Traffic Trace Info
DumpFile: 201211221400.dump
FileSize: 2182.33MB
Id: 201211221400
StartTime: Thu Nov 22 14:00:01 2012
EndTime: Thu Nov 22 14:15:01 2012
TotalTime: 899.98 seconds
TotalCapSize: 1718.83MB CapLen: 96 bytes
# of packets: 30375749 (21872.74MB)
AvgRate: 203.79Mbps stddev:40.35M
IP flow (unique src/dst pair) Information
# of flows: 1951544 (avg. 15.56 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 2.2% 1.9% 1.9% 1.4% 1.4% 1.4% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 1480441
Top 10 bandwidth usage (bytes/total in %):
8.8% 7.9% 4.9% 4.3% 4.2% 3.8% 3.1% 2.4% 2.4% 2.3%
# of IPv6 addresses: 12678
Top 10 bandwidth usage (bytes/total in %):
14.5% 7.9% 4.8% 4.2% 4.2% 4.1% 4.1% 3.5% 3.3% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201211221400.pktlen.png)
detailed numbers
[ 32- 63]: 7009548
[ 64- 127]: 6566010
[ 128- 255]: 919600
[ 256- 511]: 718239
[ 512- 1023]: 838698
[ 1024- 2047]: 14323654
Protocol Breakdown
![[protocol breakdown chart]](201211221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30375749 (100.00%) 22935227619 (100.00%) 755.05
ip 28672002 ( 94.39%) 21477436837 ( 93.64%) 749.07
tcp 23580821 ( 77.63%) 19718170317 ( 85.97%) 836.20
http(s) 12042307 ( 39.64%) 15324269107 ( 66.82%) 1272.54
http(c) 7464480 ( 24.57%) 1774594556 ( 7.74%) 237.74
squid 112855 ( 0.37%) 65158157 ( 0.28%) 577.36
smtp 62742 ( 0.21%) 27189977 ( 0.12%) 433.36
ftp 28678 ( 0.09%) 18100566 ( 0.08%) 631.17
pop3 7924 ( 0.03%) 5178689 ( 0.02%) 653.54
imap 4557 ( 0.02%) 998687 ( 0.00%) 219.15
telnet 48566 ( 0.16%) 3645092 ( 0.02%) 75.05
ssh 71685 ( 0.24%) 10804730 ( 0.05%) 150.73
dns 4003 ( 0.01%) 398290 ( 0.00%) 99.50
bgp 969 ( 0.00%) 512613 ( 0.00%) 529.01
rtsp 95 ( 0.00%) 21774 ( 0.00%) 229.20
icecast 1209 ( 0.00%) 369217 ( 0.00%) 305.39
hotline 14 ( 0.00%) 2316 ( 0.00%) 165.43
other 3730737 ( 12.28%) 2486926546 ( 10.84%) 666.60
udp 2897774 ( 9.54%) 1320031280 ( 5.76%) 455.53
dns 698078 ( 2.30%) 298735245 ( 1.30%) 427.94
rip 1 ( 0.00%) 79 ( 0.00%) 79.00
realaud 1243 ( 0.00%) 983576 ( 0.00%) 791.29
halflif 33 ( 0.00%) 2679 ( 0.00%) 81.18
starcra 14 ( 0.00%) 1835 ( 0.00%) 131.07
everque 154 ( 0.00%) 34317 ( 0.00%) 222.84
unreal 23 ( 0.00%) 3427 ( 0.00%) 149.00
quake 87 ( 0.00%) 8231 ( 0.00%) 94.61
cuseeme 2 ( 0.00%) 151 ( 0.00%) 75.50
other 1912103 ( 6.29%) 1001079034 ( 4.36%) 523.55
icmp 1539353 ( 5.07%) 101029324 ( 0.44%) 65.63
ipip 186 ( 0.00%) 19380 ( 0.00%) 104.19
ipsec 14089 ( 0.05%) 3016846 ( 0.01%) 214.13
ip6 522623 ( 1.72%) 283094785 ( 1.23%) 541.68
other 117156 ( 0.39%) 52074905 ( 0.23%) 444.49
frag 733527 ( 2.41%) 623730213 ( 2.72%) 850.32
ip6 1703747 ( 5.61%) 1457790782 ( 6.36%) 855.64
tcp6 1439774 ( 4.74%) 1298096324 ( 5.66%) 901.60
http(s) 985052 ( 3.24%) 1075204316 ( 4.69%) 1091.52
http(c) 209300 ( 0.69%) 26752165 ( 0.12%) 127.82
squid 6 ( 0.00%) 564 ( 0.00%) 94.00
smtp 4886 ( 0.02%) 6454922 ( 0.03%) 1321.11
ftp 212 ( 0.00%) 18909 ( 0.00%) 89.19
ssh 4286 ( 0.01%) 5813776 ( 0.03%) 1356.46
dns 581 ( 0.00%) 267582 ( 0.00%) 460.55
bgp 102 ( 0.00%) 31299 ( 0.00%) 306.85
other 235349 ( 0.77%) 183552791 ( 0.80%) 779.92
udp6 194165 ( 0.64%) 125367096 ( 0.55%) 645.67
dns 66183 ( 0.22%) 19386227 ( 0.08%) 292.92
halflif 1 ( 0.00%) 96 ( 0.00%) 96.00
quake 1 ( 0.00%) 116 ( 0.00%) 116.00
other 127980 ( 0.42%) 105980657 ( 0.46%) 828.10
icmp6 35816 ( 0.12%) 4409179 ( 0.02%) 123.11
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 33877 ( 0.11%) 29902555 ( 0.13%) 882.68
tcpdump file: 201211221400.dump.gz (703.36 MB)