Traffic Trace Info
DumpFile: 201212011400.dump
FileSize: 1627.95MB
Id: 201212011400
StartTime: Sat Dec 1 14:00:01 2012
EndTime: Sat Dec 1 14:15:01 2012
TotalTime: 899.93 seconds
TotalCapSize: 1292.18MB CapLen: 96 bytes
# of packets: 22004720 (18517.06MB)
AvgRate: 172.63Mbps stddev:43.46M
IP flow (unique src/dst pair) Information
# of flows: 848401 (avg. 25.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.6% 6.1% 4.2% 3.8% 3.8% 3.5% 3.2% 3.0% 2.6% 2.4%
IP address Information
# of IPv4 addresses: 470251
Top 10 bandwidth usage (bytes/total in %):
35.0% 7.0% 6.5% 5.8% 4.5% 4.5% 4.5% 4.3% 4.2% 4.1%
# of IPv6 addresses: 8373
Top 10 bandwidth usage (bytes/total in %):
23.9% 9.3% 8.2% 8.2% 5.6% 5.6% 5.0% 4.8% 4.4% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201212011400.pktlen.png)
detailed numbers
[ 32- 63]: 2653291
[ 64- 127]: 4881522
[ 128- 255]: 578922
[ 256- 511]: 589553
[ 512- 1023]: 944937
[ 1024- 2047]: 12356495
Protocol Breakdown
![[protocol breakdown chart]](201212011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22004720 (100.00%) 19416547802 (100.00%) 882.38
ip 20696979 ( 94.06%) 18290211356 ( 94.20%) 883.71
tcp 17444208 ( 79.27%) 16457355129 ( 84.76%) 943.43
http(s) 9534029 ( 43.33%) 12440865330 ( 64.07%) 1304.89
http(c) 3493590 ( 15.88%) 723297343 ( 3.73%) 207.04
squid 230187 ( 1.05%) 83428804 ( 0.43%) 362.44
smtp 214654 ( 0.98%) 58696009 ( 0.30%) 273.44
ftp 20209 ( 0.09%) 17593860 ( 0.09%) 870.60
pop3 8654 ( 0.04%) 1975180 ( 0.01%) 228.24
imap 3619 ( 0.02%) 696850 ( 0.00%) 192.55
telnet 84962 ( 0.39%) 7752727 ( 0.04%) 91.25
ssh 62441 ( 0.28%) 8859917 ( 0.05%) 141.89
dns 6673 ( 0.03%) 2601347 ( 0.01%) 389.83
bgp 555 ( 0.00%) 115846 ( 0.00%) 208.73
napster 27 ( 0.00%) 2445 ( 0.00%) 90.56
realaud 26 ( 0.00%) 10056 ( 0.00%) 386.77
rtsp 6 ( 0.00%) 360 ( 0.00%) 60.00
icecast 35054 ( 0.16%) 25426513 ( 0.13%) 725.35
hotline 359 ( 0.00%) 213905 ( 0.00%) 595.84
other 3749163 ( 17.04%) 3085818637 ( 15.89%) 823.07
udp 1835691 ( 8.34%) 915387786 ( 4.71%) 498.66
dns 621321 ( 2.82%) 306490471 ( 1.58%) 493.29
realaud 9 ( 0.00%) 1526 ( 0.00%) 169.56
halflif 421 ( 0.00%) 77817 ( 0.00%) 184.84
starcra 28 ( 0.00%) 3495 ( 0.00%) 124.82
everque 65 ( 0.00%) 9578 ( 0.00%) 147.35
unreal 4 ( 0.00%) 657 ( 0.00%) 164.25
quake 12 ( 0.00%) 1478 ( 0.00%) 123.17
cuseeme 19 ( 0.00%) 1949 ( 0.00%) 102.58
other 1213410 ( 5.51%) 608324716 ( 3.13%) 501.33
icmp 1108757 ( 5.04%) 800224948 ( 4.12%) 721.73
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 6196 ( 0.03%) 2115276 ( 0.01%) 341.39
ip6 253874 ( 1.15%) 102714297 ( 0.53%) 404.59
pim 1 ( 0.00%) 1122 ( 0.00%) 1122.00
other 48067 ( 0.22%) 12393528 ( 0.06%) 257.84
frag 226040 ( 1.03%) 243108857 ( 1.25%) 1075.51
ip6 1307741 ( 5.94%) 1126336446 ( 5.80%) 861.28
tcp6 1209847 ( 5.50%) 1098506554 ( 5.66%) 907.97
http(s) 936078 ( 4.25%) 1063375015 ( 5.48%) 1135.99
http(c) 249549 ( 1.13%) 27212493 ( 0.14%) 109.05
smtp 452 ( 0.00%) 127083 ( 0.00%) 281.16
ftp 18 ( 0.00%) 1691 ( 0.00%) 93.94
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 454 ( 0.00%) 113681 ( 0.00%) 250.40
bgp 107 ( 0.00%) 28163 ( 0.00%) 263.21
other 23177 ( 0.11%) 7647420 ( 0.04%) 329.96
udp6 71363 ( 0.32%) 23193627 ( 0.12%) 325.01
dns 58555 ( 0.27%) 18583433 ( 0.10%) 317.37
everque 1 ( 0.00%) 93 ( 0.00%) 93.00
quake 1 ( 0.00%) 96 ( 0.00%) 96.00
other 12806 ( 0.06%) 4610005 ( 0.02%) 359.99
icmp6 24699 ( 0.11%) 2746986 ( 0.01%) 111.22
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1719 ( 0.01%) 1873887 ( 0.01%) 1090.10
tcpdump file: 201212011400.dump.gz (498.59 MB)