Traffic Trace Info
DumpFile: 201211291400.dump
FileSize: 2435.24MB
Id: 201211291400
StartTime: Thu Nov 29 14:00:01 2012
EndTime: Thu Nov 29 14:15:00 2012
TotalTime: 899.53 seconds
TotalCapSize: 1925.06MB CapLen: 96 bytes
# of packets: 33434620 (24577.29MB)
AvgRate: 229.32Mbps stddev:35.25M
IP flow (unique src/dst pair) Information
# of flows: 1940345 (avg. 17.23 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 2.4% 2.2% 1.9% 1.9% 1.9% 1.6% 1.5% 1.5% 1.4%
IP address Information
# of IPv4 addresses: 1396841
Top 10 bandwidth usage (bytes/total in %):
8.3% 4.7% 4.6% 3.9% 3.4% 3.3% 3.2% 3.0% 2.7% 2.7%
# of IPv6 addresses: 11505
Top 10 bandwidth usage (bytes/total in %):
11.2% 10.1% 9.6% 4.0% 3.9% 3.1% 3.0% 2.8% 2.8% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201211291400.pktlen.png)
detailed numbers
[ 32- 63]: 5983331
[ 64- 127]: 8072700
[ 128- 255]: 1096174
[ 256- 511]: 1122098
[ 512- 1023]: 1124666
[ 1024- 2047]: 16035651
Protocol Breakdown
![[protocol breakdown chart]](201211291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33434620 (100.00%) 25771151528 (100.00%) 770.79
ip 30911333 ( 92.45%) 23520104168 ( 91.27%) 760.89
tcp 25822887 ( 77.23%) 21224669884 ( 82.36%) 821.93
http(s) 12684369 ( 37.94%) 15644454424 ( 60.71%) 1233.36
http(c) 8719021 ( 26.08%) 3199478084 ( 12.41%) 366.95
squid 144910 ( 0.43%) 41142304 ( 0.16%) 283.92
smtp 133394 ( 0.40%) 27258609 ( 0.11%) 204.35
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 7583 ( 0.02%) 629934 ( 0.00%) 83.07
pop3 6351 ( 0.02%) 3978372 ( 0.02%) 626.42
imap 9010 ( 0.03%) 8536789 ( 0.03%) 947.48
telnet 44226 ( 0.13%) 4736928 ( 0.02%) 107.11
ssh 312750 ( 0.94%) 56369383 ( 0.22%) 180.24
dns 10495 ( 0.03%) 960633 ( 0.00%) 91.53
bgp 713 ( 0.00%) 246497 ( 0.00%) 345.72
napster 65 ( 0.00%) 7885 ( 0.00%) 121.31
realaud 55 ( 0.00%) 6001 ( 0.00%) 109.11
rtsp 3 ( 0.00%) 180 ( 0.00%) 60.00
icecast 17494 ( 0.05%) 15371381 ( 0.06%) 878.67
hotline 5 ( 0.00%) 678 ( 0.00%) 135.60
other 3732442 ( 11.16%) 2221491742 ( 8.62%) 595.18
udp 3026083 ( 9.05%) 1805761325 ( 7.01%) 596.73
dns 886564 ( 2.65%) 437600982 ( 1.70%) 493.59
realaud 18 ( 0.00%) 1432 ( 0.00%) 79.56
halflif 8 ( 0.00%) 779 ( 0.00%) 97.38
starcra 30 ( 0.00%) 2554 ( 0.00%) 85.13
everque 155 ( 0.00%) 25266 ( 0.00%) 163.01
unreal 161 ( 0.00%) 132677 ( 0.00%) 824.08
quake 13 ( 0.00%) 1350 ( 0.00%) 103.85
cuseeme 1 ( 0.00%) 86 ( 0.00%) 86.00
other 2135236 ( 6.39%) 1367039329 ( 5.30%) 640.23
icmp 1321851 ( 3.95%) 87025578 ( 0.34%) 65.84
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 14149 ( 0.04%) 2619710 ( 0.01%) 185.15
ip6 677411 ( 2.03%) 386533220 ( 1.50%) 570.60
other 48767 ( 0.15%) 13475181 ( 0.05%) 276.32
frag 277647 ( 0.83%) 293375873 ( 1.14%) 1056.65
ip6 2523287 ( 7.55%) 2251047360 ( 8.73%) 892.11
tcp6 2293942 ( 6.86%) 2150128375 ( 8.34%) 937.31
http(s) 1925091 ( 5.76%) 2092188921 ( 8.12%) 1086.80
http(c) 345890 ( 1.03%) 41722630 ( 0.16%) 120.62
smtp 250 ( 0.00%) 95913 ( 0.00%) 383.65
ftp 3003 ( 0.01%) 1669989 ( 0.01%) 556.11
pop3 23 ( 0.00%) 2044 ( 0.00%) 88.87
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 752 ( 0.00%) 348454 ( 0.00%) 463.37
bgp 104 ( 0.00%) 33540 ( 0.00%) 322.50
other 18817 ( 0.06%) 14065876 ( 0.05%) 747.51
udp6 195341 ( 0.58%) 93400502 ( 0.36%) 478.14
dns 73547 ( 0.22%) 25046484 ( 0.10%) 340.55
halflif 2 ( 0.00%) 226 ( 0.00%) 113.00
quake 1 ( 0.00%) 110 ( 0.00%) 110.00
other 121791 ( 0.36%) 68353682 ( 0.27%) 561.24
icmp6 30144 ( 0.09%) 3225885 ( 0.01%) 107.02
ip6 84 ( 0.00%) 11462 ( 0.00%) 136.45
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3746 ( 0.01%) 4277056 ( 0.02%) 1141.77
tcpdump file: 201211291400.dump.gz (792.01 MB)