Traffic Trace Info
DumpFile: 201212221400.dump
FileSize: 2896.79MB
Id: 201212221400
StartTime: Sat Dec 22 14:00:01 2012
EndTime: Sat Dec 22 14:15:00 2012
TotalTime: 899.67 seconds
TotalCapSize: -1869.17MB CapLen: 96 bytes
# of packets: 43905739 (23112.13MB)
AvgRate: 215.51Mbps stddev:27.62M
IP flow (unique src/dst pair) Information
# of flows: 11969180 (avg. 3.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 3.3% 3.3% 3.1% 2.4% 2.3% 1.9% 1.8% 1.6% 1.6%
IP address Information
# of IPv4 addresses: 9491386
Top 10 bandwidth usage (bytes/total in %):
9.6% 8.3% 8.0% 6.9% 6.3% 5.1% 4.7% 4.6% 4.2% 4.1%
# of IPv6 addresses: 8839
Top 10 bandwidth usage (bytes/total in %):
13.6% 13.3% 9.6% 9.0% 5.1% 3.9% 3.7% 3.7% 3.6% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201212221400.pktlen.png)
detailed numbers
[ 32- 63]: 20130601
[ 64- 127]: 6370774
[ 128- 255]: 486446
[ 256- 511]: 616725
[ 512- 1023]: 2036674
[ 1024- 2047]: 14264519
Protocol Breakdown
![[protocol breakdown chart]](201212221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 43905739 (100.00%) 24234824610 (100.00%) 551.97
ip 42446557 ( 96.68%) 22912714992 ( 94.54%) 539.80
tcp 21437207 ( 48.83%) 19018952350 ( 78.48%) 887.19
http(s) 9845306 ( 22.42%) 12347601376 ( 50.95%) 1254.16
http(c) 6012460 ( 13.69%) 2468007461 ( 10.18%) 410.48
squid 31218 ( 0.07%) 19767386 ( 0.08%) 633.20
smtp 83060 ( 0.19%) 20784388 ( 0.09%) 250.23
nntp 104 ( 0.00%) 6240 ( 0.00%) 60.00
ftp 45438 ( 0.10%) 40765677 ( 0.17%) 897.17
pop3 3030 ( 0.01%) 2108147 ( 0.01%) 695.76
imap 2739 ( 0.01%) 320918 ( 0.00%) 117.17
telnet 35412 ( 0.08%) 4088490 ( 0.02%) 115.45
ssh 120613 ( 0.27%) 13892497 ( 0.06%) 115.18
dns 1265 ( 0.00%) 226232 ( 0.00%) 178.84
bgp 519 ( 0.00%) 111102 ( 0.00%) 214.07
napster 2 ( 0.00%) 132 ( 0.00%) 66.00
realaud 4 ( 0.00%) 246 ( 0.00%) 61.50
icecast 673 ( 0.00%) 70343 ( 0.00%) 104.52
other 5255358 ( 11.97%) 4101201355 ( 16.92%) 780.38
udp 4206431 ( 9.58%) 2743440688 ( 11.32%) 652.20
dns 780914 ( 1.78%) 433995111 ( 1.79%) 555.75
realaud 8 ( 0.00%) 892 ( 0.00%) 111.50
halflif 8 ( 0.00%) 578 ( 0.00%) 72.25
starcra 29 ( 0.00%) 3174 ( 0.00%) 109.45
everque 157 ( 0.00%) 14258 ( 0.00%) 90.82
unreal 5 ( 0.00%) 673 ( 0.00%) 134.60
quake 5 ( 0.00%) 698 ( 0.00%) 139.60
other 3421309 ( 7.79%) 2308636673 ( 9.53%) 674.78
icmp 16311646 ( 37.15%) 1001213978 ( 4.13%) 61.38
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 17467 ( 0.04%) 6299706 ( 0.03%) 360.66
ip6 419939 ( 0.96%) 125854566 ( 0.52%) 299.70
pim 78 ( 0.00%) 4680 ( 0.00%) 60.00
other 53605 ( 0.12%) 16929864 ( 0.07%) 315.83
frag 443869 ( 1.01%) 430378842 ( 1.78%) 969.61
ip6 1459182 ( 3.32%) 1322109618 ( 5.46%) 906.06
tcp6 1130230 ( 2.57%) 1027811509 ( 4.24%) 909.38
http(s) 646920 ( 1.47%) 675246921 ( 2.79%) 1043.79
http(c) 164328 ( 0.37%) 20803003 ( 0.09%) 126.59
smtp 312 ( 0.00%) 122270 ( 0.00%) 391.89
ftp 66 ( 0.00%) 5876 ( 0.00%) 89.03
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 255 ( 0.00%) 48397 ( 0.00%) 189.79
bgp 89 ( 0.00%) 26638 ( 0.00%) 299.30
other 318248 ( 0.72%) 331557396 ( 1.37%) 1041.82
udp6 128365 ( 0.29%) 84346375 ( 0.35%) 657.08
dns 47357 ( 0.11%) 14914214 ( 0.06%) 314.93
starcra 3 ( 0.00%) 276 ( 0.00%) 92.00
everque 1 ( 0.00%) 102 ( 0.00%) 102.00
cuseeme 1 ( 0.00%) 107 ( 0.00%) 107.00
other 81003 ( 0.18%) 69431676 ( 0.29%) 857.15
icmp6 28988 ( 0.07%) 3059130 ( 0.01%) 105.53
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 171485 ( 0.39%) 206877112 ( 0.85%) 1206.39
tcpdump file: 201212221400.dump.gz (947.39 MB)