Traffic Trace Info
DumpFile: 201212031400.dump
FileSize: 2018.70MB
Id: 201212031400
StartTime: Mon Dec 3 14:00:01 2012
EndTime: Mon Dec 3 14:15:00 2012
TotalTime: 899.33 seconds
TotalCapSize: 1604.11MB CapLen: 96 bytes
# of packets: 27169668 (20196.85MB)
AvgRate: 188.44Mbps stddev:38.64M
IP flow (unique src/dst pair) Information
# of flows: 777269 (avg. 34.96 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.5% 1.5% 1.5% 1.4% 1.3% 1.3% 1.2% 1.2% 1.0%
IP address Information
# of IPv4 addresses: 362545
Top 10 bandwidth usage (bytes/total in %):
11.0% 7.3% 5.0% 3.9% 2.7% 2.6% 2.3% 2.3% 2.2% 1.9%
# of IPv6 addresses: 10989
Top 10 bandwidth usage (bytes/total in %):
8.6% 5.1% 4.3% 3.5% 2.9% 2.8% 2.6% 2.5% 2.5% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201212031400.pktlen.png)
detailed numbers
[ 32- 63]: 4190671
[ 64- 127]: 6832578
[ 128- 255]: 984109
[ 256- 511]: 862545
[ 512- 1023]: 1251627
[ 1024- 2047]: 13048138
Protocol Breakdown
![[protocol breakdown chart]](201212031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27169668 (100.00%) 21177927582 (100.00%) 779.47
ip 24805910 ( 91.30%) 19226971594 ( 90.79%) 775.10
tcp 21635868 ( 79.63%) 17884178503 ( 84.45%) 826.60
http(s) 11934222 ( 43.92%) 14587995414 ( 68.88%) 1222.37
http(c) 6526787 ( 24.02%) 1412247643 ( 6.67%) 216.38
squid 69961 ( 0.26%) 48667813 ( 0.23%) 695.64
smtp 71893 ( 0.26%) 22171033 ( 0.10%) 308.39
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 26322 ( 0.10%) 14438027 ( 0.07%) 548.52
pop3 5922 ( 0.02%) 2391334 ( 0.01%) 403.81
imap 2374 ( 0.01%) 393187 ( 0.00%) 165.62
telnet 43449 ( 0.16%) 4685363 ( 0.02%) 107.84
ssh 56308 ( 0.21%) 8402069 ( 0.04%) 149.22
dns 4577 ( 0.02%) 783118 ( 0.00%) 171.10
bgp 548 ( 0.00%) 112687 ( 0.00%) 205.63
napster 29 ( 0.00%) 2973 ( 0.00%) 102.52
realaud 187 ( 0.00%) 19845 ( 0.00%) 106.12
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 761101 ( 2.80%) 461111516 ( 2.18%) 605.85
hotline 28 ( 0.00%) 4137 ( 0.00%) 147.75
other 2132153 ( 7.85%) 1320751918 ( 6.24%) 619.45
udp 2127711 ( 7.83%) 1005146491 ( 4.75%) 472.41
dns 694439 ( 2.56%) 297194718 ( 1.40%) 427.96
realaud 2 ( 0.00%) 161 ( 0.00%) 80.50
halflif 14 ( 0.00%) 2052 ( 0.00%) 146.57
starcra 13 ( 0.00%) 2632 ( 0.00%) 202.46
everque 97 ( 0.00%) 11679 ( 0.00%) 120.40
unreal 5 ( 0.00%) 825 ( 0.00%) 165.00
quake 8 ( 0.00%) 747 ( 0.00%) 93.38
cuseeme 2 ( 0.00%) 184 ( 0.00%) 92.00
other 1432526 ( 5.27%) 707222652 ( 3.34%) 493.69
icmp 293379 ( 1.08%) 24911803 ( 0.12%) 84.91
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 72518 ( 0.27%) 14961850 ( 0.07%) 206.32
ip6 626102 ( 2.30%) 284391683 ( 1.34%) 454.23
other 50147 ( 0.18%) 13361994 ( 0.06%) 266.46
frag 154113 ( 0.57%) 160677340 ( 0.76%) 1042.59
ip6 2363758 ( 8.70%) 1950955988 ( 9.21%) 825.36
tcp6 2081888 ( 7.66%) 1762947720 ( 8.32%) 846.80
http(s) 1664806 ( 6.13%) 1692837113 ( 7.99%) 1016.84
http(c) 374306 ( 1.38%) 42336182 ( 0.20%) 113.11
smtp 325 ( 0.00%) 148502 ( 0.00%) 456.93
ftp 952 ( 0.00%) 205052 ( 0.00%) 215.39
ssh 1055 ( 0.00%) 104772 ( 0.00%) 99.31
dns 478 ( 0.00%) 80413 ( 0.00%) 168.23
bgp 98 ( 0.00%) 27633 ( 0.00%) 281.97
other 39868 ( 0.15%) 27208053 ( 0.13%) 682.45
udp6 249429 ( 0.92%) 181703447 ( 0.86%) 728.48
dns 83193 ( 0.31%) 26998394 ( 0.13%) 324.53
everque 4 ( 0.00%) 392 ( 0.00%) 98.00
other 166232 ( 0.61%) 154704661 ( 0.73%) 930.66
icmp6 29759 ( 0.11%) 3570801 ( 0.02%) 119.99
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2570 ( 0.01%) 2718764 ( 0.01%) 1057.88
tcpdump file: 201212031400.dump.gz (665.29 MB)