Traffic Trace Info
DumpFile: 201211251400.dump
FileSize: 1535.72MB
Id: 201211251400
StartTime: Sun Nov 25 14:00:00 2012
EndTime: Sun Nov 25 14:15:00 2012
TotalTime: 899.58 seconds
TotalCapSize: 1207.43MB CapLen: 96 bytes
# of packets: 21514258 (16378.05MB)
AvgRate: 152.74Mbps stddev:29.17M
IP flow (unique src/dst pair) Information
# of flows: 1784630 (avg. 12.06 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 3.2% 3.2% 3.0% 2.8% 2.3% 2.1% 1.9% 1.8% 1.7%
IP address Information
# of IPv4 addresses: 1394189
Top 10 bandwidth usage (bytes/total in %):
20.5% 9.0% 6.2% 4.9% 4.0% 3.7% 3.4% 3.4% 3.2% 3.1%
# of IPv6 addresses: 8108
Top 10 bandwidth usage (bytes/total in %):
16.6% 7.5% 7.5% 7.3% 6.3% 6.2% 5.9% 5.1% 4.1% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201211251400.pktlen.png)
detailed numbers
[ 32- 63]: 3912115
[ 64- 127]: 4939367
[ 128- 255]: 552348
[ 256- 511]: 720219
[ 512- 1023]: 660736
[ 1024- 2047]: 10729473
Protocol Breakdown
![[protocol breakdown chart]](201211251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21514258 (100.00%) 17173628075 (100.00%) 798.24
ip 20499104 ( 95.28%) 16336616293 ( 95.13%) 796.94
tcp 15610168 ( 72.56%) 14234712612 ( 82.89%) 911.89
http(s) 8054483 ( 37.44%) 10574694856 ( 61.58%) 1312.90
http(c) 3890688 ( 18.08%) 1247571359 ( 7.26%) 320.66
squid 46162 ( 0.21%) 6260648 ( 0.04%) 135.62
smtp 56999 ( 0.26%) 18371707 ( 0.11%) 322.32
ftp 120659 ( 0.56%) 53052504 ( 0.31%) 439.69
pop3 6600 ( 0.03%) 4922345 ( 0.03%) 745.81
imap 2803 ( 0.01%) 746626 ( 0.00%) 266.37
telnet 42700 ( 0.20%) 4663265 ( 0.03%) 109.21
ssh 60368 ( 0.28%) 10007495 ( 0.06%) 165.77
dns 9137 ( 0.04%) 2462767 ( 0.01%) 269.54
bgp 554 ( 0.00%) 146593 ( 0.00%) 264.61
napster 5 ( 0.00%) 649 ( 0.00%) 129.80
realaud 8 ( 0.00%) 2750 ( 0.00%) 343.75
icecast 7428 ( 0.03%) 3283281 ( 0.02%) 442.01
hotline 23 ( 0.00%) 2524 ( 0.00%) 109.74
other 3311551 ( 15.39%) 2308523243 ( 13.44%) 697.11
udp 3274397 ( 15.22%) 1913356316 ( 11.14%) 584.34
dns 612605 ( 2.85%) 375711131 ( 2.19%) 613.30
rip 2 ( 0.00%) 144 ( 0.00%) 72.00
realaud 27 ( 0.00%) 4865 ( 0.00%) 180.19
halflif 570 ( 0.00%) 104291 ( 0.00%) 182.97
starcra 34 ( 0.00%) 2722 ( 0.00%) 80.06
everque 50 ( 0.00%) 6939 ( 0.00%) 138.78
unreal 5 ( 0.00%) 802 ( 0.00%) 160.40
quake 12 ( 0.00%) 1032 ( 0.00%) 86.00
cuseeme 1 ( 0.00%) 93 ( 0.00%) 93.00
other 2656326 ( 12.35%) 1537136035 ( 8.95%) 578.67
icmp 1334103 ( 6.20%) 88172568 ( 0.51%) 66.09
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 18057 ( 0.08%) 5630590 ( 0.03%) 311.82
ip6 213851 ( 0.99%) 82921229 ( 0.48%) 387.75
sctp 4 ( 0.00%) 264 ( 0.00%) 66.00
other 48339 ( 0.22%) 11803444 ( 0.07%) 244.18
frag 291770 ( 1.36%) 304635460 ( 1.77%) 1044.09
ip6 1015154 ( 4.72%) 837011782 ( 4.87%) 824.52
tcp6 894072 ( 4.16%) 794321973 ( 4.63%) 888.43
http(s) 646114 ( 3.00%) 710242468 ( 4.14%) 1099.25
http(c) 136581 ( 0.63%) 17191399 ( 0.10%) 125.87
squid 3 ( 0.00%) 254 ( 0.00%) 84.67
smtp 34 ( 0.00%) 3507 ( 0.00%) 103.15
ftp 60437 ( 0.28%) 35793930 ( 0.21%) 592.25
ssh 104 ( 0.00%) 125176 ( 0.00%) 1203.62
dns 644 ( 0.00%) 318775 ( 0.00%) 494.99
bgp 106 ( 0.00%) 34043 ( 0.00%) 321.16
other 50049 ( 0.23%) 30612421 ( 0.18%) 611.65
udp6 87653 ( 0.41%) 37586653 ( 0.22%) 428.81
dns 42337 ( 0.20%) 14098204 ( 0.08%) 333.00
other 45316 ( 0.21%) 23488449 ( 0.14%) 518.33
icmp6 31894 ( 0.15%) 3652969 ( 0.02%) 114.53
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1421 ( 0.01%) 1434695 ( 0.01%) 1009.64
tcpdump file: 201211251400.dump.gz (485.07 MB)