Traffic Trace Info
DumpFile: 201212301400.dump
FileSize: 2181.96MB
Id: 201212301400
StartTime: Sun Dec 30 14:00:01 2012
EndTime: Sun Dec 30 14:15:00 2012
TotalTime: 899.66 seconds
TotalCapSize: 1673.53MB CapLen: 96 bytes
# of packets: 33319699 (14970.27MB)
AvgRate: 139.61Mbps stddev:27.75M
IP flow (unique src/dst pair) Information
# of flows: 10880557 (avg. 3.06 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 4.1% 3.8% 2.8% 1.9% 1.7% 1.6% 1.4% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 8493223
Top 10 bandwidth usage (bytes/total in %):
14.5% 13.6% 11.6% 7.9% 6.0% 5.5% 5.4% 5.4% 4.3% 4.1%
# of IPv6 addresses: 11099
Top 10 bandwidth usage (bytes/total in %):
6.6% 6.4% 6.4% 4.0% 3.6% 3.5% 3.4% 3.4% 3.2% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201212301400.pktlen.png)
detailed numbers
[ 32- 63]: 16948380
[ 64- 127]: 5329502
[ 128- 255]: 605161
[ 256- 511]: 495236
[ 512- 1023]: 554585
[ 1024- 2047]: 9386835
Protocol Breakdown
![[protocol breakdown chart]](201212301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33319699 (100.00%) 15697463453 (100.00%) 471.12
ip 32505296 ( 97.56%) 15090313720 ( 96.13%) 464.24
tcp 15022607 ( 45.09%) 13036490609 ( 83.05%) 867.79
http(s) 6299440 ( 18.91%) 7787472500 ( 49.61%) 1236.22
http(c) 3893136 ( 11.68%) 1507951483 ( 9.61%) 387.34
squid 33035 ( 0.10%) 23865017 ( 0.15%) 722.42
smtp 57285 ( 0.17%) 11223806 ( 0.07%) 195.93
nntp 85 ( 0.00%) 5100 ( 0.00%) 60.00
ftp 41153 ( 0.12%) 32986444 ( 0.21%) 801.56
pop3 1266 ( 0.00%) 204637 ( 0.00%) 161.64
imap 2076 ( 0.01%) 213265 ( 0.00%) 102.73
telnet 52586 ( 0.16%) 5310630 ( 0.03%) 100.99
ssh 157853 ( 0.47%) 46811818 ( 0.30%) 296.55
dns 4695 ( 0.01%) 3561173 ( 0.02%) 758.50
bgp 479 ( 0.00%) 77300 ( 0.00%) 161.38
napster 33 ( 0.00%) 2936 ( 0.00%) 88.97
realaud 17 ( 0.00%) 1862 ( 0.00%) 109.53
icecast 6655 ( 0.02%) 4948536 ( 0.03%) 743.58
hotline 1 ( 0.00%) 66 ( 0.00%) 66.00
other 4472795 ( 13.42%) 3611853016 ( 23.01%) 807.52
udp 1603718 ( 4.81%) 749028918 ( 4.77%) 467.06
dns 497475 ( 1.49%) 240610888 ( 1.53%) 483.66
realaud 3 ( 0.00%) 290 ( 0.00%) 96.67
halflif 32 ( 0.00%) 2326 ( 0.00%) 72.69
starcra 16 ( 0.00%) 1999 ( 0.00%) 124.94
everque 61 ( 0.00%) 7736 ( 0.00%) 126.82
unreal 3 ( 0.00%) 472 ( 0.00%) 157.33
quake 24 ( 0.00%) 2280 ( 0.00%) 95.00
cuseeme 2 ( 0.00%) 198 ( 0.00%) 99.00
other 1105874 ( 3.32%) 508141669 ( 3.24%) 459.49
icmp 15455737 ( 46.39%) 1008919663 ( 6.43%) 65.28
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 20080 ( 0.06%) 7020160 ( 0.04%) 349.61
ip6 352494 ( 1.06%) 275513728 ( 1.76%) 781.61
pim 81 ( 0.00%) 4860 ( 0.00%) 60.00
other 50394 ( 0.15%) 13316512 ( 0.08%) 264.25
frag 112055 ( 0.34%) 124159384 ( 0.79%) 1108.02
ip6 814403 ( 2.44%) 607149733 ( 3.87%) 745.52
tcp6 610524 ( 1.83%) 446640497 ( 2.85%) 731.57
http(s) 396488 ( 1.19%) 395616535 ( 2.52%) 997.80
http(c) 140580 ( 0.42%) 16521847 ( 0.11%) 117.53
smtp 710 ( 0.00%) 249677 ( 0.00%) 351.66
ftp 66 ( 0.00%) 5876 ( 0.00%) 89.03
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 339 ( 0.00%) 54702 ( 0.00%) 161.36
bgp 110 ( 0.00%) 42109 ( 0.00%) 382.81
other 72219 ( 0.22%) 34148743 ( 0.22%) 472.85
udp6 61207 ( 0.18%) 31660895 ( 0.20%) 517.28
dns 36813 ( 0.11%) 12046764 ( 0.08%) 327.24
other 24394 ( 0.07%) 19614131 ( 0.12%) 804.06
icmp6 38092 ( 0.11%) 3977637 ( 0.03%) 104.42
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 104468 ( 0.31%) 124855448 ( 0.80%) 1195.15
tcpdump file: 201212301400.dump.gz (728.80 MB)