Traffic Trace Info
DumpFile: 201212051400.dump
FileSize: 2332.50MB
Id: 201212051400
StartTime: Wed Dec 5 14:00:00 2012
EndTime: Wed Dec 5 14:15:01 2012
TotalTime: 900.44 seconds
TotalCapSize: 1846.56MB CapLen: 96 bytes
# of packets: 31845506 (25172.91MB)
AvgRate: 234.51Mbps stddev:35.53M
IP flow (unique src/dst pair) Information
# of flows: 1853227 (avg. 17.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.4% 2.3% 2.2% 2.0% 1.9% 1.8% 1.5% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 1400784
Top 10 bandwidth usage (bytes/total in %):
9.2% 6.2% 6.2% 5.2% 4.7% 3.2% 2.7% 2.6% 2.6% 2.5%
# of IPv6 addresses: 11442
Top 10 bandwidth usage (bytes/total in %):
7.7% 6.4% 5.6% 2.8% 2.8% 2.7% 2.7% 2.6% 2.4% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201212051400.pktlen.png)
detailed numbers
[ 32- 63]: 5028009
[ 64- 127]: 7490806
[ 128- 255]: 823790
[ 256- 511]: 905629
[ 512- 1023]: 922725
[ 1024- 2047]: 16674547
Protocol Breakdown
![[protocol breakdown chart]](201212051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31845506 (100.00%) 26395712694 (100.00%) 828.87
ip 29483267 ( 92.58%) 24512988402 ( 92.87%) 831.42
tcp 24859833 ( 78.06%) 22652712015 ( 85.82%) 911.22
http(s) 14275138 ( 44.83%) 17991643900 ( 68.16%) 1260.35
http(c) 7338326 ( 23.04%) 2301969306 ( 8.72%) 313.69
squid 62095 ( 0.19%) 53764373 ( 0.20%) 865.84
smtp 66229 ( 0.21%) 22540837 ( 0.09%) 340.35
ftp 19734 ( 0.06%) 17458656 ( 0.07%) 884.70
pop3 28446 ( 0.09%) 3934828 ( 0.01%) 138.33
imap 10801 ( 0.03%) 8912747 ( 0.03%) 825.18
telnet 43083 ( 0.14%) 4649042 ( 0.02%) 107.91
ssh 61214 ( 0.19%) 8420001 ( 0.03%) 137.55
dns 9187 ( 0.03%) 4126927 ( 0.02%) 449.21
bgp 571 ( 0.00%) 150906 ( 0.00%) 264.28
napster 74 ( 0.00%) 9912 ( 0.00%) 133.95
realaud 1 ( 0.00%) 60 ( 0.00%) 60.00
rtsp 19081 ( 0.06%) 21736932 ( 0.08%) 1139.19
icecast 101548 ( 0.32%) 81501072 ( 0.31%) 802.59
hotline 20 ( 0.00%) 3099 ( 0.00%) 154.95
other 2824285 ( 8.87%) 2131889417 ( 8.08%) 754.84
udp 2456214 ( 7.71%) 1410935914 ( 5.35%) 574.44
dns 794236 ( 2.49%) 309772552 ( 1.17%) 390.03
rip 1 ( 0.00%) 79 ( 0.00%) 79.00
realaud 8 ( 0.00%) 940 ( 0.00%) 117.50
halflif 45 ( 0.00%) 4446 ( 0.00%) 98.80
starcra 32 ( 0.00%) 6412 ( 0.00%) 200.38
everque 2652 ( 0.01%) 1549602 ( 0.01%) 584.31
unreal 4 ( 0.00%) 471 ( 0.00%) 117.75
quake 15 ( 0.00%) 1587 ( 0.00%) 105.80
cuseeme 171 ( 0.00%) 181229 ( 0.00%) 1059.82
other 1658360 ( 5.21%) 1098559609 ( 4.16%) 662.44
icmp 1495041 ( 4.69%) 103456279 ( 0.39%) 69.20
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 15392 ( 0.05%) 4618472 ( 0.02%) 300.06
ip6 610336 ( 1.92%) 326587800 ( 1.24%) 535.10
pim 206 ( 0.00%) 12360 ( 0.00%) 60.00
other 46060 ( 0.14%) 14646292 ( 0.06%) 317.98
frag 184094 ( 0.58%) 203527736 ( 0.77%) 1105.56
ip6 2362239 ( 7.42%) 1882724292 ( 7.13%) 797.01
tcp6 2126216 ( 6.68%) 1728356913 ( 6.55%) 812.88
http(s) 1506029 ( 4.73%) 1505300762 ( 5.70%) 999.52
http(c) 384848 ( 1.21%) 44013082 ( 0.17%) 114.36
smtp 248 ( 0.00%) 99448 ( 0.00%) 401.00
ftp 1440 ( 0.00%) 665145 ( 0.00%) 461.91
pop3 17 ( 0.00%) 3461 ( 0.00%) 203.59
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 348 ( 0.00%) 61615 ( 0.00%) 177.05
bgp 99 ( 0.00%) 31880 ( 0.00%) 322.02
other 233175 ( 0.73%) 178180512 ( 0.68%) 764.15
udp6 195427 ( 0.61%) 143406899 ( 0.54%) 733.81
dns 74206 ( 0.23%) 24850245 ( 0.09%) 334.88
everque 2 ( 0.00%) 212 ( 0.00%) 106.00
other 121219 ( 0.38%) 118556442 ( 0.45%) 978.04
icmp6 33966 ( 0.11%) 3762574 ( 0.01%) 110.77
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 6516 ( 0.02%) 7182396 ( 0.03%) 1102.27
tcpdump file: 201212051400.dump.gz (753.03 MB)