Traffic Trace Info
DumpFile: 201212061400.dump
FileSize: 3079.89MB
Id: 201212061400
StartTime: Thu Dec 6 14:00:01 2012
EndTime: Thu Dec 6 14:15:00 2012
TotalTime: 899.74 seconds
TotalCapSize: -1671.48MB CapLen: 96 bytes
# of packets: 42949546 (33938.78MB)
AvgRate: 316.61Mbps stddev:84.26M
IP flow (unique src/dst pair) Information
# of flows: 1930041 (avg. 22.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
15.4% 6.6% 2.4% 1.8% 1.8% 1.7% 1.2% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 1446321
Top 10 bandwidth usage (bytes/total in %):
19.5% 16.6% 7.3% 7.0% 6.2% 5.8% 5.0% 4.8% 3.2% 2.6%
# of IPv6 addresses: 13313
Top 10 bandwidth usage (bytes/total in %):
13.5% 4.8% 4.5% 4.2% 3.2% 2.6% 2.6% 2.3% 2.3% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201212061400.pktlen.png)
detailed numbers
[ 32- 63]: 8666210
[ 64- 127]: 8279624
[ 128- 255]: 936209
[ 256- 511]: 848884
[ 512- 1023]: 1109497
[ 1024- 2047]: 23109122
Protocol Breakdown
![[protocol breakdown chart]](201212061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42949546 (100.00%) 35587389767 (100.00%) 828.59
ip 40721631 ( 94.81%) 33716000884 ( 94.74%) 827.96
tcp 35531352 ( 82.73%) 31731348140 ( 89.16%) 893.05
http(s) 20176036 ( 46.98%) 26397041439 ( 74.18%) 1308.34
http(c) 10519774 ( 24.49%) 2018358695 ( 5.67%) 191.86
squid 39216 ( 0.09%) 23862121 ( 0.07%) 608.48
smtp 67934 ( 0.16%) 19621893 ( 0.06%) 288.84
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 5530 ( 0.01%) 422908 ( 0.00%) 76.48
pop3 6656 ( 0.02%) 2746723 ( 0.01%) 412.67
imap 3664 ( 0.01%) 441083 ( 0.00%) 120.38
telnet 39451 ( 0.09%) 4386072 ( 0.01%) 111.18
ssh 177599 ( 0.41%) 14011206 ( 0.04%) 78.89
dns 2886 ( 0.01%) 669503 ( 0.00%) 231.98
bgp 545 ( 0.00%) 131574 ( 0.00%) 241.42
napster 40 ( 0.00%) 5262 ( 0.00%) 131.55
realaud 50 ( 0.00%) 19883 ( 0.00%) 397.66
rtsp 117857 ( 0.27%) 163563656 ( 0.46%) 1387.81
icecast 135721 ( 0.32%) 74834484 ( 0.21%) 551.38
hotline 7 ( 0.00%) 788 ( 0.00%) 112.57
other 4238385 ( 9.87%) 3011230790 ( 8.46%) 710.47
udp 3094955 ( 7.21%) 1673274750 ( 4.70%) 540.65
dns 847440 ( 1.97%) 369431056 ( 1.04%) 435.94
rip 1 ( 0.00%) 72 ( 0.00%) 72.00
realaud 8 ( 0.00%) 888 ( 0.00%) 111.00
halflif 31 ( 0.00%) 4920 ( 0.00%) 158.71
starcra 22 ( 0.00%) 2296 ( 0.00%) 104.36
everque 300 ( 0.00%) 60000 ( 0.00%) 200.00
unreal 22 ( 0.00%) 2809 ( 0.00%) 127.68
quake 17 ( 0.00%) 1501 ( 0.00%) 88.29
cuseeme 3 ( 0.00%) 244 ( 0.00%) 81.33
other 2246601 ( 5.23%) 1303180548 ( 3.66%) 580.07
icmp 1515383 ( 3.53%) 105817198 ( 0.30%) 69.83
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 28301 ( 0.07%) 11263118 ( 0.03%) 397.98
ip6 507051 ( 1.18%) 179682536 ( 0.50%) 354.37
pim 211 ( 0.00%) 12660 ( 0.00%) 60.00
other 44194 ( 0.10%) 14583322 ( 0.04%) 329.98
frag 226927 ( 0.53%) 234380364 ( 0.66%) 1032.84
ip6 2227915 ( 5.19%) 1871388883 ( 5.26%) 839.97
tcp6 2039605 ( 4.75%) 1786618782 ( 5.02%) 875.96
http(s) 1654591 ( 3.85%) 1706970145 ( 4.80%) 1031.66
http(c) 323021 ( 0.75%) 38186232 ( 0.11%) 118.22
smtp 730 ( 0.00%) 200934 ( 0.00%) 275.25
ftp 8843 ( 0.02%) 6272884 ( 0.02%) 709.36
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 437 ( 0.00%) 95478 ( 0.00%) 218.49
bgp 95 ( 0.00%) 27567 ( 0.00%) 290.18
other 51876 ( 0.12%) 34864534 ( 0.10%) 672.07
udp6 147287 ( 0.34%) 75534428 ( 0.21%) 512.84
dns 77646 ( 0.18%) 26304175 ( 0.07%) 338.77
realaud 1 ( 0.00%) 113 ( 0.00%) 113.00
halflif 1 ( 0.00%) 102 ( 0.00%) 102.00
everque 6 ( 0.00%) 552 ( 0.00%) 92.00
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
other 69632 ( 0.16%) 49229378 ( 0.14%) 706.99
icmp6 34779 ( 0.08%) 3831658 ( 0.01%) 110.17
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6129 ( 0.01%) 5388355 ( 0.02%) 879.16
tcpdump file: 201212061400.dump.gz (967.60 MB)