Traffic Trace Info
DumpFile: 201212261400.dump
FileSize: 3044.95MB
Id: 201212261400
StartTime: Wed Dec 26 14:00:01 2012
EndTime: Wed Dec 26 14:15:01 2012
TotalTime: 899.97 seconds
TotalCapSize: -1737.48MB CapLen: 96 bytes
# of packets: 44985265 (24381.23MB)
AvgRate: 227.29Mbps stddev:66.15M
IP flow (unique src/dst pair) Information
# of flows: 10957290 (avg. 4.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.2% 2.7% 2.7% 2.6% 2.5% 2.2% 1.8% 1.8% 1.7% 1.7%
IP address Information
# of IPv4 addresses: 8542694
Top 10 bandwidth usage (bytes/total in %):
9.1% 9.0% 8.8% 8.5% 6.6% 6.2% 4.3% 3.7% 3.7% 3.5%
# of IPv6 addresses: 9783
Top 10 bandwidth usage (bytes/total in %):
18.0% 12.7% 5.2% 3.6% 3.5% 2.3% 2.2% 2.0% 2.0% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201212261400.pktlen.png)
detailed numbers
[ 32- 63]: 19043707
[ 64- 127]: 7788898
[ 128- 255]: 709486
[ 256- 511]: 1107793
[ 512- 1023]: 942752
[ 1024- 2047]: 15392629
Protocol Breakdown
![[protocol breakdown chart]](201212261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 44985265 (100.00%) 25565568104 (100.00%) 568.31
ip 42867587 ( 95.29%) 23795655647 ( 93.08%) 555.10
tcp 24320146 ( 54.06%) 21178343615 ( 82.84%) 870.81
http(s) 10253456 ( 22.79%) 12703559465 ( 49.69%) 1238.95
http(c) 9601932 ( 21.34%) 3806970546 ( 14.89%) 396.48
squid 52511 ( 0.12%) 12863525 ( 0.05%) 244.97
smtp 90476 ( 0.20%) 31644046 ( 0.12%) 349.75
nntp 111 ( 0.00%) 6660 ( 0.00%) 60.00
ftp 37191 ( 0.08%) 26041732 ( 0.10%) 700.22
pop3 3099 ( 0.01%) 1310820 ( 0.01%) 422.98
imap 3079 ( 0.01%) 777016 ( 0.00%) 252.36
telnet 5061 ( 0.01%) 1855065 ( 0.01%) 366.54
ssh 147915 ( 0.33%) 18408352 ( 0.07%) 124.45
dns 3452 ( 0.01%) 2097785 ( 0.01%) 607.70
bgp 571 ( 0.00%) 136557 ( 0.00%) 239.15
napster 39 ( 0.00%) 4439 ( 0.00%) 113.82
realaud 32 ( 0.00%) 2379 ( 0.00%) 74.34
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 35327 ( 0.08%) 22707980 ( 0.09%) 642.79
hotline 35 ( 0.00%) 3607 ( 0.00%) 103.06
other 4085858 ( 9.08%) 4549953581 ( 17.80%) 1113.59
udp 2636298 ( 5.86%) 1181530758 ( 4.62%) 448.18
dns 1209123 ( 2.69%) 349065489 ( 1.37%) 288.69
rip 15 ( 0.00%) 1050 ( 0.00%) 70.00
realaud 27 ( 0.00%) 2165 ( 0.00%) 80.19
halflif 4 ( 0.00%) 311 ( 0.00%) 77.75
starcra 47 ( 0.00%) 8220 ( 0.00%) 174.89
everque 98 ( 0.00%) 11079 ( 0.00%) 113.05
unreal 29 ( 0.00%) 2369 ( 0.00%) 81.69
quake 54 ( 0.00%) 4771 ( 0.00%) 88.35
cuseeme 17 ( 0.00%) 1223 ( 0.00%) 71.94
other 1426399 ( 3.17%) 831844851 ( 3.25%) 583.18
icmp 15097283 ( 33.56%) 970316125 ( 3.80%) 64.27
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 11040 ( 0.02%) 4574672 ( 0.02%) 414.37
ip6 747029 ( 1.66%) 445872675 ( 1.74%) 596.86
pim 78 ( 0.00%) 4680 ( 0.00%) 60.00
other 55528 ( 0.12%) 14993852 ( 0.06%) 270.02
frag 92745 ( 0.21%) 103211784 ( 0.40%) 1112.86
ip6 2117678 ( 4.71%) 1769912457 ( 6.92%) 835.78
tcp6 1612941 ( 3.59%) 1240856410 ( 4.85%) 769.31
http(s) 1101865 ( 2.45%) 1109118214 ( 4.34%) 1006.58
http(c) 414711 ( 0.92%) 46824146 ( 0.18%) 112.91
smtp 100 ( 0.00%) 36029 ( 0.00%) 360.29
ftp 2066 ( 0.00%) 187456 ( 0.00%) 90.73
pop3 17 ( 0.00%) 3574 ( 0.00%) 210.24
ssh 443 ( 0.00%) 50179 ( 0.00%) 113.27
dns 245 ( 0.00%) 46537 ( 0.00%) 189.95
bgp 93 ( 0.00%) 26676 ( 0.00%) 286.84
other 93401 ( 0.21%) 84563599 ( 0.33%) 905.38
udp6 318565 ( 0.71%) 342746443 ( 1.34%) 1075.91
dns 64545 ( 0.14%) 19946432 ( 0.08%) 309.03
other 254020 ( 0.56%) 322800011 ( 1.26%) 1270.77
icmp6 34620 ( 0.08%) 3912580 ( 0.02%) 113.02
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 151438 ( 0.34%) 182381532 ( 0.71%) 1204.33
tcpdump file: 201212261400.dump.gz (990.42 MB)