Traffic Trace Info
DumpFile: 201212251400.dump
FileSize: 2577.33MB
Id: 201212251400
StartTime: Tue Dec 25 14:00:00 2012
EndTime: Tue Dec 25 14:15:01 2012
TotalTime: 900.29 seconds
TotalCapSize: 1986.99MB CapLen: 96 bytes
# of packets: 38687821 (17847.65MB)
AvgRate: 166.30Mbps stddev:45.39M
IP flow (unique src/dst pair) Information
# of flows: 10845088 (avg. 3.57 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 3.0% 2.6% 2.2% 2.1% 1.9% 1.8% 1.8% 1.6% 1.3%
IP address Information
# of IPv4 addresses: 8475973
Top 10 bandwidth usage (bytes/total in %):
7.3% 7.3% 6.3% 6.3% 5.9% 5.8% 5.7% 3.5% 3.3% 2.9%
# of IPv6 addresses: 9709
Top 10 bandwidth usage (bytes/total in %):
5.4% 5.4% 4.4% 4.4% 3.9% 3.3% 3.1% 3.1% 2.1% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201212251400.pktlen.png)
detailed numbers
[ 32- 63]: 19068868
[ 64- 127]: 6455821
[ 128- 255]: 626970
[ 256- 511]: 648953
[ 512- 1023]: 778118
[ 1024- 2047]: 11109091
Protocol Breakdown
![[protocol breakdown chart]](201212251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38687821 (100.00%) 18714621466 (100.00%) 483.73
ip 36809568 ( 95.15%) 17279882690 ( 92.33%) 469.44
tcp 17061059 ( 44.10%) 14791299069 ( 79.04%) 866.96
http(s) 8526474 ( 22.04%) 10123539858 ( 54.09%) 1187.31
http(c) 5675093 ( 14.67%) 2236367617 ( 11.95%) 394.07
squid 20318 ( 0.05%) 9048908 ( 0.05%) 445.36
smtp 88017 ( 0.23%) 37309442 ( 0.20%) 423.89
nntp 98 ( 0.00%) 5908 ( 0.00%) 60.29
ftp 43728 ( 0.11%) 32472941 ( 0.17%) 742.61
pop3 5265 ( 0.01%) 2728495 ( 0.01%) 518.23
imap 3220 ( 0.01%) 469914 ( 0.00%) 145.94
telnet 7346 ( 0.02%) 2021563 ( 0.01%) 275.19
ssh 572250 ( 1.48%) 387006502 ( 2.07%) 676.29
dns 3572 ( 0.01%) 2112536 ( 0.01%) 591.42
bgp 499 ( 0.00%) 98321 ( 0.00%) 197.04
napster 34 ( 0.00%) 15786 ( 0.00%) 464.29
realaud 7 ( 0.00%) 769 ( 0.00%) 109.86
icecast 8803 ( 0.02%) 7725212 ( 0.04%) 877.57
hotline 11 ( 0.00%) 1471 ( 0.00%) 133.73
other 2106324 ( 5.44%) 1950373826 ( 10.42%) 925.96
udp 1745317 ( 4.51%) 942990613 ( 5.04%) 540.30
dns 537502 ( 1.39%) 182147338 ( 0.97%) 338.88
realaud 13 ( 0.00%) 1123 ( 0.00%) 86.38
halflif 12 ( 0.00%) 963 ( 0.00%) 80.25
starcra 31 ( 0.00%) 3007 ( 0.00%) 97.00
everque 171 ( 0.00%) 27534 ( 0.00%) 161.02
unreal 1 ( 0.00%) 113 ( 0.00%) 113.00
quake 9 ( 0.00%) 1193 ( 0.00%) 132.56
cuseeme 1 ( 0.00%) 109 ( 0.00%) 109.00
other 1206989 ( 3.12%) 760114032 ( 4.06%) 629.76
icmp 17348627 ( 44.84%) 1106676347 ( 5.91%) 63.79
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 14709 ( 0.04%) 5283670 ( 0.03%) 359.21
ip6 586324 ( 1.52%) 420684331 ( 2.25%) 717.49
pim 78 ( 0.00%) 4680 ( 0.00%) 60.00
other 53269 ( 0.14%) 12924710 ( 0.07%) 242.63
frag 50244 ( 0.13%) 56746068 ( 0.30%) 1129.41
ip6 1878253 ( 4.85%) 1434738776 ( 7.67%) 763.87
tcp6 1647025 ( 4.26%) 1255189558 ( 6.71%) 762.10
http(s) 1225944 ( 3.17%) 1201996423 ( 6.42%) 980.47
http(c) 383822 ( 0.99%) 45146678 ( 0.24%) 117.62
smtp 58 ( 0.00%) 12244 ( 0.00%) 211.10
ftp 64 ( 0.00%) 5748 ( 0.00%) 89.81
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 271 ( 0.00%) 67731 ( 0.00%) 249.93
bgp 98 ( 0.00%) 24314 ( 0.00%) 248.10
other 36756 ( 0.10%) 7935412 ( 0.04%) 215.89
udp6 78672 ( 0.20%) 25517011 ( 0.14%) 324.35
dns 64227 ( 0.17%) 20060953 ( 0.11%) 312.34
quake 2 ( 0.00%) 204 ( 0.00%) 102.00
other 14443 ( 0.04%) 5455854 ( 0.03%) 377.75
icmp6 26586 ( 0.07%) 3246677 ( 0.02%) 122.12
ip6 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 125853 ( 0.33%) 150769666 ( 0.81%) 1197.98
tcpdump file: 201212251400.dump.gz (851.40 MB)