 0.05%) 4169210 ( 0.02%) 429.51
ip6 396562 ( 2.03%) 182694392 ( 1.09%) 460.70
pim 16 ( 0.00%) 960 ( 0.00%) 60.00
other 53853 ( 0.28%) 13881203 ( 0.08%) 257.76
frag 120393 ( 0.62%) 122724969 ( 0.73%) 1019.37
ip6 1015157 ( 5.19%) 893529561 ( 5.35%) 880.19
tcp6 874842 ( 4.47%) 811040401 ( 4.86%) 927.07
http(s) 445696 ( 2.28%) 453636871 ( 2.72%) 1017.82
http(c) 128847 ( 0.66%) 14466227 ( 0.09%) 112.27
smtp 687 ( 0.00%) 217657 ( 0.00%) 316.82
ftp 89 ( 0.00%) 7913 ( 0.00%) 88.91
pop3 54 ( 0.00%) 4675 ( 0.00%) 86.57
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 478 ( 0.00%) 195317 ( 0.00%) 408.61
bgp 97 ( 0.00%) 21224 ( 0.00%) 218.80
napster 9 ( 0.00%) 1288 ( 0.00%) 143.11
other 298873 ( 1.53%) 342488221 ( 2.05%) 1145.93
udp6 89373 ( 0.46%) 57574934 ( 0.34%) 644.21
dns 42592 ( 0.22%) 13318126 ( 0.08%) 312.69
everque 2 ( 0.00%) 214 ( 0.00%) 107.00
other 46779 ( 0.24%) 44256594 ( 0.26%) 946.08
icmp6 25281 ( 0.13%) 2993860 ( 0.02%) 118.42
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 25548 ( 0.13%) 21904974 ( 0.13%) 857.40
tcpdump file: 201211111400.dump.gz (447.21 MB)