Traffic Trace Info
DumpFile: 201212111400.dump
FileSize: 2359.58MB
Id: 201212111400
StartTime: Tue Dec 11 14:00:01 2012
EndTime: Tue Dec 11 14:15:00 2012
TotalTime: 899.37 seconds
TotalCapSize: 1871.11MB CapLen: 96 bytes
# of packets: 32011764 (24410.21MB)
AvgRate: 227.70Mbps stddev:62.30M
IP flow (unique src/dst pair) Information
# of flows: 1988367 (avg. 16.10 pkts/flow)
Top 10 big flow size (bytes/total in %):
19.3% 2.1% 1.2% 1.1% 1.0% 1.0% 1.0% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 1476367
Top 10 bandwidth usage (bytes/total in %):
20.8% 20.8% 8.3% 4.9% 4.2% 3.4% 3.2% 2.6% 2.6% 2.3%
# of IPv6 addresses: 11798
Top 10 bandwidth usage (bytes/total in %):
11.4% 7.9% 3.6% 3.3% 3.0% 2.4% 2.1% 2.0% 1.9% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201212111400.pktlen.png)
detailed numbers
[ 32- 63]: 5709088
[ 64- 127]: 7359410
[ 128- 255]: 937071
[ 256- 511]: 914623
[ 512- 1023]: 1188080
[ 1024- 2047]: 15903492
Protocol Breakdown
![[protocol breakdown chart]](201212111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32011764 (100.00%) 25595958234 (100.00%) 799.58
ip 29679002 ( 92.71%) 23753427276 ( 92.80%) 800.34
tcp 24462726 ( 76.42%) 21827446150 ( 85.28%) 892.27
http(s) 13504757 ( 42.19%) 17476739191 ( 68.28%) 1294.12
http(c) 7754796 ( 24.22%) 2164158840 ( 8.46%) 279.07
squid 27132 ( 0.08%) 7504429 ( 0.03%) 276.59
smtp 67276 ( 0.21%) 19903171 ( 0.08%) 295.84
nntp 105 ( 0.00%) 6300 ( 0.00%) 60.00
ftp 34456 ( 0.11%) 25931525 ( 0.10%) 752.60
pop3 9523 ( 0.03%) 6358398 ( 0.02%) 667.69
imap 3820 ( 0.01%) 648504 ( 0.00%) 169.77
telnet 41776 ( 0.13%) 4567458 ( 0.02%) 109.33
ssh 77393 ( 0.24%) 10428682 ( 0.04%) 134.75
dns 4651 ( 0.01%) 2515770 ( 0.01%) 540.91
bgp 580 ( 0.00%) 153205 ( 0.00%) 264.15
napster 45 ( 0.00%) 5055 ( 0.00%) 112.33
realaud 101 ( 0.00%) 12409 ( 0.00%) 122.86
rtsp 5900 ( 0.02%) 4079683 ( 0.02%) 691.47
icecast 23465 ( 0.07%) 21391797 ( 0.08%) 911.65
hotline 10 ( 0.00%) 1324 ( 0.00%) 132.40
other 2906939 ( 9.08%) 2083040339 ( 8.14%) 716.58
udp 3059133 ( 9.56%) 1498311780 ( 5.85%) 489.78
dns 865072 ( 2.70%) 447884114 ( 1.75%) 517.74
realaud 7 ( 0.00%) 662 ( 0.00%) 94.57
halflif 11 ( 0.00%) 1140 ( 0.00%) 103.64
starcra 31 ( 0.00%) 4195 ( 0.00%) 135.32
everque 118 ( 0.00%) 26878 ( 0.00%) 227.78
unreal 10 ( 0.00%) 1023 ( 0.00%) 102.30
quake 6 ( 0.00%) 584 ( 0.00%) 97.33
cuseeme 3 ( 0.00%) 343 ( 0.00%) 114.33
other 2193309 ( 6.85%) 1049740843 ( 4.10%) 478.61
icmp 1391289 ( 4.35%) 92537487 ( 0.36%) 66.51
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 14419 ( 0.05%) 3890858 ( 0.02%) 269.84
ip6 698971 ( 2.18%) 317628039 ( 1.24%) 454.42
pim 83 ( 0.00%) 4980 ( 0.00%) 60.00
other 52196 ( 0.16%) 13588712 ( 0.05%) 260.34
frag 304313 ( 0.95%) 313532477 ( 1.22%) 1030.30
ip6 2332762 ( 7.29%) 1842530958 ( 7.20%) 789.85
tcp6 2129727 ( 6.65%) 1750145566 ( 6.84%) 821.77
http(s) 1669616 ( 5.22%) 1588233464 ( 6.21%) 951.26
http(c) 290580 ( 0.91%) 34841877 ( 0.14%) 119.90
smtp 204 ( 0.00%) 143229 ( 0.00%) 702.10
ftp 82 ( 0.00%) 7418 ( 0.00%) 90.46
ssh 120 ( 0.00%) 15800 ( 0.00%) 131.67
dns 467 ( 0.00%) 91608 ( 0.00%) 196.16
bgp 100 ( 0.00%) 30505 ( 0.00%) 305.05
other 168558 ( 0.53%) 126781665 ( 0.50%) 752.15
udp6 174572 ( 0.55%) 86454770 ( 0.34%) 495.24
dns 84508 ( 0.26%) 27202574 ( 0.11%) 321.89
realaud 1 ( 0.00%) 110 ( 0.00%) 110.00
other 90063 ( 0.28%) 59252086 ( 0.23%) 657.90
icmp6 25534 ( 0.08%) 3032453 ( 0.01%) 118.76
ip6 85 ( 0.00%) 11530 ( 0.00%) 135.65
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2814 ( 0.01%) 2882559 ( 0.01%) 1024.36
tcpdump file: 201212111400.dump.gz (759.65 MB)