Traffic Trace Info
DumpFile: 201212291400.dump
FileSize: 2056.58MB
Id: 201212291400
StartTime: Sat Dec 29 14:00:01 2012
EndTime: Sat Dec 29 14:15:01 2012
TotalTime: 899.94 seconds
TotalCapSize: 1569.41MB CapLen: 96 bytes
# of packets: 31926705 (12658.18MB)
AvgRate: 118.01Mbps stddev:28.30M
IP flow (unique src/dst pair) Information
# of flows: 11038538 (avg. 2.89 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.5% 5.0% 2.4% 1.6% 1.4% 1.4% 1.3% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 8558072
Top 10 bandwidth usage (bytes/total in %):
11.6% 11.6% 11.5% 7.3% 6.6% 5.5% 5.2% 2.9% 2.9% 2.9%
# of IPv6 addresses: 11438
Top 10 bandwidth usage (bytes/total in %):
10.7% 10.2% 9.8% 8.5% 5.9% 5.1% 3.8% 3.3% 3.1% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201212291400.pktlen.png)
detailed numbers
[ 32- 63]: 17058891
[ 64- 127]: 5436703
[ 128- 255]: 735566
[ 256- 511]: 419213
[ 512- 1023]: 617720
[ 1024- 2047]: 7658612
Protocol Breakdown
![[protocol breakdown chart]](201212291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31926705 (100.00%) 13273068134 (100.00%) 415.74
ip 30828856 ( 96.56%) 12301323278 ( 92.68%) 399.02
tcp 12467105 ( 39.05%) 10182242136 ( 76.71%) 816.73
http(s) 6101197 ( 19.11%) 7373920669 ( 55.56%) 1208.60
http(c) 3880732 ( 12.16%) 1173939602 ( 8.84%) 302.50
squid 22719 ( 0.07%) 9574978 ( 0.07%) 421.45
smtp 91789 ( 0.29%) 20283977 ( 0.15%) 220.98
nntp 99 ( 0.00%) 5946 ( 0.00%) 60.06
ftp 106623 ( 0.33%) 48562408 ( 0.37%) 455.46
pop3 5378 ( 0.02%) 542618 ( 0.00%) 100.90
imap 1715 ( 0.01%) 439549 ( 0.00%) 256.30
telnet 95526 ( 0.30%) 8535310 ( 0.06%) 89.35
ssh 206756 ( 0.65%) 217253956 ( 1.64%) 1050.77
dns 1003 ( 0.00%) 200917 ( 0.00%) 200.32
bgp 1292 ( 0.00%) 144738 ( 0.00%) 112.03
napster 6 ( 0.00%) 737 ( 0.00%) 122.83
realaud 19 ( 0.00%) 1615 ( 0.00%) 85.00
icecast 208848 ( 0.65%) 188280432 ( 1.42%) 901.52
hotline 5 ( 0.00%) 702 ( 0.00%) 140.40
other 1743398 ( 5.46%) 1140553982 ( 8.59%) 654.21
udp 2612571 ( 8.18%) 978073727 ( 7.37%) 374.37
dns 697884 ( 2.19%) 385945115 ( 2.91%) 553.02
realaud 16 ( 0.00%) 1808 ( 0.00%) 113.00
halflif 10 ( 0.00%) 1348 ( 0.00%) 134.80
starcra 38 ( 0.00%) 3582 ( 0.00%) 94.26
everque 80 ( 0.00%) 10757 ( 0.00%) 134.46
unreal 22 ( 0.00%) 1575 ( 0.00%) 71.59
quake 17 ( 0.00%) 2566 ( 0.00%) 150.94
cuseeme 1 ( 0.00%) 90 ( 0.00%) 90.00
other 1912890 ( 5.99%) 591756466 ( 4.46%) 309.35
icmp 15435047 ( 48.35%) 1002750599 ( 7.55%) 64.97
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 21209 ( 0.07%) 7267458 ( 0.05%) 342.66
ip6 244897 ( 0.77%) 118405411 ( 0.89%) 483.49
pim 76 ( 0.00%) 4560 ( 0.00%) 60.00
other 47766 ( 0.15%) 12560117 ( 0.09%) 262.95
frag 207837 ( 0.65%) 228235985 ( 1.72%) 1098.15
ip6 1097849 ( 3.44%) 971744856 ( 7.32%) 885.14
tcp6 703808 ( 2.20%) 583498436 ( 4.40%) 829.06
http(s) 534825 ( 1.68%) 542734426 ( 4.09%) 1014.79
http(c) 127234 ( 0.40%) 16843298 ( 0.13%) 132.38
squid 19 ( 0.00%) 21281 ( 0.00%) 1120.05
smtp 101 ( 0.00%) 19279 ( 0.00%) 190.88
ftp 21350 ( 0.07%) 14387403 ( 0.11%) 673.88
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 307 ( 0.00%) 55121 ( 0.00%) 179.55
bgp 95 ( 0.00%) 28926 ( 0.00%) 304.48
other 19865 ( 0.06%) 9407694 ( 0.07%) 473.58
udp6 52808 ( 0.17%) 17987161 ( 0.14%) 340.61
dns 41626 ( 0.13%) 13393336 ( 0.10%) 321.75
realaud 2 ( 0.00%) 521 ( 0.00%) 260.50
everque 2 ( 0.00%) 551 ( 0.00%) 275.50
other 11178 ( 0.04%) 4592753 ( 0.03%) 410.87
icmp6 38278 ( 0.12%) 4076276 ( 0.03%) 106.49
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 302842 ( 0.95%) 366167609 ( 2.76%) 1209.10
tcpdump file: 201212291400.dump.gz (699.36 MB)