Traffic Trace Info
DumpFile: 201211171400.dump
FileSize: 1926.86MB
Id: 201211171400
StartTime: Sat Nov 17 14:00:00 2012
EndTime: Sat Nov 17 14:15:00 2012
TotalTime: 899.82 seconds
TotalCapSize: 1515.34MB CapLen: 96 bytes
# of packets: 26969153 (16162.39MB)
AvgRate: 150.71Mbps stddev:28.26M
IP flow (unique src/dst pair) Information
# of flows: 8089107 (avg. 3.33 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.2% 2.0% 2.0% 1.9% 1.8% 1.8% 1.8% 1.7% 1.7% 1.6%
IP address Information
# of IPv4 addresses: 7725181
Top 10 bandwidth usage (bytes/total in %):
21.8% 12.9% 7.8% 4.4% 3.7% 3.6% 3.0% 2.9% 2.6% 2.5%
# of IPv6 addresses: 9245
Top 10 bandwidth usage (bytes/total in %):
12.6% 12.6% 9.0% 7.4% 7.4% 5.3% 4.9% 4.0% 3.8% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201211171400.pktlen.png)
detailed numbers
[ 32- 63]: 3194210
[ 64- 127]: 11548632
[ 128- 255]: 588111
[ 256- 511]: 456893
[ 512- 1023]: 649339
[ 1024- 2047]: 10531968
Protocol Breakdown
![[protocol breakdown chart]](201211171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26969153 (100.00%) 16947497092 (100.00%) 628.40
ip 25801537 ( 95.67%) 15960339933 ( 94.18%) 618.58
tcp 14941206 ( 55.40%) 13844281687 ( 81.69%) 926.58
http(s) 8730935 ( 32.37%) 11273551106 ( 66.52%) 1291.22
http(c) 3828728 ( 14.20%) 1133706240 ( 6.69%) 296.11
squid 34431 ( 0.13%) 16677123 ( 0.10%) 484.36
smtp 42101 ( 0.16%) 9405929 ( 0.06%) 223.41
ftp 106380 ( 0.39%) 32137858 ( 0.19%) 302.10
pop3 7385 ( 0.03%) 7518744 ( 0.04%) 1018.11
imap 3189 ( 0.01%) 659421 ( 0.00%) 206.78
telnet 40373 ( 0.15%) 2993991 ( 0.02%) 74.16
ssh 65988 ( 0.24%) 11482780 ( 0.07%) 174.01
dns 3837 ( 0.01%) 391837 ( 0.00%) 102.12
bgp 562 ( 0.00%) 138226 ( 0.00%) 245.95
napster 9 ( 0.00%) 944 ( 0.00%) 104.89
realaud 18 ( 0.00%) 1801 ( 0.00%) 100.06
rtsp 289 ( 0.00%) 157499 ( 0.00%) 544.98
icecast 554 ( 0.00%) 55376 ( 0.00%) 99.96
hotline 1 ( 0.00%) 74 ( 0.00%) 74.00
other 2076426 ( 7.70%) 1355402738 ( 8.00%) 652.76
udp 9179168 ( 34.04%) 1898219989 ( 11.20%) 206.80
dns 8199001 ( 30.40%) 1454637676 ( 8.58%) 177.42
rip 111 ( 0.00%) 8291 ( 0.00%) 74.69
realaud 213 ( 0.00%) 15861 ( 0.00%) 74.46
halflif 242 ( 0.00%) 19007 ( 0.00%) 78.54
starcra 122 ( 0.00%) 10058 ( 0.00%) 82.44
everque 337 ( 0.00%) 29741 ( 0.00%) 88.25
unreal 116 ( 0.00%) 9370 ( 0.00%) 80.78
quake 432 ( 0.00%) 39691 ( 0.00%) 91.88
cuseeme 101 ( 0.00%) 7914 ( 0.00%) 78.36
other 977927 ( 3.63%) 442793197 ( 2.61%) 452.79
icmp 1359309 ( 5.04%) 93909116 ( 0.55%) 69.09
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 6354 ( 0.02%) 2143348 ( 0.01%) 337.32
ip6 270245 ( 1.00%) 109638958 ( 0.65%) 405.70
pim 16 ( 0.00%) 960 ( 0.00%) 60.00
other 45054 ( 0.17%) 12126605 ( 0.07%) 269.16
frag 144858 ( 0.54%) 155676402 ( 0.92%) 1074.68
ip6 1167616 ( 4.33%) 987157159 ( 5.82%) 845.45
tcp6 964314 ( 3.58%) 855461393 ( 5.05%) 887.12
http(s) 722972 ( 2.68%) 781958340 ( 4.61%) 1081.59
http(c) 179864 ( 0.67%) 20718027 ( 0.12%) 115.19
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 120 ( 0.00%) 35813 ( 0.00%) 298.44
ftp 78 ( 0.00%) 6784 ( 0.00%) 86.97
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 321 ( 0.00%) 51944 ( 0.00%) 161.82
bgp 97 ( 0.00%) 18752 ( 0.00%) 193.32
other 60848 ( 0.23%) 52670577 ( 0.31%) 865.61
udp6 94870 ( 0.35%) 72374304 ( 0.43%) 762.88
dns 41962 ( 0.16%) 13079395 ( 0.08%) 311.70
unreal 1 ( 0.00%) 104 ( 0.00%) 104.00
other 52907 ( 0.20%) 59294805 ( 0.35%) 1120.74
icmp6 30370 ( 0.11%) 3392721 ( 0.02%) 111.71
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 77947 ( 0.29%) 55913113 ( 0.33%) 717.32
tcpdump file: 201211171400.dump.gz (621.55 MB)