Traffic Trace Info
DumpFile: 201212021400.dump
FileSize: 1252.85MB
Id: 201212021400
StartTime: Sun Dec 2 14:00:00 2012
EndTime: Sun Dec 2 14:15:00 2012
TotalTime: 900.52 seconds
TotalCapSize: 991.29MB CapLen: 96 bytes
# of packets: 17140654 (14236.05MB)
AvgRate: 132.60Mbps stddev:26.58M
IP flow (unique src/dst pair) Information
# of flows: 560858 (avg. 30.56 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.1% 5.3% 3.8% 3.7% 2.7% 2.6% 2.2% 2.1% 1.8% 1.7%
IP address Information
# of IPv4 addresses: 308672
Top 10 bandwidth usage (bytes/total in %):
22.6% 11.6% 7.9% 6.5% 6.5% 5.6% 4.2% 3.9% 2.9% 2.9%
# of IPv6 addresses: 8575
Top 10 bandwidth usage (bytes/total in %):
13.5% 5.7% 4.7% 4.3% 3.8% 3.6% 3.2% 2.8% 2.6% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201212021400.pktlen.png)
detailed numbers
[ 32- 63]: 2062717
[ 64- 127]: 3933346
[ 128- 255]: 509352
[ 256- 511]: 479794
[ 512- 1023]: 839862
[ 1024- 2047]: 9315583
Protocol Breakdown
![[protocol breakdown chart]](201212021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 17140654 (100.00%) 14927583091 (100.00%) 870.89
ip 15984106 ( 93.25%) 13967840287 ( 93.57%) 873.86
tcp 13581997 ( 79.24%) 12777319510 ( 85.60%) 940.75
http(s) 8101248 ( 47.26%) 10379031379 ( 69.53%) 1281.16
http(c) 3079092 ( 17.96%) 427169932 ( 2.86%) 138.73
squid 125008 ( 0.73%) 22031034 ( 0.15%) 176.24
smtp 124058 ( 0.72%) 23056442 ( 0.15%) 185.85
ftp 58111 ( 0.34%) 55632603 ( 0.37%) 957.35
pop3 5901 ( 0.03%) 1146875 ( 0.01%) 194.35
imap 5603 ( 0.03%) 1556433 ( 0.01%) 277.79
telnet 45776 ( 0.27%) 4862354 ( 0.03%) 106.22
ssh 675530 ( 3.94%) 922593677 ( 6.18%) 1365.73
dns 6326 ( 0.04%) 2576693 ( 0.02%) 407.32
bgp 613 ( 0.00%) 153517 ( 0.00%) 250.44
napster 4 ( 0.00%) 246 ( 0.00%) 61.50
realaud 14 ( 0.00%) 1669 ( 0.00%) 119.21
icecast 8719 ( 0.05%) 7713892 ( 0.05%) 884.72
hotline 3579 ( 0.02%) 3094152 ( 0.02%) 864.53
other 1342415 ( 7.83%) 926698612 ( 6.21%) 690.32
udp 1766916 ( 10.31%) 969473157 ( 6.49%) 548.68
dns 482874 ( 2.82%) 225972469 ( 1.51%) 467.97
realaud 3 ( 0.00%) 424 ( 0.00%) 141.33
halflif 838 ( 0.00%) 150758 ( 0.00%) 179.90
starcra 1 ( 0.00%) 109 ( 0.00%) 109.00
everque 43 ( 0.00%) 6832 ( 0.00%) 158.88
unreal 1 ( 0.00%) 79 ( 0.00%) 79.00
quake 9 ( 0.00%) 1587 ( 0.00%) 176.33
cuseeme 4 ( 0.00%) 325 ( 0.00%) 81.25
other 1282743 ( 7.48%) 742850090 ( 4.98%) 579.11
icmp 225236 ( 1.31%) 20380625 ( 0.14%) 90.49
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 21132 ( 0.12%) 6296976 ( 0.04%) 297.98
ip6 342587 ( 2.00%) 181172337 ( 1.21%) 528.84
other 46053 ( 0.27%) 13178412 ( 0.09%) 286.16
frag 161574 ( 0.94%) 173135339 ( 1.16%) 1071.55
ip6 1156548 ( 6.75%) 959742804 ( 6.43%) 829.83
tcp6 970937 ( 5.66%) 875585365 ( 5.87%) 901.79
http(s) 725666 ( 4.23%) 775797079 ( 5.20%) 1069.08
http(c) 135036 ( 0.79%) 17259951 ( 0.12%) 127.82
smtp 383 ( 0.00%) 142758 ( 0.00%) 372.74
ftp 6544 ( 0.04%) 3301184 ( 0.02%) 504.46
pop3 18 ( 0.00%) 3966 ( 0.00%) 220.33
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 352 ( 0.00%) 73262 ( 0.00%) 208.13
bgp 118 ( 0.00%) 32536 ( 0.00%) 275.73
other 102808 ( 0.60%) 78973621 ( 0.53%) 768.17
udp6 154846 ( 0.90%) 78807606 ( 0.53%) 508.94
dns 50779 ( 0.30%) 16667219 ( 0.11%) 328.23
realaud 1 ( 0.00%) 106 ( 0.00%) 106.00
starcra 1 ( 0.00%) 106 ( 0.00%) 106.00
everque 2 ( 0.00%) 609 ( 0.00%) 304.50
unreal 51 ( 0.00%) 7177 ( 0.00%) 140.73
other 104012 ( 0.61%) 62132389 ( 0.42%) 597.36
icmp6 28585 ( 0.17%) 3075220 ( 0.02%) 107.58
ip6 60 ( 0.00%) 8580 ( 0.00%) 143.00
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2089 ( 0.01%) 2261817 ( 0.02%) 1082.73
tcpdump file: 201212021400.dump.gz (393.20 MB)