Traffic Trace Info
DumpFile: 201211241400.dump
FileSize: 1631.28MB
Id: 201211241400
StartTime: Sat Nov 24 14:00:00 2012
EndTime: Sat Nov 24 14:15:00 2012
TotalTime: 899.44 seconds
TotalCapSize: 1287.47MB CapLen: 96 bytes
# of packets: 22531472 (16511.51MB)
AvgRate: 153.97Mbps stddev:35.52M
IP flow (unique src/dst pair) Information
# of flows: 1860038 (avg. 12.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.9% 4.9% 3.0% 2.5% 2.0% 1.6% 1.6% 1.6% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 1420617
Top 10 bandwidth usage (bytes/total in %):
19.1% 14.3% 9.2% 7.6% 5.8% 5.7% 3.9% 3.6% 3.3% 2.8%
# of IPv6 addresses: 7844
Top 10 bandwidth usage (bytes/total in %):
36.0% 32.7% 7.0% 4.5% 4.4% 3.6% 3.5% 3.4% 2.6% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201211241400.pktlen.png)
detailed numbers
[ 32- 63]: 3804346
[ 64- 127]: 5875103
[ 128- 255]: 608528
[ 256- 511]: 826698
[ 512- 1023]: 640915
[ 1024- 2047]: 10775882
Protocol Breakdown
![[protocol breakdown chart]](201211241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22531472 (100.00%) 17313577393 (100.00%) 768.42
ip 20887507 ( 92.70%) 15736343987 ( 90.89%) 753.39
tcp 15966446 ( 70.86%) 13565221635 ( 78.35%) 849.61
http(s) 8083123 ( 35.87%) 10224967165 ( 59.06%) 1264.98
http(c) 4502369 ( 19.98%) 1373672995 ( 7.93%) 305.10
squid 20221 ( 0.09%) 11743497 ( 0.07%) 580.76
smtp 51175 ( 0.23%) 12775047 ( 0.07%) 249.63
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 44522 ( 0.20%) 23861423 ( 0.14%) 535.95
pop3 7668 ( 0.03%) 2912733 ( 0.02%) 379.86
imap 894 ( 0.00%) 115737 ( 0.00%) 129.46
telnet 42217 ( 0.19%) 4598757 ( 0.03%) 108.93
ssh 783575 ( 3.48%) 101728955 ( 0.59%) 129.83
dns 3706 ( 0.02%) 399130 ( 0.00%) 107.70
bgp 516 ( 0.00%) 108091 ( 0.00%) 209.48
napster 33 ( 0.00%) 3940 ( 0.00%) 119.39
realaud 22 ( 0.00%) 2209 ( 0.00%) 100.41
rtsp 415 ( 0.00%) 533792 ( 0.00%) 1286.25
icecast 1333 ( 0.01%) 256998 ( 0.00%) 192.80
hotline 11 ( 0.00%) 1409 ( 0.00%) 128.09
other 2424487 ( 10.76%) 1807530215 ( 10.44%) 745.53
udp 2916873 ( 12.95%) 1880743277 ( 10.86%) 644.78
dns 487189 ( 2.16%) 203466154 ( 1.18%) 417.63
realaud 9 ( 0.00%) 967 ( 0.00%) 107.44
halflif 6 ( 0.00%) 870 ( 0.00%) 145.00
starcra 75 ( 0.00%) 5073 ( 0.00%) 67.64
everque 142 ( 0.00%) 16242 ( 0.00%) 114.38
unreal 1 ( 0.00%) 79 ( 0.00%) 79.00
quake 11 ( 0.00%) 880 ( 0.00%) 80.00
cuseeme 3 ( 0.00%) 568 ( 0.00%) 189.33
other 2427721 ( 10.77%) 1676673531 ( 9.68%) 690.64
icmp 1372082 ( 6.09%) 90752686 ( 0.52%) 66.14
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2318 ( 0.01%) 1033980 ( 0.01%) 446.07
ip6 587546 ( 2.61%) 185849454 ( 1.07%) 316.31
other 42057 ( 0.19%) 12723685 ( 0.07%) 302.53
frag 104108 ( 0.46%) 118202289 ( 0.68%) 1135.38
ip6 1643965 ( 7.30%) 1577233406 ( 9.11%) 959.41
tcp6 1519415 ( 6.74%) 1511779068 ( 8.73%) 994.97
http(s) 783123 ( 3.48%) 851110825 ( 4.92%) 1086.82
http(c) 174666 ( 0.78%) 22291659 ( 0.13%) 127.62
smtp 59 ( 0.00%) 11227 ( 0.00%) 190.29
ftp 72 ( 0.00%) 6308 ( 0.00%) 87.61
pop3 54 ( 0.00%) 11931 ( 0.00%) 220.94
ssh 244 ( 0.00%) 183980 ( 0.00%) 754.02
dns 649 ( 0.00%) 282447 ( 0.00%) 435.20
bgp 104 ( 0.00%) 27185 ( 0.00%) 261.39
other 560444 ( 2.49%) 637853506 ( 3.68%) 1138.12
udp6 90094 ( 0.40%) 56750594 ( 0.33%) 629.90
dns 45284 ( 0.20%) 14791178 ( 0.09%) 326.63
quake 2 ( 0.00%) 227 ( 0.00%) 113.50
other 44808 ( 0.20%) 41959189 ( 0.24%) 936.42
icmp6 29615 ( 0.13%) 3430820 ( 0.02%) 115.85
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 4726 ( 0.02%) 5257296 ( 0.03%) 1112.42
tcpdump file: 201211241400.dump.gz (519.10 MB)