Traffic Trace Info
DumpFile: 201211261400.dump
FileSize: 1995.05MB
Id: 201211261400
StartTime: Mon Nov 26 14:00:00 2012
EndTime: Mon Nov 26 14:15:00 2012
TotalTime: 900.48 seconds
TotalCapSize: 1574.60MB CapLen: 96 bytes
# of packets: 27554476 (20061.13MB)
AvgRate: 186.89Mbps stddev:33.43M
IP flow (unique src/dst pair) Information
# of flows: 1790948 (avg. 15.39 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.7% 2.8% 2.7% 2.7% 1.5% 1.4% 1.3% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 1358026
Top 10 bandwidth usage (bytes/total in %):
13.5% 6.5% 6.2% 5.8% 4.9% 4.8% 3.0% 3.0% 2.9% 2.9%
# of IPv6 addresses: 9368
Top 10 bandwidth usage (bytes/total in %):
18.4% 7.8% 5.4% 4.5% 3.5% 2.7% 2.6% 2.5% 2.4% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201211261400.pktlen.png)
detailed numbers
[ 32- 63]: 4985359
[ 64- 127]: 6683860
[ 128- 255]: 750923
[ 256- 511]: 1150242
[ 512- 1023]: 976889
[ 1024- 2047]: 13007203
Protocol Breakdown
![[protocol breakdown chart]](201211261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27554476 (100.00%) 21035618176 (100.00%) 763.42
ip 26082725 ( 94.66%) 19881592998 ( 94.51%) 762.25
tcp 21169023 ( 76.83%) 17621672414 ( 83.77%) 832.43
http(s) 11000178 ( 39.92%) 13480715366 ( 64.09%) 1225.50
http(c) 7548952 ( 27.40%) 2836081636 ( 13.48%) 375.69
squid 113912 ( 0.41%) 20220473 ( 0.10%) 177.51
smtp 138410 ( 0.50%) 32380561 ( 0.15%) 233.95
ftp 48386 ( 0.18%) 34872878 ( 0.17%) 720.72
pop3 19072 ( 0.07%) 17717292 ( 0.08%) 928.97
imap 3340 ( 0.01%) 978355 ( 0.00%) 292.92
telnet 43470 ( 0.16%) 4691337 ( 0.02%) 107.92
ssh 20638 ( 0.07%) 3578526 ( 0.02%) 173.39
dns 4046 ( 0.01%) 394841 ( 0.00%) 97.59
bgp 543 ( 0.00%) 115857 ( 0.00%) 213.36
napster 146 ( 0.00%) 50072 ( 0.00%) 342.96
realaud 16 ( 0.00%) 1713 ( 0.00%) 107.06
icecast 48276 ( 0.18%) 40527846 ( 0.19%) 839.50
hotline 19 ( 0.00%) 2203 ( 0.00%) 115.95
other 2179619 ( 7.91%) 1149343458 ( 5.46%) 527.31
udp 3009723 ( 10.92%) 1865011528 ( 8.87%) 619.66
dns 915378 ( 3.32%) 504657788 ( 2.40%) 551.31
realaud 4 ( 0.00%) 651 ( 0.00%) 162.75
halflif 694 ( 0.00%) 129496 ( 0.00%) 186.59
starcra 10 ( 0.00%) 1653 ( 0.00%) 165.30
everque 128 ( 0.00%) 22853 ( 0.00%) 178.54
unreal 7 ( 0.00%) 901 ( 0.00%) 128.71
quake 11 ( 0.00%) 967 ( 0.00%) 87.91
cuseeme 6 ( 0.00%) 792 ( 0.00%) 132.00
other 1911658 ( 6.94%) 1349167215 ( 6.41%) 705.76
icmp 1356005 ( 4.92%) 89175644 ( 0.42%) 65.76
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 18796 ( 0.07%) 3360824 ( 0.02%) 178.81
ip6 475380 ( 1.73%) 287451834 ( 1.37%) 604.68
other 53613 ( 0.19%) 14901484 ( 0.07%) 277.95
frag 723087 ( 2.62%) 653444517 ( 3.11%) 903.69
ip6 1471751 ( 5.34%) 1154025178 ( 5.49%) 784.12
tcp6 1335124 ( 4.85%) 1105816511 ( 5.26%) 828.25
http(s) 960628 ( 3.49%) 1015261642 ( 4.83%) 1056.87
http(c) 262905 ( 0.95%) 29493365 ( 0.14%) 112.18
squid 7 ( 0.00%) 956 ( 0.00%) 136.57
smtp 1621 ( 0.01%) 514228 ( 0.00%) 317.23
ftp 70659 ( 0.26%) 43577536 ( 0.21%) 616.73
pop3 52 ( 0.00%) 11956 ( 0.00%) 229.92
ssh 88 ( 0.00%) 103048 ( 0.00%) 1171.00
dns 715 ( 0.00%) 320163 ( 0.00%) 447.78
bgp 96 ( 0.00%) 26829 ( 0.00%) 279.47
other 38353 ( 0.14%) 16506788 ( 0.08%) 430.39
udp6 107645 ( 0.39%) 43084892 ( 0.20%) 400.25
dns 70493 ( 0.26%) 22892035 ( 0.11%) 324.74
other 37152 ( 0.13%) 20192857 ( 0.10%) 543.52
icmp6 27216 ( 0.10%) 3330681 ( 0.02%) 122.38
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1653 ( 0.01%) 1777720 ( 0.01%) 1075.45
tcpdump file: 201211261400.dump.gz (656.85 MB)