Traffic Trace Info
DumpFile: 201211271400.dump
FileSize: 2906.91MB
Id: 201211271400
StartTime: Tue Nov 27 14:00:00 2012
EndTime: Tue Nov 27 14:15:01 2012
TotalTime: 900.09 seconds
TotalCapSize: -1798.96MB CapLen: 96 bytes
# of packets: 39968137 (29894.40MB)
AvgRate: 278.61Mbps stddev:39.64M
IP flow (unique src/dst pair) Information
# of flows: 1986510 (avg. 20.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 1.6% 1.5% 1.0% 1.0% 1.0% 0.9% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 1432889
Top 10 bandwidth usage (bytes/total in %):
22.3% 5.7% 3.6% 3.6% 3.6% 3.6% 2.5% 2.0% 1.9% 1.8%
# of IPv6 addresses: 11121
Top 10 bandwidth usage (bytes/total in %):
10.9% 8.9% 8.9% 4.6% 4.6% 2.3% 2.3% 2.2% 2.1% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201211271400.pktlen.png)
detailed numbers
[ 32- 63]: 7242673
[ 64- 127]: 9682953
[ 128- 255]: 877824
[ 256- 511]: 1628867
[ 512- 1023]: 1098849
[ 1024- 2047]: 19436971
Protocol Breakdown
![[protocol breakdown chart]](201211271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39968137 (100.00%) 31346551364 (100.00%) 784.29
ip 37267703 ( 93.24%) 28934213006 ( 92.30%) 776.39
tcp 31642244 ( 79.17%) 26671387819 ( 85.09%) 842.90
http(s) 15443982 ( 38.64%) 20312614853 ( 64.80%) 1315.24
http(c) 11116452 ( 27.81%) 3345580323 ( 10.67%) 300.96
squid 315611 ( 0.79%) 259816124 ( 0.83%) 823.22
smtp 271298 ( 0.68%) 32747024 ( 0.10%) 120.70
ftp 40914 ( 0.10%) 27373206 ( 0.09%) 669.04
pop3 21833 ( 0.05%) 26472481 ( 0.08%) 1212.50
imap 2180 ( 0.01%) 265667 ( 0.00%) 121.87
telnet 41828 ( 0.10%) 4566415 ( 0.01%) 109.17
ssh 446093 ( 1.12%) 71736607 ( 0.23%) 160.81
dns 5706 ( 0.01%) 1395234 ( 0.00%) 244.52
bgp 534 ( 0.00%) 123742 ( 0.00%) 231.73
napster 52 ( 0.00%) 5348 ( 0.00%) 102.85
realaud 318 ( 0.00%) 20522 ( 0.00%) 64.53
icecast 111295 ( 0.28%) 93363650 ( 0.30%) 838.88
hotline 17 ( 0.00%) 2781 ( 0.00%) 163.59
other 3824130 ( 9.57%) 2495303782 ( 7.96%) 652.52
udp 3299618 ( 8.26%) 1889616014 ( 6.03%) 572.68
dns 944467 ( 2.36%) 495327445 ( 1.58%) 524.45
realaud 27 ( 0.00%) 2742 ( 0.00%) 101.56
halflif 26 ( 0.00%) 2265 ( 0.00%) 87.12
starcra 45 ( 0.00%) 10785 ( 0.00%) 239.67
everque 91 ( 0.00%) 12803 ( 0.00%) 140.69
unreal 319 ( 0.00%) 36730 ( 0.00%) 115.14
quake 5 ( 0.00%) 475 ( 0.00%) 95.00
cuseeme 7 ( 0.00%) 897 ( 0.00%) 128.14
other 2353495 ( 5.89%) 1393309284 ( 4.44%) 592.02
icmp 1556323 ( 3.89%) 101762475 ( 0.32%) 65.39
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 25985 ( 0.07%) 8192318 ( 0.03%) 315.27
ip6 692981 ( 1.73%) 249843008 ( 0.80%) 360.53
other 50367 ( 0.13%) 13392102 ( 0.04%) 265.89
frag 341568 ( 0.85%) 362591515 ( 1.16%) 1061.55
ip6 2700434 ( 6.76%) 2412338358 ( 7.70%) 893.32
tcp6 2513496 ( 6.29%) 2337524720 ( 7.46%) 929.99
http(s) 1921252 ( 4.81%) 2105483806 ( 6.72%) 1095.89
http(c) 371940 ( 0.93%) 44787388 ( 0.14%) 120.42
smtp 2297 ( 0.01%) 712463 ( 0.00%) 310.17
ftp 52882 ( 0.13%) 36267236 ( 0.12%) 685.81
pop3 90 ( 0.00%) 10781 ( 0.00%) 119.79
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 692 ( 0.00%) 317602 ( 0.00%) 458.96
bgp 96 ( 0.00%) 25868 ( 0.00%) 269.46
other 164235 ( 0.41%) 149918568 ( 0.48%) 912.83
udp6 154382 ( 0.39%) 66358717 ( 0.21%) 429.83
dns 82366 ( 0.21%) 25155915 ( 0.08%) 305.42
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 1 ( 0.00%) 105 ( 0.00%) 105.00
quake 1 ( 0.00%) 114 ( 0.00%) 114.00
other 72013 ( 0.18%) 41202476 ( 0.13%) 572.15
icmp6 27842 ( 0.07%) 3315002 ( 0.01%) 119.06
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4602 ( 0.01%) 5124663 ( 0.02%) 1113.57
tcpdump file: 201211271400.dump.gz (927.61 MB)