Traffic Trace Info
DumpFile: 201212241400.dump
FileSize: 2464.05MB
Id: 201212241400
StartTime: Mon Dec 24 14:00:01 2012
EndTime: Mon Dec 24 14:15:00 2012
TotalTime: 899.28 seconds
TotalCapSize: 1896.57MB CapLen: 96 bytes
# of packets: 37189965 (19052.63MB)
AvgRate: 177.73Mbps stddev:33.08M
IP flow (unique src/dst pair) Information
# of flows: 10934891 (avg. 3.40 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.8% 4.7% 3.2% 2.9% 2.7% 2.3% 2.1% 1.6% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 8544604
Top 10 bandwidth usage (bytes/total in %):
11.0% 10.0% 10.0% 9.4% 6.0% 5.5% 5.0% 4.5% 3.8% 3.8%
# of IPv6 addresses: 10501
Top 10 bandwidth usage (bytes/total in %):
46.8% 44.2% 6.4% 4.0% 4.0% 3.9% 3.5% 2.4% 2.3% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201212241400.pktlen.png)
detailed numbers
[ 32- 63]: 17399937
[ 64- 127]: 5454171
[ 128- 255]: 674321
[ 256- 511]: 578599
[ 512- 1023]: 838262
[ 1024- 2047]: 12244675
Protocol Breakdown
![[protocol breakdown chart]](201212241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37189965 (100.00%) 19978135289 (100.00%) 537.19
ip 35171008 ( 94.57%) 17873923728 ( 89.47%) 508.20
tcp 16826761 ( 45.25%) 15308105026 ( 76.62%) 909.75
http(s) 8649650 ( 23.26%) 10818726838 ( 54.15%) 1250.77
http(c) 3921667 ( 10.54%) 1424971344 ( 7.13%) 363.36
squid 27766 ( 0.07%) 20067682 ( 0.10%) 722.74
smtp 57410 ( 0.15%) 11581628 ( 0.06%) 201.74
nntp 81 ( 0.00%) 4860 ( 0.00%) 60.00
ftp 49117 ( 0.13%) 42653901 ( 0.21%) 868.41
pop3 1255 ( 0.00%) 430840 ( 0.00%) 343.30
imap 2969 ( 0.01%) 444635 ( 0.00%) 149.76
telnet 5502 ( 0.01%) 1887093 ( 0.01%) 342.98
ssh 619071 ( 1.66%) 345413699 ( 1.73%) 557.95
dns 2703 ( 0.01%) 1621871 ( 0.01%) 600.03
bgp 520 ( 0.00%) 97993 ( 0.00%) 188.45
napster 49 ( 0.00%) 16553 ( 0.00%) 337.82
realaud 721 ( 0.00%) 55073 ( 0.00%) 76.38
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 2011171 ( 5.41%) 1774467985 ( 8.88%) 882.31
hotline 12 ( 0.00%) 2472 ( 0.00%) 206.00
other 1477096 ( 3.97%) 865660499 ( 4.33%) 586.06
udp 2445798 ( 6.58%) 1387078017 ( 6.94%) 567.13
dns 731298 ( 1.97%) 262331466 ( 1.31%) 358.72
realaud 53 ( 0.00%) 4256 ( 0.00%) 80.30
halflif 24 ( 0.00%) 2527 ( 0.00%) 105.29
starcra 31 ( 0.00%) 2988 ( 0.00%) 96.39
everque 127 ( 0.00%) 15249 ( 0.00%) 120.07
unreal 8 ( 0.00%) 1387 ( 0.00%) 173.38
quake 15 ( 0.00%) 1482 ( 0.00%) 98.80
cuseeme 3 ( 0.00%) 248 ( 0.00%) 82.67
other 1713100 ( 4.61%) 1123923021 ( 5.63%) 656.08
icmp 15180503 ( 40.82%) 963321864 ( 4.82%) 63.46
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 63432 ( 0.17%) 43985152 ( 0.22%) 693.42
ip6 603070 ( 1.62%) 157300224 ( 0.79%) 260.83
pim 83 ( 0.00%) 4980 ( 0.00%) 60.00
other 51176 ( 0.14%) 14109195 ( 0.07%) 275.70
frag 72589 ( 0.20%) 80949756 ( 0.41%) 1115.18
ip6 2018957 ( 5.43%) 2104211561 ( 10.53%) 1042.23
tcp6 1500576 ( 4.03%) 1566164649 ( 7.84%) 1043.71
http(s) 584006 ( 1.57%) 598365085 ( 3.00%) 1024.59
http(c) 160541 ( 0.43%) 20629457 ( 0.10%) 128.50
smtp 110 ( 0.00%) 26934 ( 0.00%) 244.85
ftp 64 ( 0.00%) 5716 ( 0.00%) 89.31
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 287 ( 0.00%) 44316 ( 0.00%) 154.41
bgp 94 ( 0.00%) 26115 ( 0.00%) 277.82
other 755462 ( 2.03%) 947066018 ( 4.74%) 1253.62
udp6 57878 ( 0.16%) 18023852 ( 0.09%) 311.41
dns 43965 ( 0.12%) 13837959 ( 0.07%) 314.75
starcra 1 ( 0.00%) 95 ( 0.00%) 95.00
quake 1 ( 0.00%) 110 ( 0.00%) 110.00
other 13911 ( 0.04%) 4185688 ( 0.02%) 300.89
icmp6 30909 ( 0.08%) 3372284 ( 0.02%) 109.10
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 429480 ( 1.15%) 516635284 ( 2.59%) 1202.93
tcpdump file: 201212241400.dump.gz (801.35 MB)