Traffic Trace Info
DumpFile: 201211301400.dump
FileSize: 2988.45MB
Id: 201211301400
StartTime: Fri Nov 30 14:00:00 2012
EndTime: Fri Nov 30 14:15:01 2012
TotalTime: 900.41 seconds
TotalCapSize: -1723.98MB CapLen: 96 bytes
# of packets: 40398333 (31756.23MB)
AvgRate: 295.88Mbps stddev:84.20M
IP flow (unique src/dst pair) Information
# of flows: 1936720 (avg. 20.86 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.3% 4.5% 3.2% 2.1% 2.0% 2.0% 1.5% 1.3% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 1443170
Top 10 bandwidth usage (bytes/total in %):
12.8% 12.0% 7.9% 7.0% 6.6% 5.9% 5.0% 4.8% 3.4% 3.0%
# of IPv6 addresses: 10120
Top 10 bandwidth usage (bytes/total in %):
7.6% 5.2% 4.1% 3.9% 3.1% 3.0% 2.8% 2.7% 2.6% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201211301400.pktlen.png)
detailed numbers
[ 32- 63]: 6731206
[ 64- 127]: 9490768
[ 128- 255]: 861510
[ 256- 511]: 1060335
[ 512- 1023]: 1330582
[ 1024- 2047]: 20923932
Protocol Breakdown
![[protocol breakdown chart]](201211301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40398333 (100.00%) 33298819559 (100.00%) 824.26
ip 38313719 ( 94.84%) 31738674194 ( 95.31%) 828.39
tcp 33597683 ( 83.17%) 30100822188 ( 90.40%) 895.92
http(s) 19038096 ( 47.13%) 25454146892 ( 76.44%) 1337.01
http(c) 10411474 ( 25.77%) 2705130033 ( 8.12%) 259.82
squid 196744 ( 0.49%) 74859836 ( 0.22%) 380.49
smtp 171194 ( 0.42%) 44588240 ( 0.13%) 260.45
ftp 44134 ( 0.11%) 35384070 ( 0.11%) 801.74
pop3 46430 ( 0.11%) 6219778 ( 0.02%) 133.96
imap 3535 ( 0.01%) 1109088 ( 0.00%) 313.74
telnet 58801 ( 0.15%) 5821306 ( 0.02%) 99.00
ssh 259944 ( 0.64%) 46088333 ( 0.14%) 177.30
dns 12287 ( 0.03%) 1283723 ( 0.00%) 104.48
bgp 580 ( 0.00%) 150376 ( 0.00%) 259.27
napster 59 ( 0.00%) 5470 ( 0.00%) 92.71
realaud 54 ( 0.00%) 5998 ( 0.00%) 111.07
icecast 43382 ( 0.11%) 23954630 ( 0.07%) 552.18
hotline 10 ( 0.00%) 1318 ( 0.00%) 131.80
other 3310959 ( 8.20%) 1702073097 ( 5.11%) 514.07
udp 2616194 ( 6.48%) 1229158904 ( 3.69%) 469.83
dns 822464 ( 2.04%) 443108139 ( 1.33%) 538.76
realaud 18 ( 0.00%) 2068 ( 0.00%) 114.89
halflif 17 ( 0.00%) 3210 ( 0.00%) 188.82
starcra 19 ( 0.00%) 2127 ( 0.00%) 111.95
everque 80 ( 0.00%) 10703 ( 0.00%) 133.79
unreal 634 ( 0.00%) 541217 ( 0.00%) 853.65
quake 14 ( 0.00%) 1512 ( 0.00%) 108.00
cuseeme 1 ( 0.00%) 83 ( 0.00%) 83.00
other 1791113 ( 4.43%) 784697919 ( 2.36%) 438.11
icmp 1443491 ( 3.57%) 104605652 ( 0.31%) 72.47
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 23940 ( 0.06%) 6106712 ( 0.02%) 255.08
ip6 580677 ( 1.44%) 284319387 ( 0.85%) 489.63
other 51549 ( 0.13%) 13642081 ( 0.04%) 264.64
frag 317174 ( 0.79%) 324455392 ( 0.97%) 1022.96
ip6 2084614 ( 5.16%) 1560145365 ( 4.69%) 748.41
tcp6 1872254 ( 4.63%) 1438201521 ( 4.32%) 768.17
http(s) 1228559 ( 3.04%) 1241501760 ( 3.73%) 1010.53
http(c) 397931 ( 0.99%) 44987947 ( 0.14%) 113.05
smtp 262 ( 0.00%) 118854 ( 0.00%) 453.64
ftp 38575 ( 0.10%) 21812448 ( 0.07%) 565.46
ssh 42452 ( 0.11%) 11428765 ( 0.03%) 269.22
dns 425 ( 0.00%) 110463 ( 0.00%) 259.91
bgp 99 ( 0.00%) 26443 ( 0.00%) 267.10
other 163951 ( 0.41%) 118214841 ( 0.36%) 721.04
udp6 184037 ( 0.46%) 116297456 ( 0.35%) 631.92
dns 73801 ( 0.18%) 24486364 ( 0.07%) 331.79
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 3 ( 0.00%) 276 ( 0.00%) 92.00
quake 1 ( 0.00%) 110 ( 0.00%) 110.00
other 110231 ( 0.27%) 91810599 ( 0.28%) 832.89
icmp6 25842 ( 0.06%) 3055632 ( 0.01%) 118.24
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2366 ( 0.01%) 2575128 ( 0.01%) 1088.39
tcpdump file: 201211301400.dump.gz (938.76 MB)