Traffic Trace Info
DumpFile: 201212191400.dump
FileSize: 3150.91MB
Id: 201212191400
StartTime: Wed Dec 19 14:00:01 2012
EndTime: Wed Dec 19 14:15:01 2012
TotalTime: 899.72 seconds
TotalCapSize: -1652.70MB CapLen: 96 bytes
# of packets: 46373480 (23242.27MB)
AvgRate: 216.69Mbps stddev:44.79M
IP flow (unique src/dst pair) Information
# of flows: 12630857 (avg. 3.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 3.4% 3.3% 2.5% 2.0% 1.8% 1.6% 1.1% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 9833329
Top 10 bandwidth usage (bytes/total in %):
6.2% 5.9% 5.0% 5.0% 4.3% 4.2% 3.8% 3.7% 3.7% 3.6%
# of IPv6 addresses: 10921
Top 10 bandwidth usage (bytes/total in %):
7.9% 7.5% 3.7% 3.5% 3.0% 2.8% 2.8% 2.6% 2.5% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201212191400.pktlen.png)
detailed numbers
[ 32- 63]: 19820484
[ 64- 127]: 9057694
[ 128- 255]: 905837
[ 256- 511]: 870259
[ 512- 1023]: 1031288
[ 1024- 2047]: 14687918
Protocol Breakdown
![[protocol breakdown chart]](201212191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 46373480 (100.00%) 24371289966 (100.00%) 525.54
ip 43910410 ( 94.69%) 22353149079 ( 91.72%) 509.06
tcp 22803673 ( 49.17%) 18987809155 ( 77.91%) 832.66
http(s) 12121389 ( 26.14%) 15017167900 ( 61.62%) 1238.90
http(c) 7634085 ( 16.46%) 2189428451 ( 8.98%) 286.80
squid 132580 ( 0.29%) 92837643 ( 0.38%) 700.24
smtp 80163 ( 0.17%) 25679052 ( 0.11%) 320.34
nntp 128 ( 0.00%) 7680 ( 0.00%) 60.00
ftp 125281 ( 0.27%) 68648527 ( 0.28%) 547.96
pop3 12878 ( 0.03%) 4962768 ( 0.02%) 385.37
imap 4577 ( 0.01%) 687884 ( 0.00%) 150.29
telnet 17240 ( 0.04%) 2720123 ( 0.01%) 157.78
ssh 19886 ( 0.04%) 4636200 ( 0.02%) 233.14
dns 9731 ( 0.02%) 2058419 ( 0.01%) 211.53
bgp 569 ( 0.00%) 148271 ( 0.00%) 260.58
napster 32 ( 0.00%) 2313 ( 0.00%) 72.28
icecast 12327 ( 0.03%) 11703131 ( 0.05%) 949.39
hotline 13 ( 0.00%) 1463 ( 0.00%) 112.54
other 2632794 ( 5.68%) 1567119330 ( 6.43%) 595.23
udp 3056147 ( 6.59%) 1791211352 ( 7.35%) 586.10
dns 1042650 ( 2.25%) 504069768 ( 2.07%) 483.45
realaud 4 ( 0.00%) 655 ( 0.00%) 163.75
halflif 13 ( 0.00%) 1035 ( 0.00%) 79.62
starcra 5 ( 0.00%) 409 ( 0.00%) 81.80
everque 128 ( 0.00%) 22149 ( 0.00%) 173.04
unreal 4 ( 0.00%) 362 ( 0.00%) 90.50
quake 12 ( 0.00%) 1013 ( 0.00%) 84.42
cuseeme 2 ( 0.00%) 179 ( 0.00%) 89.50
other 2012820 ( 4.34%) 1286762181 ( 5.28%) 639.28
icmp 17092754 ( 36.86%) 1051223400 ( 4.31%) 61.50
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 9362 ( 0.02%) 4348596 ( 0.02%) 464.49
ip6 893140 ( 1.93%) 503601905 ( 2.07%) 563.86
pim 71 ( 0.00%) 4260 ( 0.00%) 60.00
other 55078 ( 0.12%) 14931141 ( 0.06%) 271.09
frag 310552 ( 0.67%) 322735020 ( 1.32%) 1039.23
ip6 2463068 ( 5.31%) 2018140767 ( 8.28%) 819.36
tcp6 2172703 ( 4.69%) 1838782942 ( 7.54%) 846.31
http(s) 1636837 ( 3.53%) 1679778617 ( 6.89%) 1026.23
http(c) 328289 ( 0.71%) 40997998 ( 0.17%) 124.88
squid 16 ( 0.00%) 2583 ( 0.00%) 161.44
smtp 241 ( 0.00%) 104414 ( 0.00%) 433.25
ftp 842 ( 0.00%) 74870 ( 0.00%) 88.92
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 407 ( 0.00%) 84979 ( 0.00%) 208.79
bgp 91 ( 0.00%) 28041 ( 0.00%) 308.14
other 205968 ( 0.44%) 117710432 ( 0.48%) 571.50
udp6 253785 ( 0.55%) 173374769 ( 0.71%) 683.16
dns 84706 ( 0.18%) 27041197 ( 0.11%) 319.24
realaud 1 ( 0.00%) 113 ( 0.00%) 113.00
cuseeme 1 ( 0.00%) 90 ( 0.00%) 90.00
other 169077 ( 0.36%) 146333369 ( 0.60%) 865.48
icmp6 34609 ( 0.07%) 4091813 ( 0.02%) 118.23
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1856 ( 0.00%) 1875583 ( 0.01%) 1010.55
tcpdump file: 201212191400.dump.gz (1053.16 MB)