Traffic Trace Info
DumpFile: 201212271400.dump
FileSize: 2754.53MB
Id: 201212271400
StartTime: Thu Dec 27 14:00:00 2012
EndTime: Thu Dec 27 14:15:00 2012
TotalTime: 899.84 seconds
TotalCapSize: -1967.56MB CapLen: 96 bytes
# of packets: 41030984 (23470.76MB)
AvgRate: 218.81Mbps stddev:40.11M
IP flow (unique src/dst pair) Information
# of flows: 11095900 (avg. 3.70 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.3% 8.5% 4.5% 2.1% 2.0% 1.9% 1.8% 1.6% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 8599173
Top 10 bandwidth usage (bytes/total in %):
19.9% 10.7% 10.0% 9.4% 7.5% 5.8% 5.0% 4.0% 2.6% 2.6%
# of IPv6 addresses: 13407
Top 10 bandwidth usage (bytes/total in %):
18.7% 18.3% 5.4% 4.5% 4.4% 3.4% 3.4% 2.4% 2.4% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201212271400.pktlen.png)
detailed numbers
[ 32- 63]: 16932619
[ 64- 127]: 6678027
[ 128- 255]: 707715
[ 256- 511]: 822105
[ 512- 1023]: 931107
[ 1024- 2047]: 14959411
Protocol Breakdown
![[protocol breakdown chart]](201212271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41030984 (100.00%) 24610875338 (100.00%) 599.81
ip 38445395 ( 93.70%) 22227752499 ( 90.32%) 578.16
tcp 19188917 ( 46.77%) 18534573538 ( 75.31%) 965.90
http(s) 12118692 ( 29.54%) 15756200978 ( 64.02%) 1300.16
http(c) 5246405 ( 12.79%) 1637874121 ( 6.66%) 312.19
squid 23329 ( 0.06%) 14213488 ( 0.06%) 609.26
smtp 63173 ( 0.15%) 20534137 ( 0.08%) 325.05
nntp 104 ( 0.00%) 6240 ( 0.00%) 60.00
ftp 22404 ( 0.05%) 8562935 ( 0.03%) 382.21
pop3 2664 ( 0.01%) 754915 ( 0.00%) 283.38
imap 2941 ( 0.01%) 804075 ( 0.00%) 273.40
telnet 5038 ( 0.01%) 1857574 ( 0.01%) 368.71
ssh 41254 ( 0.10%) 15907489 ( 0.06%) 385.60
dns 3269 ( 0.01%) 1893221 ( 0.01%) 579.14
bgp 520 ( 0.00%) 96784 ( 0.00%) 186.12
napster 30 ( 0.00%) 2271 ( 0.00%) 75.70
realaud 12 ( 0.00%) 764 ( 0.00%) 63.67
rtsp 263 ( 0.00%) 175874 ( 0.00%) 668.72
icecast 187929 ( 0.46%) 161444553 ( 0.66%) 859.07
hotline 9 ( 0.00%) 669 ( 0.00%) 74.33
other 1470881 ( 3.58%) 914243450 ( 3.71%) 621.56
udp 3168786 ( 7.72%) 2319986408 ( 9.43%) 732.14
dns 872590 ( 2.13%) 464541287 ( 1.89%) 532.37
realaud 8 ( 0.00%) 1610 ( 0.00%) 201.25
halflif 20 ( 0.00%) 1625 ( 0.00%) 81.25
starcra 33 ( 0.00%) 4142 ( 0.00%) 125.52
everque 233 ( 0.00%) 32799 ( 0.00%) 140.77
unreal 7 ( 0.00%) 855 ( 0.00%) 122.14
quake 25 ( 0.00%) 2560 ( 0.00%) 102.40
other 2295184 ( 5.59%) 1854689602 ( 7.54%) 808.08
icmp 15223509 ( 37.10%) 981029805 ( 3.99%) 64.44
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 63834 ( 0.16%) 18913292 ( 0.08%) 296.29
ip6 750903 ( 1.83%) 360408212 ( 1.46%) 479.97
pim 83 ( 0.00%) 4980 ( 0.00%) 60.00
other 49179 ( 0.12%) 12817104 ( 0.05%) 260.62
frag 300603 ( 0.73%) 323377026 ( 1.31%) 1075.76
ip6 2585589 ( 6.30%) 2383122839 ( 9.68%) 921.69
tcp6 2071525 ( 5.05%) 1929560859 ( 7.84%) 931.47
http(s) 1559179 ( 3.80%) 1722368834 ( 7.00%) 1104.66
http(c) 328066 ( 0.80%) 39876013 ( 0.16%) 121.55
smtp 67 ( 0.00%) 17645 ( 0.00%) 263.36
ftp 32648 ( 0.08%) 21108000 ( 0.09%) 646.53
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 352 ( 0.00%) 68297 ( 0.00%) 194.03
bgp 99 ( 0.00%) 33592 ( 0.00%) 339.31
napster 2 ( 0.00%) 148 ( 0.00%) 74.00
other 151100 ( 0.37%) 146087322 ( 0.59%) 966.83
udp6 211895 ( 0.52%) 142988323 ( 0.58%) 674.81
dns 66081 ( 0.16%) 20145588 ( 0.08%) 304.86
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
other 145813 ( 0.36%) 122842628 ( 0.50%) 842.47
icmp6 46871 ( 0.11%) 4638511 ( 0.02%) 98.96
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 255184 ( 0.62%) 305919654 ( 1.24%) 1198.82
tcpdump file: 201212271400.dump.gz (906.88 MB)