Traffic Trace Info
DumpFile: 201211181400.dump
FileSize: 2543.04MB
Id: 201211181400
StartTime: Sun Nov 18 14:00:01 2012
EndTime: Sun Nov 18 14:15:00 2012
TotalTime: 899.51 seconds
TotalCapSize: 1982.42MB CapLen: 96 bytes
# of packets: 36739949 (28566.43MB)
AvgRate: 266.28Mbps stddev:62.32M
IP flow (unique src/dst pair) Information
# of flows: 8941685 (avg. 4.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
39.6% 4.9% 3.9% 3.2% 2.9% 2.3% 1.6% 1.6% 1.4% 1.1%
IP address Information
# of IPv4 addresses: 8500559
Top 10 bandwidth usage (bytes/total in %):
41.4% 40.6% 12.5% 8.9% 5.2% 4.2% 4.1% 4.1% 3.3% 3.1%
# of IPv6 addresses: 8507
Top 10 bandwidth usage (bytes/total in %):
11.2% 10.9% 6.6% 4.7% 4.4% 4.4% 4.2% 4.0% 3.6% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201211181400.pktlen.png)
detailed numbers
[ 32- 63]: 4138551
[ 64- 127]: 12021151
[ 128- 255]: 561192
[ 256- 511]: 572848
[ 512- 1023]: 552383
[ 1024- 2047]: 18893824
Protocol Breakdown
![[protocol breakdown chart]](201211181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36739949 (100.00%) 29954068818 (100.00%) 815.30
ip 35478785 ( 96.57%) 29178830537 ( 97.41%) 822.43
tcp 18493050 ( 50.33%) 14639825429 ( 48.87%) 791.64
http(s) 9783230 ( 26.63%) 12262353411 ( 40.94%) 1253.41
http(c) 6016952 ( 16.38%) 596806323 ( 1.99%) 99.19
squid 39617 ( 0.11%) 12521288 ( 0.04%) 316.06
smtp 41006 ( 0.11%) 8105619 ( 0.03%) 197.67
nntp 52 ( 0.00%) 3848 ( 0.00%) 74.00
ftp 56947 ( 0.16%) 30380292 ( 0.10%) 533.48
pop3 2640 ( 0.01%) 547445 ( 0.00%) 207.37
imap 2854 ( 0.01%) 539776 ( 0.00%) 189.13
telnet 16784 ( 0.05%) 1255847 ( 0.00%) 74.82
ssh 145307 ( 0.40%) 13990056 ( 0.05%) 96.28
dns 3680 ( 0.01%) 379329 ( 0.00%) 103.08
bgp 558 ( 0.00%) 101178 ( 0.00%) 181.32
napster 156 ( 0.00%) 12429 ( 0.00%) 79.67
realaud 47 ( 0.00%) 4058 ( 0.00%) 86.34
rtsp 50 ( 0.00%) 3686 ( 0.00%) 73.72
icecast 2156 ( 0.01%) 160249 ( 0.00%) 74.33
hotline 38 ( 0.00%) 2812 ( 0.00%) 74.00
other 2380973 ( 6.48%) 1712657369 ( 5.72%) 719.31
udp 14579610 ( 39.68%) 13247165206 ( 44.22%) 908.61
dns 4929458 ( 13.42%) 462281419 ( 1.54%) 93.78
rip 53 ( 0.00%) 3965 ( 0.00%) 74.81
realaud 155 ( 0.00%) 12023 ( 0.00%) 77.57
halflif 174 ( 0.00%) 14199 ( 0.00%) 81.60
starcra 69 ( 0.00%) 5606 ( 0.00%) 81.25
everque 265 ( 0.00%) 23205 ( 0.00%) 87.57
unreal 88 ( 0.00%) 11087 ( 0.00%) 125.99
quake 217 ( 0.00%) 16274 ( 0.00%) 75.00
cuseeme 64 ( 0.00%) 4751 ( 0.00%) 74.23
other 9648842 ( 26.26%) 12784696953 ( 42.68%) 1325.00
icmp 1349839 ( 3.67%) 89013728 ( 0.30%) 65.94
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 6638 ( 0.02%) 2186084 ( 0.01%) 329.33
ip6 998032 ( 2.72%) 1188169132 ( 3.97%) 1190.51
pim 16 ( 0.00%) 960 ( 0.00%) 60.00
other 51415 ( 0.14%) 12450728 ( 0.04%) 242.16
frag 49375 ( 0.13%) 55067797 ( 0.18%) 1115.30
ip6 1261164 ( 3.43%) 775238281 ( 2.59%) 614.70
tcp6 1152705 ( 3.14%) 733366132 ( 2.45%) 636.21
http(s) 559864 ( 1.52%) 611712882 ( 2.04%) 1092.61
http(c) 482042 ( 1.31%) 41914016 ( 0.14%) 86.95
smtp 90 ( 0.00%) 13391 ( 0.00%) 148.79
ftp 104 ( 0.00%) 9310 ( 0.00%) 89.52
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 734 ( 0.00%) 386732 ( 0.00%) 526.88
bgp 95 ( 0.00%) 21185 ( 0.00%) 223.00
other 109764 ( 0.30%) 79307608 ( 0.26%) 722.53
udp6 63561 ( 0.17%) 30315017 ( 0.10%) 476.94
dns 38279 ( 0.10%) 11613787 ( 0.04%) 303.40
halflif 1 ( 0.00%) 116 ( 0.00%) 116.00
other 25281 ( 0.07%) 18701114 ( 0.06%) 739.73
icmp6 35267 ( 0.10%) 3722442 ( 0.01%) 105.55
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 9516 ( 0.03%) 7819062 ( 0.03%) 821.68
tcpdump file: 201211181400.dump.gz (723.41 MB)