Traffic Trace Info
DumpFile: 201212041400.dump
FileSize: 2739.68MB
Id: 201212041400
StartTime: Tue Dec 4 14:00:01 2012
EndTime: Tue Dec 4 14:15:01 2012
TotalTime: 899.63 seconds
TotalCapSize: -1930.32MB CapLen: 96 bytes
# of packets: 37617385 (29624.61MB)
AvgRate: 276.20Mbps stddev:47.18M
IP flow (unique src/dst pair) Information
# of flows: 1681196 (avg. 22.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.9% 8.2% 2.6% 2.4% 1.8% 1.6% 1.2% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 1279556
Top 10 bandwidth usage (bytes/total in %):
18.7% 18.7% 9.0% 6.8% 6.1% 4.1% 2.6% 2.4% 2.1% 1.9%
# of IPv6 addresses: 11359
Top 10 bandwidth usage (bytes/total in %):
34.8% 31.8% 5.2% 2.3% 2.1% 1.7% 1.7% 1.7% 1.6% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201212041400.pktlen.png)
detailed numbers
[ 32- 63]: 7294203
[ 64- 127]: 7558693
[ 128- 255]: 930711
[ 256- 511]: 1096088
[ 512- 1023]: 1191890
[ 1024- 2047]: 19545800
Protocol Breakdown
![[protocol breakdown chart]](201212041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37617385 (100.00%) 31063652882 (100.00%) 825.78
ip 34837682 ( 92.61%) 28495712793 ( 91.73%) 817.96
tcp 29964646 ( 79.66%) 26963222585 ( 86.80%) 899.83
http(s) 13406177 ( 35.64%) 16898619454 ( 54.40%) 1260.51
http(c) 8182610 ( 21.75%) 2342561008 ( 7.54%) 286.29
squid 1876499 ( 4.99%) 1870993122 ( 6.02%) 997.07
smtp 76803 ( 0.20%) 26519430 ( 0.09%) 345.29
ftp 40575 ( 0.11%) 27412716 ( 0.09%) 675.61
pop3 13915 ( 0.04%) 14651266 ( 0.05%) 1052.91
imap 3611 ( 0.01%) 718825 ( 0.00%) 199.07
telnet 44077 ( 0.12%) 4724302 ( 0.02%) 107.18
ssh 24094 ( 0.06%) 6497849 ( 0.02%) 269.69
dns 4462 ( 0.01%) 665521 ( 0.00%) 149.15
bgp 571 ( 0.00%) 139324 ( 0.00%) 244.00
napster 63 ( 0.00%) 6405 ( 0.00%) 101.67
realaud 111 ( 0.00%) 12092 ( 0.00%) 108.94
rtsp 6049 ( 0.02%) 4097608 ( 0.01%) 677.40
icecast 191904 ( 0.51%) 157012716 ( 0.51%) 818.18
hotline 12 ( 0.00%) 1993 ( 0.00%) 166.08
other 6093113 ( 16.20%) 5608588954 ( 18.06%) 920.48
udp 2552058 ( 6.78%) 1171020756 ( 3.77%) 458.85
dns 869426 ( 2.31%) 473833969 ( 1.53%) 545.00
realaud 5 ( 0.00%) 515 ( 0.00%) 103.00
halflif 19 ( 0.00%) 1858 ( 0.00%) 97.79
starcra 12 ( 0.00%) 1006 ( 0.00%) 83.83
everque 794 ( 0.00%) 67675 ( 0.00%) 85.23
unreal 21 ( 0.00%) 5714 ( 0.00%) 272.10
quake 19 ( 0.00%) 2574 ( 0.00%) 135.47
cuseeme 6 ( 0.00%) 505 ( 0.00%) 84.17
other 1680247 ( 4.47%) 696453279 ( 2.24%) 414.49
icmp 1361062 ( 3.62%) 90215322 ( 0.29%) 66.28
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 29748 ( 0.08%) 6656592 ( 0.02%) 223.77
ip6 880024 ( 2.34%) 250172934 ( 0.81%) 284.28
pim 141 ( 0.00%) 8460 ( 0.00%) 60.00
other 49819 ( 0.13%) 14396984 ( 0.05%) 288.99
frag 337093 ( 0.90%) 345682898 ( 1.11%) 1025.48
ip6 2779703 ( 7.39%) 2567940089 ( 8.27%) 923.82
tcp6 2664166 ( 7.08%) 2534129521 ( 8.16%) 951.19
http(s) 1613073 ( 4.29%) 1618407104 ( 5.21%) 1003.31
http(c) 329964 ( 0.88%) 40225346 ( 0.13%) 121.91
smtp 110 ( 0.00%) 85975 ( 0.00%) 781.59
ftp 83 ( 0.00%) 7505 ( 0.00%) 90.42
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 447 ( 0.00%) 107661 ( 0.00%) 240.85
bgp 98 ( 0.00%) 34473 ( 0.00%) 351.77
other 720379 ( 1.92%) 875260449 ( 2.82%) 1215.00
udp6 83001 ( 0.22%) 27537178 ( 0.09%) 331.77
dns 74478 ( 0.20%) 25516428 ( 0.08%) 342.60
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
other 8522 ( 0.02%) 2020645 ( 0.01%) 237.11
icmp6 29752 ( 0.08%) 3379494 ( 0.01%) 113.59
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2670 ( 0.01%) 2878336 ( 0.01%) 1078.03
tcpdump file: 201212041400.dump.gz (864.54 MB)