Traffic Trace Info
DumpFile: 201211161400.dump
FileSize: 3390.15MB
Id: 201211161400
StartTime: Fri Nov 16 14:00:01 2012
EndTime: Fri Nov 16 14:15:00 2012
TotalTime: 899.43 seconds
TotalCapSize: -1425.63MB CapLen: 96 bytes
# of packets: 47170674 (30386.39MB)
AvgRate: 283.48Mbps stddev:56.73M
IP flow (unique src/dst pair) Information
# of flows: 10168316 (avg. 4.64 pkts/flow)
Top 10 big flow size (bytes/total in %):
19.1% 2.0% 1.9% 1.9% 1.9% 1.5% 1.4% 1.4% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 9723539
Top 10 bandwidth usage (bytes/total in %):
23.5% 20.4% 7.9% 6.2% 4.3% 2.2% 2.1% 2.1% 2.0% 2.0%
# of IPv6 addresses: 9996
Top 10 bandwidth usage (bytes/total in %):
6.3% 4.3% 3.9% 3.5% 3.2% 3.1% 2.5% 2.5% 2.4% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201211161400.pktlen.png)
detailed numbers
[ 32- 63]: 7078573
[ 64- 127]: 16956217
[ 128- 255]: 927071
[ 256- 511]: 859919
[ 512- 1023]: 1060200
[ 1024- 2047]: 20288694
Protocol Breakdown
![[protocol breakdown chart]](201211161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 47170674 (100.00%) 31862440861 (100.00%) 675.47
ip 45527350 ( 96.52%) 30558274262 ( 95.91%) 671.21
tcp 34534398 ( 73.21%) 27743350897 ( 87.07%) 803.35
http(s) 18200330 ( 38.58%) 22936349903 ( 71.99%) 1260.22
http(c) 13719436 ( 29.08%) 3236137708 ( 10.16%) 235.88
squid 55212 ( 0.12%) 32930820 ( 0.10%) 596.44
smtp 89593 ( 0.19%) 32278403 ( 0.10%) 360.28
nntp 55 ( 0.00%) 3992 ( 0.00%) 72.58
ftp 36264 ( 0.08%) 26493119 ( 0.08%) 730.56
pop3 6678 ( 0.01%) 3562334 ( 0.01%) 533.44
imap 5260 ( 0.01%) 1689599 ( 0.01%) 321.22
telnet 12598 ( 0.03%) 943790 ( 0.00%) 74.92
ssh 168989 ( 0.36%) 17094116 ( 0.05%) 101.16
dns 5122 ( 0.01%) 480343 ( 0.00%) 93.78
bgp 602 ( 0.00%) 139970 ( 0.00%) 232.51
napster 118 ( 0.00%) 9606 ( 0.00%) 81.41
realaud 62 ( 0.00%) 4911 ( 0.00%) 79.21
rtsp 58 ( 0.00%) 4194 ( 0.00%) 72.31
icecast 10681 ( 0.02%) 8042767 ( 0.03%) 753.00
hotline 49 ( 0.00%) 3602 ( 0.00%) 73.51
other 2223290 ( 4.71%) 1447181660 ( 4.54%) 650.92
udp 9704271 ( 20.57%) 2092006508 ( 6.57%) 215.58
dns 7936502 ( 16.83%) 1367864058 ( 4.29%) 172.35
rip 87 ( 0.00%) 6519 ( 0.00%) 74.93
realaud 192 ( 0.00%) 14410 ( 0.00%) 75.05
halflif 251 ( 0.00%) 18970 ( 0.00%) 75.58
starcra 104 ( 0.00%) 8208 ( 0.00%) 78.92
everque 463 ( 0.00%) 45125 ( 0.00%) 97.46
unreal 119 ( 0.00%) 13918 ( 0.00%) 116.96
quake 324 ( 0.00%) 25274 ( 0.00%) 78.01
cuseeme 117 ( 0.00%) 9100 ( 0.00%) 77.78
other 1766000 ( 3.74%) 723912026 ( 2.27%) 409.92
icmp 378268 ( 0.80%) 45683534 ( 0.14%) 120.77
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 377616 ( 0.80%) 472389744 ( 1.48%) 1250.98
ip6 481724 ( 1.02%) 191010648 ( 0.60%) 396.51
pim 16 ( 0.00%) 960 ( 0.00%) 60.00
other 50873 ( 0.11%) 13812811 ( 0.04%) 271.52
frag 58929 ( 0.12%) 59530462 ( 0.19%) 1010.21
ip6 1643324 ( 3.48%) 1304166599 ( 4.09%) 793.62
tcp6 1388102 ( 2.94%) 1164733312 ( 3.66%) 839.08
http(s) 1065976 ( 2.26%) 1070493563 ( 3.36%) 1004.24
http(c) 243338 ( 0.52%) 28542197 ( 0.09%) 117.29
smtp 230 ( 0.00%) 85513 ( 0.00%) 371.80
ftp 84 ( 0.00%) 7830 ( 0.00%) 93.21
pop3 1416 ( 0.00%) 1209596 ( 0.00%) 854.23
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 109 ( 0.00%) 38443 ( 0.00%) 352.69
bgp 93 ( 0.00%) 24781 ( 0.00%) 266.46
other 76844 ( 0.16%) 64330381 ( 0.20%) 837.16
udp6 175601 ( 0.37%) 97973447 ( 0.31%) 557.93
dns 66266 ( 0.14%) 20428400 ( 0.06%) 308.28
unreal 1 ( 0.00%) 101 ( 0.00%) 101.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 109333 ( 0.23%) 77544839 ( 0.24%) 709.25
icmp6 24560 ( 0.05%) 3069402 ( 0.01%) 124.98
ip6 84 ( 0.00%) 11462 ( 0.00%) 136.45
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 54947 ( 0.12%) 38374896 ( 0.12%) 698.40
tcpdump file: 201211161400.dump.gz (1104.74 MB)