Traffic Trace Info
DumpFile: 201212171400.dump
FileSize: 2139.47MB
Id: 201212171400
StartTime: Mon Dec 17 14:00:01 2012
EndTime: Mon Dec 17 14:15:00 2012
TotalTime: 899.56 seconds
TotalCapSize: 1694.06MB CapLen: 96 bytes
# of packets: 29189917 (21993.06MB)
AvgRate: 205.09Mbps stddev:41.66M
IP flow (unique src/dst pair) Information
# of flows: 1961810 (avg. 14.88 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.9% 3.4% 2.5% 1.8% 1.7% 1.6% 1.4% 1.1% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 1437862
Top 10 bandwidth usage (bytes/total in %):
13.9% 13.1% 12.2% 9.6% 6.0% 5.3% 3.7% 3.1% 2.8% 2.7%
# of IPv6 addresses: 12113
Top 10 bandwidth usage (bytes/total in %):
15.5% 5.4% 5.1% 2.6% 2.6% 2.3% 2.3% 2.0% 1.8% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201212171400.pktlen.png)
detailed numbers
[ 32- 63]: 5568870
[ 64- 127]: 6522505
[ 128- 255]: 840166
[ 256- 511]: 818635
[ 512- 1023]: 1060288
[ 1024- 2047]: 14379453
Protocol Breakdown
![[protocol breakdown chart]](201212171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29189917 (100.00%) 23061395389 (100.00%) 790.05
ip 26562549 ( 91.00%) 20849023834 ( 90.41%) 784.90
tcp 22288613 ( 76.36%) 19288209809 ( 83.64%) 865.38
http(s) 12624001 ( 43.25%) 15863690617 ( 68.79%) 1256.63
http(c) 7619376 ( 26.10%) 2242865760 ( 9.73%) 294.36
squid 78570 ( 0.27%) 67332062 ( 0.29%) 856.97
smtp 152030 ( 0.52%) 91913395 ( 0.40%) 604.57
nntp 93 ( 0.00%) 5580 ( 0.00%) 60.00
ftp 5908 ( 0.02%) 408110 ( 0.00%) 69.08
pop3 4600 ( 0.02%) 2224843 ( 0.01%) 483.66
imap 3062 ( 0.01%) 444258 ( 0.00%) 145.09
telnet 30973 ( 0.11%) 3734539 ( 0.02%) 120.57
ssh 145487 ( 0.50%) 20726236 ( 0.09%) 142.46
dns 10421 ( 0.04%) 4406476 ( 0.02%) 422.85
bgp 493 ( 0.00%) 93454 ( 0.00%) 189.56
napster 16 ( 0.00%) 1854 ( 0.00%) 115.88
realaud 311 ( 0.00%) 42716 ( 0.00%) 137.35
icecast 30946 ( 0.11%) 23713136 ( 0.10%) 766.27
hotline 3 ( 0.00%) 194 ( 0.00%) 64.67
other 1582322 ( 5.42%) 966606519 ( 4.19%) 610.88
udp 2006318 ( 6.87%) 1101653127 ( 4.78%) 549.09
dns 867779 ( 2.97%) 456159615 ( 1.98%) 525.66
realaud 26 ( 0.00%) 1850 ( 0.00%) 71.15
halflif 194 ( 0.00%) 12437 ( 0.00%) 64.11
starcra 30 ( 0.00%) 6399 ( 0.00%) 213.30
everque 945 ( 0.00%) 516117 ( 0.00%) 546.16
unreal 3 ( 0.00%) 491 ( 0.00%) 163.67
quake 19 ( 0.00%) 1895 ( 0.00%) 99.74
cuseeme 3 ( 0.00%) 306 ( 0.00%) 102.00
other 1136837 ( 3.89%) 644372558 ( 2.79%) 566.81
icmp 1497064 ( 5.13%) 103007323 ( 0.45%) 68.81
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 39714 ( 0.14%) 11652444 ( 0.05%) 293.41
ip6 678758 ( 2.33%) 330862511 ( 1.43%) 487.45
pim 81 ( 0.00%) 4860 ( 0.00%) 60.00
other 51816 ( 0.18%) 13614490 ( 0.06%) 262.75
frag 314534 ( 1.08%) 326270176 ( 1.41%) 1037.31
ip6 2627366 ( 9.00%) 2212371435 ( 9.59%) 842.05
tcp6 2415510 ( 8.28%) 2100393433 ( 9.11%) 869.54
http(s) 1903088 ( 6.52%) 2004137683 ( 8.69%) 1053.10
http(c) 451042 ( 1.55%) 52358362 ( 0.23%) 116.08
smtp 391 ( 0.00%) 222476 ( 0.00%) 568.99
ftp 89 ( 0.00%) 8027 ( 0.00%) 90.19
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 167 ( 0.00%) 51724 ( 0.00%) 309.72
bgp 101 ( 0.00%) 33817 ( 0.00%) 334.82
other 60620 ( 0.21%) 43580336 ( 0.19%) 718.91
udp6 165949 ( 0.57%) 104503402 ( 0.45%) 629.73
dns 84384 ( 0.29%) 28667290 ( 0.12%) 339.72
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 3 ( 0.00%) 319 ( 0.00%) 106.33
other 81561 ( 0.28%) 75835686 ( 0.33%) 929.80
icmp6 38151 ( 0.13%) 4153340 ( 0.02%) 108.87
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 7644 ( 0.03%) 3306004 ( 0.01%) 432.50
tcpdump file: 201212171400.dump.gz (681.19 MB)