Traffic Trace Info
DumpFile: 201212201400.dump
FileSize: 2622.32MB
Id: 201212201400
StartTime: Thu Dec 20 14:00:01 2012
EndTime: Thu Dec 20 14:15:00 2012
TotalTime: 899.24 seconds
TotalCapSize: 2038.74MB CapLen: 96 bytes
# of packets: 38244462 (20631.73MB)
AvgRate: 192.41Mbps stddev:26.63M
IP flow (unique src/dst pair) Information
# of flows: 9775470 (avg. 3.91 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 3.2% 3.1% 2.4% 2.3% 1.6% 1.6% 1.5% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 7510366
Top 10 bandwidth usage (bytes/total in %):
7.8% 6.2% 4.3% 3.8% 3.7% 3.6% 3.6% 3.6% 3.6% 3.6%
# of IPv6 addresses: 10201
Top 10 bandwidth usage (bytes/total in %):
6.7% 6.4% 6.3% 5.7% 5.0% 4.6% 4.1% 3.2% 3.1% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201212201400.pktlen.png)
detailed numbers
[ 32- 63]: 14525076
[ 64- 127]: 7731248
[ 128- 255]: 1019384
[ 256- 511]: 792628
[ 512- 1023]: 1115182
[ 1024- 2047]: 13060944
Protocol Breakdown
![[protocol breakdown chart]](201212201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38244462 (100.00%) 21633935608 (100.00%) 565.67
ip 36120628 ( 94.45%) 19880637672 ( 91.90%) 550.40
tcp 21296970 ( 55.69%) 17751405013 ( 82.05%) 833.52
http(s) 10575443 ( 27.65%) 12682087153 ( 58.62%) 1199.20
http(c) 7432489 ( 19.43%) 2815692826 ( 13.02%) 378.84
squid 29150 ( 0.08%) 18717220 ( 0.09%) 642.10
smtp 64667 ( 0.17%) 14236059 ( 0.07%) 220.14
nntp 97 ( 0.00%) 5820 ( 0.00%) 60.00
ftp 42585 ( 0.11%) 31299345 ( 0.14%) 734.99
pop3 5154 ( 0.01%) 2427879 ( 0.01%) 471.07
imap 4258 ( 0.01%) 1398077 ( 0.01%) 328.34
telnet 16433 ( 0.04%) 2690539 ( 0.01%) 163.73
ssh 521905 ( 1.36%) 368411850 ( 1.70%) 705.90
dns 2982 ( 0.01%) 442367 ( 0.00%) 148.35
bgp 529 ( 0.00%) 114139 ( 0.00%) 215.76
napster 42 ( 0.00%) 4815 ( 0.00%) 114.64
realaud 27 ( 0.00%) 3512 ( 0.00%) 130.07
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 19624 ( 0.05%) 15661014 ( 0.07%) 798.05
other 2581584 ( 6.75%) 1798212338 ( 8.31%) 696.55
udp 2310254 ( 6.04%) 1031694149 ( 4.77%) 446.57
dns 751254 ( 1.96%) 262270008 ( 1.21%) 349.11
rip 15 ( 0.00%) 1050 ( 0.00%) 70.00
realaud 7408 ( 0.02%) 7402641 ( 0.03%) 999.28
halflif 20 ( 0.00%) 2789 ( 0.00%) 139.45
starcra 47 ( 0.00%) 4013 ( 0.00%) 85.38
everque 207 ( 0.00%) 30112 ( 0.00%) 145.47
unreal 8 ( 0.00%) 1096 ( 0.00%) 137.00
quake 17 ( 0.00%) 5866 ( 0.00%) 345.06
cuseeme 3 ( 0.00%) 341 ( 0.00%) 113.67
other 1550935 ( 4.06%) 761586853 ( 3.52%) 491.05
icmp 11758604 ( 30.75%) 725517157 ( 3.35%) 61.70
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 49486 ( 0.13%) 10006184 ( 0.05%) 202.20
ip6 648521 ( 1.70%) 347188490 ( 1.60%) 535.35
pim 76 ( 0.00%) 4560 ( 0.00%) 60.00
other 56532 ( 0.15%) 14802849 ( 0.07%) 261.85
frag 105463 ( 0.28%) 109888287 ( 0.51%) 1041.96
ip6 2123834 ( 5.55%) 1753297936 ( 8.10%) 825.53
tcp6 1573444 ( 4.11%) 1233944328 ( 5.70%) 784.23
http(s) 1205148 ( 3.15%) 1181096051 ( 5.46%) 980.04
http(c) 312878 ( 0.82%) 35492265 ( 0.16%) 113.44
squid 24 ( 0.00%) 2096 ( 0.00%) 87.33
smtp 321 ( 0.00%) 159019 ( 0.00%) 495.39
ftp 94 ( 0.00%) 10267 ( 0.00%) 109.22
ssh 2791 ( 0.01%) 284274 ( 0.00%) 101.85
dns 672 ( 0.00%) 188962 ( 0.00%) 281.19
bgp 100 ( 0.00%) 35537 ( 0.00%) 355.37
other 51416 ( 0.13%) 16675857 ( 0.08%) 324.33
udp6 153582 ( 0.40%) 65934531 ( 0.30%) 429.31
dns 75519 ( 0.20%) 25027486 ( 0.12%) 331.41
realaud 1 ( 0.00%) 112 ( 0.00%) 112.00
everque 1 ( 0.00%) 101 ( 0.00%) 101.00
other 78061 ( 0.20%) 40906832 ( 0.19%) 524.04
icmp6 25301 ( 0.07%) 3209029 ( 0.01%) 126.83
ip6 89 ( 0.00%) 12002 ( 0.00%) 134.85
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 371388 ( 0.97%) 450193966 ( 2.08%) 1212.19
tcpdump file: 201212201400.dump.gz (884.40 MB)