Traffic Trace Info
DumpFile: 201211121400.dump
FileSize: 2015.39MB
Id: 201211121400
StartTime: Mon Nov 12 14:00:01 2012
EndTime: Mon Nov 12 14:15:00 2012
TotalTime: 899.40 seconds
TotalCapSize: 1600.28MB CapLen: 96 bytes
# of packets: 27204278 (20293.78MB)
AvgRate: 189.27Mbps stddev:29.54M
IP flow (unique src/dst pair) Information
# of flows: 852289 (avg. 31.92 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 2.9% 2.0% 1.7% 1.7% 1.3% 1.3% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 455146
Top 10 bandwidth usage (bytes/total in %):
7.6% 7.5% 5.8% 4.9% 4.0% 3.9% 3.3% 2.8% 2.2% 2.2%
# of IPv6 addresses: 10560
Top 10 bandwidth usage (bytes/total in %):
35.3% 31.7% 6.5% 3.5% 1.8% 1.8% 1.7% 1.6% 1.5% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201211121400.pktlen.png)
detailed numbers
[ 32- 63]: 3975304
[ 64- 127]: 6957923
[ 128- 255]: 988224
[ 256- 511]: 981739
[ 512- 1023]: 1007186
[ 1024- 2047]: 13293902
Protocol Breakdown
![[protocol breakdown chart]](201211121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27204278 (100.00%) 21279574131 (100.00%) 782.21
ip 24374726 ( 89.60%) 18954099760 ( 89.07%) 777.61
tcp 20650768 ( 75.91%) 17239067172 ( 81.01%) 834.79
http(s) 10473077 ( 38.50%) 12853406159 ( 60.40%) 1227.28
http(c) 7386508 ( 27.15%) 2676883438 ( 12.58%) 362.40
squid 90670 ( 0.33%) 17947524 ( 0.08%) 197.94
smtp 61849 ( 0.23%) 10803585 ( 0.05%) 174.68
ftp 36581 ( 0.13%) 24996116 ( 0.12%) 683.31
pop3 4959 ( 0.02%) 1874795 ( 0.01%) 378.06
imap 3225 ( 0.01%) 494503 ( 0.00%) 153.33
telnet 5472 ( 0.02%) 417784 ( 0.00%) 76.35
ssh 16888 ( 0.06%) 3759567 ( 0.02%) 222.62
dns 6441 ( 0.02%) 2293195 ( 0.01%) 356.03
bgp 563 ( 0.00%) 142882 ( 0.00%) 253.79
napster 17 ( 0.00%) 2223 ( 0.00%) 130.76
realaud 670 ( 0.00%) 85679 ( 0.00%) 127.88
rtsp 38 ( 0.00%) 13746 ( 0.00%) 361.74
icecast 16758 ( 0.06%) 8342305 ( 0.04%) 497.81
hotline 11 ( 0.00%) 1038 ( 0.00%) 94.36
other 2547040 ( 9.36%) 1637602573 ( 7.70%) 642.94
udp 2709341 ( 9.96%) 1393877249 ( 6.55%) 514.47
dns 909255 ( 3.34%) 478561628 ( 2.25%) 526.32
realaud 3 ( 0.00%) 289 ( 0.00%) 96.33
halflif 16 ( 0.00%) 2316 ( 0.00%) 144.75
starcra 24 ( 0.00%) 3456 ( 0.00%) 144.00
everque 128 ( 0.00%) 27916 ( 0.00%) 218.09
unreal 10 ( 0.00%) 1555 ( 0.00%) 155.50
quake 18 ( 0.00%) 1569 ( 0.00%) 87.17
cuseeme 4 ( 0.00%) 324 ( 0.00%) 81.00
other 1799787 ( 6.62%) 915217067 ( 4.30%) 508.51
icmp 293189 ( 1.08%) 25529871 ( 0.12%) 87.08
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 16605 ( 0.06%) 5098470 ( 0.02%) 307.04
ip6 609098 ( 2.24%) 246701219 ( 1.16%) 405.03
pim 16 ( 0.00%) 960 ( 0.00%) 60.00
other 95524 ( 0.35%) 43805549 ( 0.21%) 458.58
frag 350890 ( 1.29%) 357595626 ( 1.68%) 1019.11
ip6 2829552 ( 10.40%) 2325474371 ( 10.93%) 821.85
tcp6 2637715 ( 9.70%) 2247376170 ( 10.56%) 852.02
http(s) 1373060 ( 5.05%) 1393320000 ( 6.55%) 1014.76
http(c) 306309 ( 1.13%) 34007390 ( 0.16%) 111.02
smtp 667 ( 0.00%) 477529 ( 0.00%) 715.94
ftp 72 ( 0.00%) 6348 ( 0.00%) 88.17
pop3 445 ( 0.00%) 405503 ( 0.00%) 911.24
ssh 118 ( 0.00%) 14872 ( 0.00%) 126.03
dns 409 ( 0.00%) 124937 ( 0.00%) 305.47
bgp 93 ( 0.00%) 20522 ( 0.00%) 220.67
other 956542 ( 3.52%) 818999069 ( 3.85%) 856.21
udp6 160829 ( 0.59%) 68525173 ( 0.32%) 426.07
dns 74635 ( 0.27%) 24186509 ( 0.11%) 324.06
other 86194 ( 0.32%) 44338664 ( 0.21%) 514.41
icmp6 24532 ( 0.09%) 2891756 ( 0.01%) 117.88
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6362 ( 0.02%) 6665780 ( 0.03%) 1047.75
tcpdump file: 201211121400.dump.gz (640.01 MB)