Traffic Trace Info
DumpFile: 201212141400.dump
FileSize: 2206.94MB
Id: 201212141400
StartTime: Fri Dec 14 14:00:00 2012
EndTime: Fri Dec 14 14:15:00 2012
TotalTime: 899.72 seconds
TotalCapSize: 1733.46MB CapLen: 96 bytes
# of packets: 31029707 (23390.76MB)
AvgRate: 218.08Mbps stddev:37.24M
IP flow (unique src/dst pair) Information
# of flows: 1850267 (avg. 16.77 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 3.4% 2.6% 2.3% 1.9% 1.9% 1.9% 1.8% 1.7% 1.6%
IP address Information
# of IPv4 addresses: 1409608
Top 10 bandwidth usage (bytes/total in %):
11.6% 10.6% 6.6% 4.7% 3.9% 3.8% 3.6% 3.1% 3.1% 3.0%
# of IPv6 addresses: 10476
Top 10 bandwidth usage (bytes/total in %):
9.4% 6.9% 6.8% 3.3% 3.2% 2.6% 2.6% 1.9% 1.8% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201212141400.pktlen.png)
detailed numbers
[ 32- 63]: 5773907
[ 64- 127]: 6855219
[ 128- 255]: 815780
[ 256- 511]: 948589
[ 512- 1023]: 1060987
[ 1024- 2047]: 15575225
Protocol Breakdown
![[protocol breakdown chart]](201212141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31029707 (100.00%) 24526988988 (100.00%) 790.44
ip 29328841 ( 94.52%) 23112692417 ( 94.23%) 788.05
tcp 21835952 ( 70.37%) 19081957708 ( 77.80%) 873.88
http(s) 11583294 ( 37.33%) 14298785864 ( 58.30%) 1234.43
http(c) 6729471 ( 21.69%) 2084040493 ( 8.50%) 309.69
squid 221055 ( 0.71%) 182275765 ( 0.74%) 824.57
smtp 70323 ( 0.23%) 17315116 ( 0.07%) 246.22
nntp 115 ( 0.00%) 6900 ( 0.00%) 60.00
ftp 57368 ( 0.18%) 42528103 ( 0.17%) 741.32
pop3 4296 ( 0.01%) 2705527 ( 0.01%) 629.78
imap 14549 ( 0.05%) 9024816 ( 0.04%) 620.30
telnet 41678 ( 0.13%) 4546786 ( 0.02%) 109.09
ssh 11062 ( 0.04%) 2724807 ( 0.01%) 246.32
dns 5635 ( 0.02%) 2578466 ( 0.01%) 457.58
bgp 569 ( 0.00%) 154154 ( 0.00%) 270.92
napster 118 ( 0.00%) 11684 ( 0.00%) 99.02
realaud 299 ( 0.00%) 37487 ( 0.00%) 125.37
rtsp 4 ( 0.00%) 240 ( 0.00%) 60.00
icecast 969 ( 0.00%) 129923 ( 0.00%) 134.08
hotline 6 ( 0.00%) 712 ( 0.00%) 118.67
other 3095141 ( 9.97%) 2435090865 ( 9.93%) 786.75
udp 5216518 ( 16.81%) 3630758738 ( 14.80%) 696.01
dns 763924 ( 2.46%) 350607531 ( 1.43%) 458.96
rip 1 ( 0.00%) 79 ( 0.00%) 79.00
realaud 303 ( 0.00%) 102875 ( 0.00%) 339.52
halflif 12 ( 0.00%) 985 ( 0.00%) 82.08
starcra 42 ( 0.00%) 5157 ( 0.00%) 122.79
everque 6630 ( 0.02%) 6533615 ( 0.03%) 985.46
unreal 11 ( 0.00%) 2046 ( 0.00%) 186.00
quake 14 ( 0.00%) 1837 ( 0.00%) 131.21
cuseeme 1 ( 0.00%) 87 ( 0.00%) 87.00
other 4339740 ( 13.99%) 3266299158 ( 13.32%) 752.65
icmp 1633986 ( 5.27%) 129003189 ( 0.53%) 78.95
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 20220 ( 0.07%) 7661616 ( 0.03%) 378.91
ip6 570119 ( 1.84%) 247141457 ( 1.01%) 433.49
pim 83 ( 0.00%) 4980 ( 0.00%) 60.00
other 51778 ( 0.17%) 16145459 ( 0.07%) 311.82
frag 1017379 ( 3.28%) 836325950 ( 3.41%) 822.04
ip6 1700866 ( 5.48%) 1414296571 ( 5.77%) 831.52
tcp6 1540228 ( 4.96%) 1334998588 ( 5.44%) 866.75
http(s) 1191036 ( 3.84%) 1225617545 ( 5.00%) 1029.03
http(c) 261433 ( 0.84%) 30372243 ( 0.12%) 116.18
smtp 76 ( 0.00%) 30983 ( 0.00%) 407.67
ftp 1834 ( 0.01%) 957812 ( 0.00%) 522.25
pop3 494 ( 0.00%) 425283 ( 0.00%) 860.90
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 352 ( 0.00%) 61760 ( 0.00%) 175.45
bgp 95 ( 0.00%) 24582 ( 0.00%) 258.76
other 84896 ( 0.27%) 77507372 ( 0.32%) 912.97
udp6 119342 ( 0.38%) 69541756 ( 0.28%) 582.71
dns 74983 ( 0.24%) 24808666 ( 0.10%) 330.86
everque 1 ( 0.00%) 114 ( 0.00%) 114.00
quake 2 ( 0.00%) 215 ( 0.00%) 107.50
other 44356 ( 0.14%) 44732761 ( 0.18%) 1008.49
icmp6 34532 ( 0.11%) 3828926 ( 0.02%) 110.88
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 6649 ( 0.02%) 5911673 ( 0.02%) 889.11
tcpdump file: 201212141400.dump.gz (703.88 MB)