Traffic Trace Info
DumpFile: 201211191400.dump
FileSize: 3038.11MB
Id: 201211191400
StartTime: Mon Nov 19 14:00:01 2012
EndTime: Mon Nov 19 14:15:01 2012
TotalTime: 899.56 seconds
TotalCapSize: -1704.84MB CapLen: 96 bytes
# of packets: 42398030 (29198.93MB)
AvgRate: 272.25Mbps stddev:45.42M
IP flow (unique src/dst pair) Information
# of flows: 8266769 (avg. 5.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.3% 6.3% 1.7% 1.6% 1.5% 1.5% 1.5% 1.4% 1.4% 1.1%
IP address Information
# of IPv4 addresses: 7682397
Top 10 bandwidth usage (bytes/total in %):
9.1% 8.8% 8.4% 6.7% 6.6% 5.7% 4.4% 4.2% 3.3% 2.4%
# of IPv6 addresses: 10366
Top 10 bandwidth usage (bytes/total in %):
12.1% 6.4% 3.6% 3.4% 3.3% 3.2% 2.8% 2.7% 2.1% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201211191400.pktlen.png)
detailed numbers
[ 32- 63]: 6310767
[ 64- 127]: 13735979
[ 128- 255]: 1032440
[ 256- 511]: 1050620
[ 512- 1023]: 1288920
[ 1024- 2047]: 18979304
Protocol Breakdown
![[protocol breakdown chart]](201211191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42398030 (100.00%) 30617299506 (100.00%) 722.14
ip 40350190 ( 95.17%) 28954292272 ( 94.57%) 717.58
tcp 27971341 ( 65.97%) 25645750158 ( 83.76%) 916.86
http(s) 17107855 ( 40.35%) 21870804508 ( 71.43%) 1278.41
http(c) 8579370 ( 20.24%) 2477823606 ( 8.09%) 288.81
squid 40018 ( 0.09%) 30122534 ( 0.10%) 752.72
smtp 68708 ( 0.16%) 18653627 ( 0.06%) 271.49
ftp 90385 ( 0.21%) 78938468 ( 0.26%) 873.36
pop3 15313 ( 0.04%) 9353404 ( 0.03%) 610.81
imap 4623 ( 0.01%) 1600164 ( 0.01%) 346.13
telnet 84634 ( 0.20%) 6267936 ( 0.02%) 74.06
ssh 14978 ( 0.04%) 3292314 ( 0.01%) 219.81
dns 4193 ( 0.01%) 464168 ( 0.00%) 110.70
bgp 600 ( 0.00%) 164206 ( 0.00%) 273.68
napster 54 ( 0.00%) 7640 ( 0.00%) 141.48
realaud 64 ( 0.00%) 21945 ( 0.00%) 342.89
rtsp 48 ( 0.00%) 9360 ( 0.00%) 195.00
icecast 28517 ( 0.07%) 19015351 ( 0.06%) 666.81
hotline 13 ( 0.00%) 2537 ( 0.00%) 195.15
other 1931968 ( 4.56%) 1129208390 ( 3.69%) 584.49
udp 10043972 ( 23.69%) 2658310333 ( 8.68%) 264.67
dns 7159910 ( 16.89%) 731262997 ( 2.39%) 102.13
rip 92 ( 0.00%) 6888 ( 0.00%) 74.87
realaud 206 ( 0.00%) 15556 ( 0.00%) 75.51
halflif 202 ( 0.00%) 15577 ( 0.00%) 77.11
starcra 167 ( 0.00%) 13372 ( 0.00%) 80.07
everque 419 ( 0.00%) 47786 ( 0.00%) 114.05
unreal 103 ( 0.00%) 7908 ( 0.00%) 76.78
quake 306 ( 0.00%) 23513 ( 0.00%) 76.84
cuseeme 115 ( 0.00%) 8601 ( 0.00%) 74.79
other 2882290 ( 6.80%) 1926784123 ( 6.29%) 668.49
icmp 1489876 ( 3.51%) 99301718 ( 0.32%) 66.65
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 9740 ( 0.02%) 2677392 ( 0.01%) 274.89
ip6 776781 ( 1.83%) 535256389 ( 1.75%) 689.07
pim 16 ( 0.00%) 960 ( 0.00%) 60.00
other 58279 ( 0.14%) 12976052 ( 0.04%) 222.65
frag 109666 ( 0.26%) 117275001 ( 0.38%) 1069.38
ip6 2047840 ( 4.83%) 1663007234 ( 5.43%) 812.08
tcp6 1919816 ( 4.53%) 1621649515 ( 5.30%) 844.69
http(s) 1469107 ( 3.47%) 1519759600 ( 4.96%) 1034.48
http(c) 367239 ( 0.87%) 38942328 ( 0.13%) 106.04
smtp 270 ( 0.00%) 151672 ( 0.00%) 561.75
ftp 72 ( 0.00%) 6308 ( 0.00%) 87.61
ssh 120 ( 0.00%) 15300 ( 0.00%) 127.50
dns 803 ( 0.00%) 419154 ( 0.00%) 521.99
bgp 95 ( 0.00%) 21591 ( 0.00%) 227.27
other 82110 ( 0.19%) 62333562 ( 0.20%) 759.15
udp6 94587 ( 0.22%) 35880483 ( 0.12%) 379.34
dns 73779 ( 0.17%) 21961963 ( 0.07%) 297.67
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 20807 ( 0.05%) 13918414 ( 0.05%) 668.93
icmp6 31374 ( 0.07%) 3431657 ( 0.01%) 109.38
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1948 ( 0.00%) 2029951 ( 0.01%) 1042.07
tcpdump file: 201211191400.dump.gz (995.58 MB)