Traffic Trace Info
DumpFile: 201212071400.dump
FileSize: 2598.56MB
Id: 201212071400
StartTime: Fri Dec 7 14:00:00 2012
EndTime: Fri Dec 7 14:15:00 2012
TotalTime: 899.94 seconds
TotalCapSize: -2045.16MB CapLen: 96 bytes
# of packets: 35894438 (28022.42MB)
AvgRate: 261.20Mbps stddev:53.22M
IP flow (unique src/dst pair) Information
# of flows: 1947660 (avg. 18.43 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.5% 2.4% 2.1% 1.9% 1.7% 1.6% 1.6% 1.5% 1.3%
IP address Information
# of IPv4 addresses: 1448222
Top 10 bandwidth usage (bytes/total in %):
9.1% 7.2% 6.9% 6.3% 5.1% 5.0% 4.8% 3.5% 3.2% 2.8%
# of IPv6 addresses: 13423
Top 10 bandwidth usage (bytes/total in %):
9.5% 8.4% 4.8% 4.8% 4.3% 3.4% 3.4% 3.4% 3.2% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201212071400.pktlen.png)
detailed numbers
[ 32- 63]: 6580901
[ 64- 127]: 7556288
[ 128- 255]: 922300
[ 256- 511]: 1206167
[ 512- 1023]: 1174084
[ 1024- 2047]: 18454698
Protocol Breakdown
![[protocol breakdown chart]](201212071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35894438 (100.00%) 29383640458 (100.00%) 818.61
ip 33527977 ( 93.41%) 27310423929 ( 92.94%) 814.56
tcp 28204839 ( 78.58%) 25361547659 ( 86.31%) 899.19
http(s) 16098052 ( 44.85%) 20906723038 ( 71.15%) 1298.71
http(c) 9011330 ( 25.11%) 2675451770 ( 9.11%) 296.90
squid 60712 ( 0.17%) 50142928 ( 0.17%) 825.91
smtp 82903 ( 0.23%) 33044962 ( 0.11%) 398.60
ftp 47784 ( 0.13%) 39223249 ( 0.13%) 820.84
pop3 5423 ( 0.02%) 3033474 ( 0.01%) 559.37
imap 3241 ( 0.01%) 1232282 ( 0.00%) 380.22
telnet 46033 ( 0.13%) 4881625 ( 0.02%) 106.05
ssh 348869 ( 0.97%) 66827311 ( 0.23%) 191.55
dns 2953 ( 0.01%) 695753 ( 0.00%) 235.61
bgp 577 ( 0.00%) 151890 ( 0.00%) 263.24
realaud 6 ( 0.00%) 636 ( 0.00%) 106.00
icecast 54499 ( 0.15%) 40375779 ( 0.14%) 740.85
hotline 23 ( 0.00%) 3117 ( 0.00%) 135.52
other 2442434 ( 6.80%) 1539759845 ( 5.24%) 630.42
udp 3094966 ( 8.62%) 1568613439 ( 5.34%) 506.83
dns 823713 ( 2.29%) 420067859 ( 1.43%) 509.97
rip 1 ( 0.00%) 79 ( 0.00%) 79.00
realaud 12 ( 0.00%) 940 ( 0.00%) 78.33
halflif 21 ( 0.00%) 2385 ( 0.00%) 113.57
starcra 13 ( 0.00%) 1042 ( 0.00%) 80.15
everque 142 ( 0.00%) 28475 ( 0.00%) 200.53
unreal 10 ( 0.00%) 1113 ( 0.00%) 111.30
quake 10 ( 0.00%) 960 ( 0.00%) 96.00
cuseeme 2 ( 0.00%) 167 ( 0.00%) 83.50
other 2227777 ( 6.21%) 1144910604 ( 3.90%) 513.93
icmp 1607708 ( 4.48%) 114454114 ( 0.39%) 71.19
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 48797 ( 0.14%) 26236958 ( 0.09%) 537.68
ip6 518346 ( 1.44%) 224157238 ( 0.76%) 432.45
pim 81 ( 0.00%) 4860 ( 0.00%) 60.00
other 53055 ( 0.15%) 15390391 ( 0.05%) 290.08
frag 403159 ( 1.12%) 416077650 ( 1.42%) 1032.04
ip6 2366461 ( 6.59%) 2073216529 ( 7.06%) 876.08
tcp6 2139067 ( 5.96%) 1947631708 ( 6.63%) 910.51
http(s) 1535365 ( 4.28%) 1661200263 ( 5.65%) 1081.96
http(c) 298192 ( 0.83%) 35780337 ( 0.12%) 119.99
smtp 309 ( 0.00%) 90655 ( 0.00%) 293.38
ftp 3873 ( 0.01%) 985746 ( 0.00%) 254.52
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 614 ( 0.00%) 220945 ( 0.00%) 359.85
bgp 101 ( 0.00%) 31349 ( 0.00%) 310.39
other 300601 ( 0.84%) 249321405 ( 0.85%) 829.41
udp6 184232 ( 0.51%) 114264428 ( 0.39%) 620.22
dns 79405 ( 0.22%) 25614809 ( 0.09%) 322.58
halflif 2 ( 0.00%) 223 ( 0.00%) 111.50
everque 1 ( 0.00%) 102 ( 0.00%) 102.00
quake 1 ( 0.00%) 113 ( 0.00%) 113.00
other 104823 ( 0.29%) 88649181 ( 0.30%) 845.70
icmp6 36153 ( 0.10%) 3848884 ( 0.01%) 106.46
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6897 ( 0.02%) 7456253 ( 0.03%) 1081.09
tcpdump file: 201212071400.dump.gz (834.37 MB)