Traffic Trace Info
DumpFile: 201212131400.dump
FileSize: 2685.64MB
Id: 201212131400
StartTime: Thu Dec 13 14:00:01 2012
EndTime: Thu Dec 13 14:15:01 2012
TotalTime: 900.00 seconds
TotalCapSize: -1970.05MB CapLen: 96 bytes
# of packets: 36679484 (31185.14MB)
AvgRate: 290.67Mbps stddev:47.81M
IP flow (unique src/dst pair) Information
# of flows: 1744762 (avg. 21.02 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.9% 5.6% 1.9% 1.8% 1.7% 1.4% 1.3% 1.2% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 1334635
Top 10 bandwidth usage (bytes/total in %):
13.1% 12.9% 8.5% 6.2% 6.1% 5.0% 3.7% 3.5% 3.1% 2.9%
# of IPv6 addresses: 12868
Top 10 bandwidth usage (bytes/total in %):
6.6% 4.6% 4.0% 3.6% 3.6% 3.4% 3.3% 3.1% 3.1% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201212131400.pktlen.png)
detailed numbers
[ 32- 63]: 4898948
[ 64- 127]: 7852835
[ 128- 255]: 980172
[ 256- 511]: 999098
[ 512- 1023]: 1172626
[ 1024- 2047]: 20775805
Protocol Breakdown
![[protocol breakdown chart]](201212131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36679484 (100.00%) 32699989834 (100.00%) 891.51
ip 33932669 ( 92.51%) 30226988827 ( 92.44%) 890.79
tcp 28053281 ( 76.48%) 27820015874 ( 85.08%) 991.68
http(s) 18563717 ( 50.61%) 24113892596 ( 73.74%) 1298.98
http(c) 7224516 ( 19.70%) 2491547269 ( 7.62%) 344.87
squid 32268 ( 0.09%) 14405291 ( 0.04%) 446.43
smtp 63075 ( 0.17%) 14396442 ( 0.04%) 228.24
nntp 100 ( 0.00%) 6000 ( 0.00%) 60.00
ftp 367628 ( 1.00%) 231558501 ( 0.71%) 629.87
pop3 10598 ( 0.03%) 6517383 ( 0.02%) 614.96
imap 2882 ( 0.01%) 676512 ( 0.00%) 234.74
telnet 93746 ( 0.26%) 8366728 ( 0.03%) 89.25
ssh 61013 ( 0.17%) 49854858 ( 0.15%) 817.12
dns 2492 ( 0.01%) 608665 ( 0.00%) 244.25
bgp 576 ( 0.00%) 164596 ( 0.00%) 285.76
napster 19 ( 0.00%) 1168 ( 0.00%) 61.47
realaud 199 ( 0.00%) 23846 ( 0.00%) 119.83
rtsp 4658 ( 0.01%) 3983320 ( 0.01%) 855.16
icecast 731 ( 0.00%) 81574 ( 0.00%) 111.59
hotline 23 ( 0.00%) 5928 ( 0.00%) 257.74
other 1625039 ( 4.43%) 883925137 ( 2.70%) 543.94
udp 3541683 ( 9.66%) 2000297510 ( 6.12%) 564.79
dns 930425 ( 2.54%) 519882346 ( 1.59%) 558.76
rip 1 ( 0.00%) 79 ( 0.00%) 79.00
realaud 9 ( 0.00%) 740 ( 0.00%) 82.22
halflif 13 ( 0.00%) 990 ( 0.00%) 76.15
starcra 19 ( 0.00%) 2227 ( 0.00%) 117.21
everque 347 ( 0.00%) 56666 ( 0.00%) 163.30
unreal 4 ( 0.00%) 567 ( 0.00%) 141.75
quake 22 ( 0.00%) 2494 ( 0.00%) 113.36
cuseeme 4 ( 0.00%) 331 ( 0.00%) 82.75
other 2608308 ( 7.11%) 1478452761 ( 4.52%) 566.82
icmp 1411901 ( 3.85%) 95060210 ( 0.29%) 67.33
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 37412 ( 0.10%) 8334448 ( 0.03%) 222.77
ip6 835096 ( 2.28%) 287778122 ( 0.88%) 344.60
pim 78 ( 0.00%) 4680 ( 0.00%) 60.00
other 53033 ( 0.14%) 15478713 ( 0.05%) 291.87
frag 348825 ( 0.95%) 392031501 ( 1.20%) 1123.86
ip6 2746815 ( 7.49%) 2473001007 ( 7.56%) 900.32
tcp6 2505564 ( 6.83%) 2325928821 ( 7.11%) 928.31
http(s) 1943226 ( 5.30%) 2040400367 ( 6.24%) 1050.01
http(c) 334174 ( 0.91%) 38986519 ( 0.12%) 116.67
smtp 67 ( 0.00%) 16877 ( 0.00%) 251.90
ftp 77 ( 0.00%) 7317 ( 0.00%) 95.03
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 411 ( 0.00%) 90879 ( 0.00%) 221.12
bgp 92 ( 0.00%) 27502 ( 0.00%) 298.93
other 227505 ( 0.62%) 246398352 ( 0.75%) 1083.05
udp6 193241 ( 0.53%) 132825566 ( 0.41%) 687.36
dns 77079 ( 0.21%) 26063401 ( 0.08%) 338.14
everque 21 ( 0.00%) 1932 ( 0.00%) 92.00
unreal 1 ( 0.00%) 103 ( 0.00%) 103.00
quake 2 ( 0.00%) 202 ( 0.00%) 101.00
other 116138 ( 0.32%) 106759928 ( 0.33%) 919.25
icmp6 37161 ( 0.10%) 3989319 ( 0.01%) 107.35
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 10734 ( 0.03%) 10241673 ( 0.03%) 954.13
tcpdump file: 201212131400.dump.gz (847.55 MB)