Traffic Trace Info
DumpFile: 201212091400.dump
FileSize: 1671.61MB
Id: 201212091400
StartTime: Sun Dec 9 14:00:01 2012
EndTime: Sun Dec 9 14:15:00 2012
TotalTime: 899.76 seconds
TotalCapSize: 1308.67MB CapLen: 96 bytes
# of packets: 23785077 (19150.13MB)
AvgRate: 178.59Mbps stddev:51.98M
IP flow (unique src/dst pair) Information
# of flows: 1655030 (avg. 14.37 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.2% 9.4% 6.7% 4.1% 2.0% 1.5% 1.2% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 1318443
Top 10 bandwidth usage (bytes/total in %):
34.5% 14.1% 10.0% 8.3% 7.7% 7.1% 4.3% 4.1% 3.8% 2.7%
# of IPv6 addresses: 8288
Top 10 bandwidth usage (bytes/total in %):
7.3% 5.6% 5.1% 4.1% 3.9% 3.1% 3.1% 2.8% 2.8% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201212091400.pktlen.png)
detailed numbers
[ 32- 63]: 4931913
[ 64- 127]: 4180934
[ 128- 255]: 671265
[ 256- 511]: 411748
[ 512- 1023]: 818794
[ 1024- 2047]: 12770423
Protocol Breakdown
![[protocol breakdown chart]](201212091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23785077 (100.00%) 20080366825 (100.00%) 844.24
ip 22654363 ( 95.25%) 19208628786 ( 95.66%) 847.90
tcp 18436295 ( 77.51%) 17553213226 ( 87.41%) 952.10
http(s) 10119355 ( 42.54%) 13439479521 ( 66.93%) 1328.10
http(c) 4546044 ( 19.11%) 1215752477 ( 6.05%) 267.43
squid 129258 ( 0.54%) 96468296 ( 0.48%) 746.32
smtp 55264 ( 0.23%) 9330331 ( 0.05%) 168.83
ftp 10597 ( 0.04%) 2851479 ( 0.01%) 269.08
pop3 3530 ( 0.01%) 808834 ( 0.00%) 229.13
imap 2375 ( 0.01%) 248686 ( 0.00%) 104.71
telnet 79195 ( 0.33%) 7324667 ( 0.04%) 92.49
ssh 37698 ( 0.16%) 5878729 ( 0.03%) 155.94
dns 5977 ( 0.03%) 815482 ( 0.00%) 136.44
bgp 533 ( 0.00%) 117708 ( 0.00%) 220.84
realaud 18 ( 0.00%) 4268 ( 0.00%) 237.11
icecast 661 ( 0.00%) 143228 ( 0.00%) 216.68
hotline 33 ( 0.00%) 3817 ( 0.00%) 115.67
other 3445757 ( 14.49%) 2773985703 ( 13.81%) 805.04
udp 2297280 ( 9.66%) 1294017133 ( 6.44%) 563.28
dns 740010 ( 3.11%) 522025341 ( 2.60%) 705.43
realaud 11 ( 0.00%) 1253 ( 0.00%) 113.91
halflif 23 ( 0.00%) 2674 ( 0.00%) 116.26
starcra 57 ( 0.00%) 8781 ( 0.00%) 154.05
everque 90 ( 0.00%) 11007 ( 0.00%) 122.30
unreal 5 ( 0.00%) 910 ( 0.00%) 182.00
quake 9 ( 0.00%) 970 ( 0.00%) 107.78
cuseeme 1 ( 0.00%) 93 ( 0.00%) 93.00
other 1556503 ( 6.54%) 771251816 ( 3.84%) 495.50
icmp 1494980 ( 6.29%) 102333487 ( 0.51%) 68.45
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 7470 ( 0.03%) 2467996 ( 0.01%) 330.39
ip6 373749 ( 1.57%) 244018070 ( 1.22%) 652.89
pim 76 ( 0.00%) 4560 ( 0.00%) 60.00
other 44328 ( 0.19%) 12555044 ( 0.06%) 283.23
frag 442695 ( 1.86%) 455944474 ( 2.27%) 1029.93
ip6 1130714 ( 4.75%) 871738039 ( 4.34%) 770.96
tcp6 924821 ( 3.89%) 752954810 ( 3.75%) 814.16
http(s) 562068 ( 2.36%) 573951146 ( 2.86%) 1021.14
http(c) 165276 ( 0.69%) 20526051 ( 0.10%) 124.19
squid 4 ( 0.00%) 300 ( 0.00%) 75.00
smtp 1325 ( 0.01%) 249012 ( 0.00%) 187.93
ftp 14273 ( 0.06%) 8889225 ( 0.04%) 622.80
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 393 ( 0.00%) 66266 ( 0.00%) 168.62
bgp 93 ( 0.00%) 28989 ( 0.00%) 311.71
napster 22 ( 0.00%) 3033 ( 0.00%) 137.86
other 181355 ( 0.76%) 149239780 ( 0.74%) 822.92
udp6 146372 ( 0.62%) 95452441 ( 0.48%) 652.12
dns 46554 ( 0.20%) 15941064 ( 0.08%) 342.42
halflif 1 ( 0.00%) 101 ( 0.00%) 101.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 99816 ( 0.42%) 79511169 ( 0.40%) 796.58
icmp6 33744 ( 0.14%) 3660520 ( 0.02%) 108.48
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 25663 ( 0.11%) 19654776 ( 0.10%) 765.88
tcpdump file: 201212091400.dump.gz (521.12 MB)