Traffic Trace Info
DumpFile: 201211131400.dump
FileSize: 2566.15MB
Id: 201211131400
StartTime: Tue Nov 13 14:00:00 2012
EndTime: Tue Nov 13 14:15:00 2012
TotalTime: 900.04 seconds
TotalCapSize: 2029.63MB CapLen: 96 bytes
# of packets: 35161172 (27120.55MB)
AvgRate: 252.77Mbps stddev:43.25M
IP flow (unique src/dst pair) Information
# of flows: 724429 (avg. 48.54 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 2.9% 2.2% 2.2% 1.7% 1.7% 1.7% 1.7% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 334865
Top 10 bandwidth usage (bytes/total in %):
13.7% 8.8% 8.0% 5.5% 3.7% 3.5% 3.3% 3.3% 3.2% 3.1%
# of IPv6 addresses: 11181
Top 10 bandwidth usage (bytes/total in %):
13.8% 12.6% 6.9% 6.1% 3.7% 3.4% 2.2% 2.2% 2.2% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201211131400.pktlen.png)
detailed numbers
[ 32- 63]: 6601207
[ 64- 127]: 7527270
[ 128- 255]: 1047119
[ 256- 511]: 917192
[ 512- 1023]: 1176308
[ 1024- 2047]: 17892076
Protocol Breakdown
![[protocol breakdown chart]](201211131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35161172 (100.00%) 28437954330 (100.00%) 808.79
ip 32961539 ( 93.74%) 26562756420 ( 93.41%) 805.87
tcp 28619642 ( 81.40%) 24375369207 ( 85.71%) 851.70
http(s) 13118905 ( 37.31%) 16592332307 ( 58.35%) 1264.77
http(c) 9556530 ( 27.18%) 3087115898 ( 10.86%) 323.04
squid 35194 ( 0.10%) 25854789 ( 0.09%) 734.64
smtp 71652 ( 0.20%) 25678473 ( 0.09%) 358.38
ftp 37490 ( 0.11%) 26667664 ( 0.09%) 711.33
pop3 6656 ( 0.02%) 4075787 ( 0.01%) 612.35
imap 2671 ( 0.01%) 322569 ( 0.00%) 120.77
telnet 3795 ( 0.01%) 295315 ( 0.00%) 77.82
ssh 350659 ( 1.00%) 49648072 ( 0.17%) 141.59
dns 5375 ( 0.02%) 933895 ( 0.00%) 173.75
bgp 561 ( 0.00%) 124446 ( 0.00%) 221.83
napster 48 ( 0.00%) 18277 ( 0.00%) 380.77
realaud 68 ( 0.00%) 9500 ( 0.00%) 139.71
rtsp 6016 ( 0.02%) 2276812 ( 0.01%) 378.46
icecast 44795 ( 0.13%) 38090414 ( 0.13%) 850.33
hotline 15 ( 0.00%) 2449 ( 0.00%) 163.27
other 5379212 ( 15.30%) 4521922540 ( 15.90%) 840.63
udp 3327923 ( 9.46%) 1863444503 ( 6.55%) 559.94
dns 1508957 ( 4.29%) 915550280 ( 3.22%) 606.74
rip 1 ( 0.00%) 79 ( 0.00%) 79.00
realaud 11 ( 0.00%) 1028 ( 0.00%) 93.45
halflif 19 ( 0.00%) 1713 ( 0.00%) 90.16
starcra 20 ( 0.00%) 1601 ( 0.00%) 80.05
everque 201 ( 0.00%) 45006 ( 0.00%) 223.91
unreal 6 ( 0.00%) 772 ( 0.00%) 128.67
quake 89 ( 0.00%) 6592 ( 0.00%) 74.07
cuseeme 5 ( 0.00%) 1531 ( 0.00%) 306.20
other 1812426 ( 5.15%) 940367488 ( 3.31%) 518.84
icmp 302841 ( 0.86%) 27612117 ( 0.10%) 91.18
ipip 190 ( 0.00%) 19604 ( 0.00%) 103.18
ipsec 9946 ( 0.03%) 2143004 ( 0.01%) 215.46
ip6 644895 ( 1.83%) 276958049 ( 0.97%) 429.46
pim 16 ( 0.00%) 960 ( 0.00%) 60.00
other 56086 ( 0.16%) 17208976 ( 0.06%) 306.83
frag 531737 ( 1.51%) 631985816 ( 2.22%) 1188.53
ip6 2199633 ( 6.26%) 1875197910 ( 6.59%) 852.50
tcp6 2024806 ( 5.76%) 1774698738 ( 6.24%) 876.48
http(s) 1615860 ( 4.60%) 1644088331 ( 5.78%) 1017.47
http(c) 300150 ( 0.85%) 35867829 ( 0.13%) 119.50
smtp 170 ( 0.00%) 59519 ( 0.00%) 350.11
ftp 1030 ( 0.00%) 100338 ( 0.00%) 97.42
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 581 ( 0.00%) 254191 ( 0.00%) 437.51
bgp 119 ( 0.00%) 51220 ( 0.00%) 430.42
other 106884 ( 0.30%) 94276302 ( 0.33%) 882.04
udp6 108202 ( 0.31%) 49700450 ( 0.17%) 459.33
dns 77422 ( 0.22%) 24742490 ( 0.09%) 319.58
realaud 1 ( 0.00%) 110 ( 0.00%) 110.00
quake 1 ( 0.00%) 110 ( 0.00%) 110.00
other 30778 ( 0.09%) 24957740 ( 0.09%) 810.90
icmp6 24391 ( 0.07%) 2878801 ( 0.01%) 118.03
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 42119 ( 0.12%) 47904293 ( 0.17%) 1137.36
tcpdump file: 201211131400.dump.gz (814.03 MB)