Traffic Trace Info
DumpFile: 201212211400.dump
FileSize: 3293.70MB
Id: 201212211400
StartTime: Fri Dec 21 14:00:00 2012
EndTime: Fri Dec 21 14:15:01 2012
TotalTime: 900.69 seconds
TotalCapSize: -1540.91MB CapLen: 96 bytes
# of packets: 48405010 (27188.67MB)
AvgRate: 253.26Mbps stddev:39.16M
IP flow (unique src/dst pair) Information
# of flows: 12113870 (avg. 4.00 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.7% 7.0% 2.5% 2.2% 2.1% 1.3% 1.2% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 9553722
Top 10 bandwidth usage (bytes/total in %):
11.5% 8.4% 8.4% 7.6% 6.6% 3.8% 3.4% 3.1% 2.9% 2.8%
# of IPv6 addresses: 10382
Top 10 bandwidth usage (bytes/total in %):
11.2% 10.6% 7.1% 5.1% 5.1% 5.1% 4.9% 3.2% 2.9% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201212211400.pktlen.png)
detailed numbers
[ 32- 63]: 19084369
[ 64- 127]: 8651731
[ 128- 255]: 723978
[ 256- 511]: 1337078
[ 512- 1023]: 1197361
[ 1024- 2047]: 17410493
Protocol Breakdown
![[protocol breakdown chart]](201212211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 48405010 (100.00%) 28509391741 (100.00%) 588.98
ip 45968840 ( 94.97%) 26383870869 ( 92.54%) 573.95
tcp 25382526 ( 52.44%) 22731916834 ( 79.73%) 895.57
http(s) 13774898 ( 28.46%) 17334708055 ( 60.80%) 1258.43
http(c) 7611283 ( 15.72%) 2899221424 ( 10.17%) 380.91
squid 26809 ( 0.06%) 12446143 ( 0.04%) 464.25
smtp 70523 ( 0.15%) 19992052 ( 0.07%) 283.48
nntp 104 ( 0.00%) 6258 ( 0.00%) 60.17
ftp 55946 ( 0.12%) 46657098 ( 0.16%) 833.97
pop3 6792 ( 0.01%) 4375883 ( 0.02%) 644.27
imap 4653 ( 0.01%) 617468 ( 0.00%) 132.70
telnet 8988 ( 0.02%) 2139111 ( 0.01%) 238.00
ssh 681691 ( 1.41%) 50114479 ( 0.18%) 73.51
dns 1688 ( 0.00%) 285816 ( 0.00%) 169.32
bgp 510 ( 0.00%) 108287 ( 0.00%) 212.33
napster 17 ( 0.00%) 1307 ( 0.00%) 76.88
realaud 67 ( 0.00%) 7026 ( 0.00%) 104.87
rtsp 3249 ( 0.01%) 3893897 ( 0.01%) 1198.49
icecast 41872 ( 0.09%) 38487119 ( 0.13%) 919.16
hotline 2 ( 0.00%) 126 ( 0.00%) 63.00
other 3093432 ( 6.39%) 2318855165 ( 8.13%) 749.61
udp 3416160 ( 7.06%) 1990209927 ( 6.98%) 582.59
dns 895529 ( 1.85%) 446565808 ( 1.57%) 498.66
realaud 28 ( 0.00%) 2015 ( 0.00%) 71.96
halflif 18 ( 0.00%) 2192 ( 0.00%) 121.78
starcra 29 ( 0.00%) 5833 ( 0.00%) 201.14
everque 300 ( 0.00%) 36277 ( 0.00%) 120.92
unreal 3 ( 0.00%) 485 ( 0.00%) 161.67
quake 16 ( 0.00%) 2017 ( 0.00%) 126.06
cuseeme 2 ( 0.00%) 187 ( 0.00%) 93.50
other 2519142 ( 5.20%) 1542297281 ( 5.41%) 612.23
icmp 16273597 ( 33.62%) 1006172246 ( 3.53%) 61.83
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 14349 ( 0.03%) 5928590 ( 0.02%) 413.17
ip6 806045 ( 1.67%) 629460248 ( 2.21%) 780.92
pim 81 ( 0.00%) 4860 ( 0.00%) 60.00
other 75897 ( 0.16%) 20158894 ( 0.07%) 265.61
frag 301881 ( 0.62%) 328106396 ( 1.15%) 1086.87
ip6 2436170 ( 5.03%) 2125520872 ( 7.46%) 872.48
tcp6 1645040 ( 3.40%) 1317092102 ( 4.62%) 800.64
http(s) 1166941 ( 2.41%) 1212764153 ( 4.25%) 1039.27
http(c) 297845 ( 0.62%) 33442385 ( 0.12%) 112.28
smtp 505 ( 0.00%) 149621 ( 0.00%) 296.28
ftp 63 ( 0.00%) 5630 ( 0.00%) 89.37
ssh 125 ( 0.00%) 25262 ( 0.00%) 202.10
dns 420 ( 0.00%) 109239 ( 0.00%) 260.09
bgp 96 ( 0.00%) 28345 ( 0.00%) 295.26
other 179045 ( 0.37%) 70567467 ( 0.25%) 394.13
udp6 195785 ( 0.40%) 117901680 ( 0.41%) 602.20
dns 67145 ( 0.14%) 20625822 ( 0.07%) 307.18
everque 2 ( 0.00%) 219 ( 0.00%) 109.50
other 128638 ( 0.27%) 97275639 ( 0.34%) 756.20
icmp6 25099 ( 0.05%) 2926574 ( 0.01%) 116.60
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 570132 ( 1.18%) 687585024 ( 2.41%) 1206.01
tcpdump file: 201212211400.dump.gz (1079.55 MB)