Traffic Trace Info
DumpFile: 201212151400.dump
FileSize: 1802.73MB
Id: 201212151400
StartTime: Sat Dec 15 14:00:00 2012
EndTime: Sat Dec 15 14:15:01 2012
TotalTime: 900.63 seconds
TotalCapSize: 1424.26MB CapLen: 96 bytes
# of packets: 24802870 (18181.91MB)
AvgRate: 169.30Mbps stddev:33.49M
IP flow (unique src/dst pair) Information
# of flows: 1887219 (avg. 13.14 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 4.2% 2.4% 2.3% 1.7% 1.6% 1.5% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 1444941
Top 10 bandwidth usage (bytes/total in %):
16.2% 8.9% 6.7% 5.9% 5.9% 4.6% 4.6% 4.1% 3.8% 3.4%
# of IPv6 addresses: 9160
Top 10 bandwidth usage (bytes/total in %):
9.7% 6.4% 5.8% 4.7% 3.7% 3.7% 3.6% 3.5% 3.1% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201212151400.pktlen.png)
detailed numbers
[ 32- 63]: 4263116
[ 64- 127]: 6523153
[ 128- 255]: 700155
[ 256- 511]: 521843
[ 512- 1023]: 812509
[ 1024- 2047]: 11982094
Protocol Breakdown
![[protocol breakdown chart]](201212151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24802870 (100.00%) 19065115818 (100.00%) 768.67
ip 23029840 ( 92.85%) 17568443208 ( 92.15%) 762.86
tcp 18630358 ( 75.11%) 15915288160 ( 83.48%) 854.27
http(s) 7103240 ( 28.64%) 8383974287 ( 43.98%) 1180.30
http(c) 4255482 ( 17.16%) 1117545350 ( 5.86%) 262.61
squid 53727 ( 0.22%) 42407324 ( 0.22%) 789.31
smtp 49973 ( 0.20%) 13463419 ( 0.07%) 269.41
nntp 117 ( 0.00%) 7020 ( 0.00%) 60.00
ftp 5319 ( 0.02%) 383995 ( 0.00%) 72.19
pop3 20038 ( 0.08%) 1719745 ( 0.01%) 85.82
imap 27586 ( 0.11%) 6315144 ( 0.03%) 228.93
telnet 31480 ( 0.13%) 3767802 ( 0.02%) 119.69
ssh 59105 ( 0.24%) 14535212 ( 0.08%) 245.92
dns 23563 ( 0.10%) 2179656 ( 0.01%) 92.50
bgp 518 ( 0.00%) 115714 ( 0.00%) 223.39
napster 25 ( 0.00%) 2417 ( 0.00%) 96.68
realaud 1986 ( 0.01%) 123517 ( 0.00%) 62.19
icecast 205183 ( 0.83%) 160970229 ( 0.84%) 784.52
hotline 9 ( 0.00%) 904 ( 0.00%) 100.44
other 6793007 ( 27.39%) 6167776425 ( 32.35%) 907.96
udp 2218095 ( 8.94%) 1201902782 ( 6.30%) 541.86
dns 642136 ( 2.59%) 387791214 ( 2.03%) 603.91
realaud 4 ( 0.00%) 341 ( 0.00%) 85.25
halflif 13 ( 0.00%) 968 ( 0.00%) 74.46
starcra 21 ( 0.00%) 4638 ( 0.00%) 220.86
everque 938 ( 0.00%) 1067544 ( 0.01%) 1138.11
unreal 19 ( 0.00%) 2418 ( 0.00%) 127.26
quake 31 ( 0.00%) 2079 ( 0.00%) 67.06
cuseeme 2 ( 0.00%) 173 ( 0.00%) 86.50
other 1574353 ( 6.35%) 812315505 ( 4.26%) 515.97
icmp 1580333 ( 6.37%) 110224004 ( 0.58%) 69.75
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 11763 ( 0.05%) 5149258 ( 0.03%) 437.75
ip6 537080 ( 2.17%) 320958848 ( 1.68%) 597.60
pim 78 ( 0.00%) 4680 ( 0.00%) 60.00
other 51949 ( 0.21%) 14896316 ( 0.08%) 286.75
frag 298538 ( 1.20%) 307522829 ( 1.61%) 1030.10
ip6 1773030 ( 7.15%) 1496672610 ( 7.85%) 844.13
tcp6 1605608 ( 6.47%) 1405427700 ( 7.37%) 875.32
http(s) 1052872 ( 4.24%) 1125057898 ( 5.90%) 1068.56
http(c) 213703 ( 0.86%) 27257433 ( 0.14%) 127.55
smtp 311 ( 0.00%) 124329 ( 0.00%) 399.77
ftp 1946 ( 0.01%) 346989 ( 0.00%) 178.31
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 137 ( 0.00%) 47546 ( 0.00%) 347.05
bgp 105 ( 0.00%) 26260 ( 0.00%) 250.10
other 336522 ( 1.36%) 252566237 ( 1.32%) 750.52
udp6 133295 ( 0.54%) 85862580 ( 0.45%) 644.15
dns 53467 ( 0.22%) 18569491 ( 0.10%) 347.31
other 79828 ( 0.32%) 67293089 ( 0.35%) 842.98
icmp6 32405 ( 0.13%) 3661143 ( 0.02%) 112.98
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1608 ( 0.01%) 1705695 ( 0.01%) 1060.76
tcpdump file: 201212151400.dump.gz (583.90 MB)