Traffic Trace Info
DumpFile: 201212121400.dump
FileSize: 2492.46MB
Id: 201212121400
StartTime: Wed Dec 12 14:00:00 2012
EndTime: Wed Dec 12 14:15:00 2012
TotalTime: 900.16 seconds
TotalCapSize: 1974.87MB CapLen: 96 bytes
# of packets: 33920455 (27460.42MB)
AvgRate: 255.86Mbps stddev:38.67M
IP flow (unique src/dst pair) Information
# of flows: 1794871 (avg. 18.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.2% 3.9% 3.2% 1.7% 1.6% 1.5% 1.5% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 1362345
Top 10 bandwidth usage (bytes/total in %):
9.8% 8.5% 8.1% 8.1% 5.0% 4.4% 4.4% 4.1% 3.6% 3.4%
# of IPv6 addresses: 12015
Top 10 bandwidth usage (bytes/total in %):
19.0% 18.4% 15.8% 9.4% 5.3% 4.4% 4.3% 4.3% 2.9% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201212121400.pktlen.png)
detailed numbers
[ 32- 63]: 5277824
[ 64- 127]: 7216421
[ 128- 255]: 912208
[ 256- 511]: 1219626
[ 512- 1023]: 1269779
[ 1024- 2047]: 18024597
Protocol Breakdown
![[protocol breakdown chart]](201212121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33920455 (100.00%) 28794342548 (100.00%) 848.88
ip 31001050 ( 91.39%) 25889299554 ( 89.91%) 835.11
tcp 26215966 ( 77.29%) 24371417933 ( 84.64%) 929.64
http(s) 15404095 ( 45.41%) 19291958887 ( 67.00%) 1252.39
http(c) 8882880 ( 26.19%) 3983874400 ( 13.84%) 448.49
squid 139413 ( 0.41%) 89208775 ( 0.31%) 639.89
smtp 74478 ( 0.22%) 23161916 ( 0.08%) 310.99
nntp 103 ( 0.00%) 6180 ( 0.00%) 60.00
ftp 56550 ( 0.17%) 37760382 ( 0.13%) 667.73
pop3 7076 ( 0.02%) 5889674 ( 0.02%) 832.35
imap 3165 ( 0.01%) 492426 ( 0.00%) 155.58
telnet 56084 ( 0.17%) 5585271 ( 0.02%) 99.59
ssh 9503 ( 0.03%) 2687419 ( 0.01%) 282.80
dns 5519 ( 0.02%) 2551834 ( 0.01%) 462.37
bgp 546 ( 0.00%) 135963 ( 0.00%) 249.02
napster 20 ( 0.00%) 2986 ( 0.00%) 149.30
realaud 39 ( 0.00%) 4151 ( 0.00%) 106.44
rtsp 6220 ( 0.02%) 7730451 ( 0.03%) 1242.84
icecast 54921 ( 0.16%) 46767419 ( 0.16%) 851.54
other 1515354 ( 4.47%) 873599799 ( 3.03%) 576.50
udp 2448220 ( 7.22%) 1161811582 ( 4.03%) 474.55
dns 859504 ( 2.53%) 441480341 ( 1.53%) 513.65
realaud 116 ( 0.00%) 10311 ( 0.00%) 88.89
halflif 47 ( 0.00%) 3993 ( 0.00%) 84.96
starcra 29 ( 0.00%) 3582 ( 0.00%) 123.52
everque 141 ( 0.00%) 22822 ( 0.00%) 161.86
unreal 6 ( 0.00%) 920 ( 0.00%) 153.33
quake 18 ( 0.00%) 1385 ( 0.00%) 76.94
cuseeme 19 ( 0.00%) 1388 ( 0.00%) 73.05
other 1587796 ( 4.68%) 719649818 ( 2.50%) 453.24
icmp 1455208 ( 4.29%) 98858057 ( 0.34%) 67.93
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 9468 ( 0.03%) 3054384 ( 0.01%) 322.60
ip6 823201 ( 2.43%) 239126226 ( 0.83%) 290.48
pim 78 ( 0.00%) 4680 ( 0.00%) 60.00
other 48725 ( 0.14%) 15007532 ( 0.05%) 308.00
frag 306303 ( 0.90%) 323032882 ( 1.12%) 1054.62
ip6 2919405 ( 8.61%) 2905042994 ( 10.09%) 995.08
tcp6 2751999 ( 8.11%) 2837803951 ( 9.86%) 1031.18
http(s) 2010042 ( 5.93%) 2215906414 ( 7.70%) 1102.42
http(c) 303443 ( 0.89%) 34768346 ( 0.12%) 114.58
smtp 89 ( 0.00%) 28941 ( 0.00%) 325.18
ftp 973 ( 0.00%) 276707 ( 0.00%) 284.39
ssh 119 ( 0.00%) 15150 ( 0.00%) 127.31
dns 499 ( 0.00%) 119181 ( 0.00%) 238.84
bgp 98 ( 0.00%) 27960 ( 0.00%) 285.31
other 436736 ( 1.29%) 586661252 ( 2.04%) 1343.29
udp6 133809 ( 0.39%) 60437174 ( 0.21%) 451.67
dns 77787 ( 0.23%) 26104115 ( 0.09%) 335.58
other 56022 ( 0.17%) 34333059 ( 0.12%) 612.85
icmp6 30466 ( 0.09%) 3700242 ( 0.01%) 121.45
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3018 ( 0.01%) 3086203 ( 0.01%) 1022.60
tcpdump file: 201212121400.dump.gz (790.84 MB)