Traffic Trace Info
DumpFile: 201211151400.dump
FileSize: 2759.58MB
Id: 201211151400
StartTime: Thu Nov 15 14:00:00 2012
EndTime: Thu Nov 15 14:15:01 2012
TotalTime: 900.45 seconds
TotalCapSize: -1909.66MB CapLen: 96 bytes
# of packets: 37567111 (28551.95MB)
AvgRate: 266.02Mbps stddev:36.90M
IP flow (unique src/dst pair) Information
# of flows: 3795549 (avg. 9.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 3.8% 2.5% 2.3% 2.2% 1.6% 1.5% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 3465268
Top 10 bandwidth usage (bytes/total in %):
9.6% 7.2% 4.8% 4.3% 4.2% 3.4% 3.4% 2.8% 2.8% 2.8%
# of IPv6 addresses: 11767
Top 10 bandwidth usage (bytes/total in %):
54.2% 52.4% 6.9% 4.6% 2.2% 1.4% 1.4% 1.2% 1.1% 1.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201211151400.pktlen.png)
detailed numbers
[ 32- 63]: 5189578
[ 64- 127]: 10752972
[ 128- 255]: 1051719
[ 256- 511]: 727311
[ 512- 1023]: 897478
[ 1024- 2047]: 18948053
Protocol Breakdown
![[protocol breakdown chart]](201211151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37567111 (100.00%) 29938893621 (100.00%) 796.94
ip 34785854 ( 92.60%) 26940501537 ( 89.98%) 774.47
tcp 27235738 ( 72.50%) 24768330147 ( 82.73%) 909.41
http(s) 15059969 ( 40.09%) 19410700335 ( 64.83%) 1288.89
http(c) 8480638 ( 22.57%) 2748963634 ( 9.18%) 324.15
squid 224522 ( 0.60%) 114569238 ( 0.38%) 510.28
smtp 84242 ( 0.22%) 42628223 ( 0.14%) 506.02
ftp 51235 ( 0.14%) 37972629 ( 0.13%) 741.15
pop3 7117 ( 0.02%) 4377021 ( 0.01%) 615.01
imap 3672 ( 0.01%) 538720 ( 0.00%) 146.71
telnet 2986 ( 0.01%) 234837 ( 0.00%) 78.65
ssh 37661 ( 0.10%) 7322104 ( 0.02%) 194.42
dns 4340 ( 0.01%) 456285 ( 0.00%) 105.13
bgp 570 ( 0.00%) 157435 ( 0.00%) 276.20
napster 16 ( 0.00%) 2108 ( 0.00%) 131.75
realaud 37 ( 0.00%) 10696 ( 0.00%) 289.08
icecast 8657 ( 0.02%) 7722905 ( 0.03%) 892.10
hotline 16 ( 0.00%) 2046 ( 0.00%) 127.88
other 3269869 ( 8.70%) 2392660471 ( 7.99%) 731.73
udp 6128642 ( 16.31%) 1801744239 ( 6.02%) 293.99
dns 4470712 ( 11.90%) 859671881 ( 2.87%) 192.29
rip 65 ( 0.00%) 4753 ( 0.00%) 73.12
realaud 114 ( 0.00%) 9162 ( 0.00%) 80.37
halflif 143 ( 0.00%) 16013 ( 0.00%) 111.98
starcra 101 ( 0.00%) 7933 ( 0.00%) 78.54
everque 283 ( 0.00%) 45001 ( 0.00%) 159.01
unreal 79 ( 0.00%) 6887 ( 0.00%) 87.18
quake 163 ( 0.00%) 12720 ( 0.00%) 78.04
cuseeme 86 ( 0.00%) 5966 ( 0.00%) 69.37
other 1656775 ( 4.41%) 941877726 ( 3.15%) 568.50
icmp 256005 ( 0.68%) 23025143 ( 0.08%) 89.94
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 12661 ( 0.03%) 2757998 ( 0.01%) 217.83
ip6 1100305 ( 2.93%) 329767849 ( 1.10%) 299.71
pim 16 ( 0.00%) 960 ( 0.00%) 60.00
other 52303 ( 0.14%) 14856041 ( 0.05%) 284.04
frag 154066 ( 0.41%) 162415566 ( 0.54%) 1054.19
ip6 2781257 ( 7.40%) 2998392084 ( 10.02%) 1078.07
tcp6 2643711 ( 7.04%) 2940248243 ( 9.82%) 1112.17
http(s) 1267894 ( 3.38%) 1292454224 ( 4.32%) 1019.37
http(c) 290346 ( 0.77%) 32647301 ( 0.11%) 112.44
smtp 116 ( 0.00%) 29329 ( 0.00%) 252.84
ftp 756 ( 0.00%) 67861 ( 0.00%) 89.76
pop3 18 ( 0.00%) 4153 ( 0.00%) 230.72
ssh 13 ( 0.00%) 1102 ( 0.00%) 84.77
dns 301 ( 0.00%) 49099 ( 0.00%) 163.12
bgp 93 ( 0.00%) 23734 ( 0.00%) 255.20
other 1084174 ( 2.89%) 1614971440 ( 5.39%) 1489.59
udp6 97434 ( 0.26%) 46076259 ( 0.15%) 472.90
dns 69572 ( 0.19%) 20719922 ( 0.07%) 297.82
quake 1 ( 0.00%) 110 ( 0.00%) 110.00
other 27861 ( 0.07%) 25356227 ( 0.08%) 910.10
icmp6 27926 ( 0.07%) 3180300 ( 0.01%) 113.88
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 12073 ( 0.03%) 8871908 ( 0.03%) 734.86
tcpdump file: 201211151400.dump.gz (854.05 MB)