Traffic Trace Info
DumpFile: 201212281400.dump
FileSize: 2371.81MB
Id: 201212281400
StartTime: Fri Dec 28 14:00:00 2012
EndTime: Fri Dec 28 14:15:00 2012
TotalTime: 899.95 seconds
TotalCapSize: 1823.33MB CapLen: 96 bytes
# of packets: 35944652 (17941.51MB)
AvgRate: 167.25Mbps stddev:43.18M
IP flow (unique src/dst pair) Information
# of flows: 11147524 (avg. 3.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
20.1% 3.4% 1.9% 1.9% 1.8% 1.6% 1.2% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 8628647
Top 10 bandwidth usage (bytes/total in %):
23.6% 21.8% 11.4% 9.5% 5.1% 5.0% 4.4% 3.7% 2.1% 2.1%
# of IPv6 addresses: 12506
Top 10 bandwidth usage (bytes/total in %):
17.6% 12.4% 8.9% 5.9% 5.4% 5.0% 4.7% 3.7% 3.7% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201212281400.pktlen.png)
detailed numbers
[ 32- 63]: 17100803
[ 64- 127]: 5763982
[ 128- 255]: 552627
[ 256- 511]: 563374
[ 512- 1023]: 760301
[ 1024- 2047]: 11203565
Protocol Breakdown
![[protocol breakdown chart]](201212281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35944652 (100.00%) 18813038285 (100.00%) 523.39
ip 34555071 ( 96.13%) 17605942394 ( 93.58%) 509.50
tcp 16618959 ( 46.23%) 15500795223 ( 82.39%) 932.72
http(s) 9698284 ( 26.98%) 12347958819 ( 65.64%) 1273.21
http(c) 4326468 ( 12.04%) 1727718897 ( 9.18%) 399.34
squid 80106 ( 0.22%) 82937019 ( 0.44%) 1035.34
smtp 68664 ( 0.19%) 20233511 ( 0.11%) 294.67
nntp 72 ( 0.00%) 4320 ( 0.00%) 60.00
ftp 48429 ( 0.13%) 38951300 ( 0.21%) 804.30
pop3 12450 ( 0.03%) 13484605 ( 0.07%) 1083.10
imap 196621 ( 0.55%) 12932872 ( 0.07%) 65.78
telnet 5214 ( 0.01%) 1870933 ( 0.01%) 358.83
ssh 28821 ( 0.08%) 5382376 ( 0.03%) 186.75
dns 1112 ( 0.00%) 206008 ( 0.00%) 185.26
bgp 504 ( 0.00%) 96028 ( 0.00%) 190.53
napster 7 ( 0.00%) 426 ( 0.00%) 60.86
realaud 9 ( 0.00%) 590 ( 0.00%) 65.56
icecast 84493 ( 0.24%) 74473999 ( 0.40%) 881.42
hotline 18 ( 0.00%) 1344 ( 0.00%) 74.67
other 2067687 ( 5.75%) 1174542176 ( 6.24%) 568.05
udp 2221816 ( 6.18%) 940865151 ( 5.00%) 423.47
dns 817478 ( 2.27%) 447402606 ( 2.38%) 547.30
realaud 51 ( 0.00%) 3753 ( 0.00%) 73.59
halflif 25 ( 0.00%) 2954 ( 0.00%) 118.16
starcra 8 ( 0.00%) 610 ( 0.00%) 76.25
everque 224 ( 0.00%) 31206 ( 0.00%) 139.31
unreal 11 ( 0.00%) 2170 ( 0.00%) 197.27
quake 11 ( 0.00%) 1393 ( 0.00%) 126.64
cuseeme 2 ( 0.00%) 186 ( 0.00%) 93.00
other 1403686 ( 3.91%) 493052095 ( 2.62%) 351.26
icmp 15319825 ( 42.62%) 993024901 ( 5.28%) 64.82
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 14429 ( 0.04%) 5809510 ( 0.03%) 402.63
ip6 325958 ( 0.91%) 151833432 ( 0.81%) 465.81
pim 81 ( 0.00%) 4860 ( 0.00%) 60.00
other 53818 ( 0.15%) 13590047 ( 0.07%) 252.52
frag 236138 ( 0.66%) 259988811 ( 1.38%) 1101.00
ip6 1389581 ( 3.87%) 1207095891 ( 6.42%) 868.68
tcp6 1082277 ( 3.01%) 955613315 ( 5.08%) 882.97
http(s) 665272 ( 1.85%) 690213563 ( 3.67%) 1037.49
http(c) 156002 ( 0.43%) 19381614 ( 0.10%) 124.24
squid 2 ( 0.00%) 148 ( 0.00%) 74.00
smtp 38 ( 0.00%) 4319 ( 0.00%) 113.66
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 130 ( 0.00%) 41104 ( 0.00%) 316.18
bgp 93 ( 0.00%) 28711 ( 0.00%) 308.72
other 260728 ( 0.73%) 245942848 ( 1.31%) 943.29
udp6 125225 ( 0.35%) 74662379 ( 0.40%) 596.23
dns 52468 ( 0.15%) 16722254 ( 0.09%) 318.71
realaud 2 ( 0.00%) 214 ( 0.00%) 107.00
starcra 1 ( 0.00%) 82 ( 0.00%) 82.00
everque 2 ( 0.00%) 213 ( 0.00%) 106.50
other 72752 ( 0.20%) 57939616 ( 0.31%) 796.40
icmp6 38503 ( 0.11%) 4018504 ( 0.02%) 104.37
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 143461 ( 0.40%) 172786033 ( 0.92%) 1204.41
tcpdump file: 201212281400.dump.gz (791.78 MB)