Traffic Trace Info
DumpFile: 201212311400.dump
FileSize: 1933.35MB
Id: 201212311400
StartTime: Mon Dec 31 14:00:00 2012
EndTime: Mon Dec 31 14:15:00 2012
TotalTime: 899.70 seconds
TotalCapSize: 1480.16MB CapLen: 96 bytes
# of packets: 29699568 (11253.17MB)
AvgRate: 104.91Mbps stddev:19.12M
IP flow (unique src/dst pair) Information
# of flows: 10962762 (avg. 2.71 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.3% 5.5% 4.7% 3.0% 2.1% 2.0% 2.0% 1.8% 1.5% 1.4%
IP address Information
# of IPv4 addresses: 8544698
Top 10 bandwidth usage (bytes/total in %):
22.7% 10.0% 8.4% 7.2% 7.1% 6.3% 5.8% 5.4% 4.0% 3.3%
# of IPv6 addresses: 9603
Top 10 bandwidth usage (bytes/total in %):
14.0% 9.0% 8.9% 8.7% 5.7% 5.3% 4.7% 4.2% 3.5% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201212311400.pktlen.png)
detailed numbers
[ 32- 63]: 16591429
[ 64- 127]: 4814602
[ 128- 255]: 539158
[ 256- 511]: 440488
[ 512- 1023]: 631797
[ 1024- 2047]: 6682094
Protocol Breakdown
![[protocol breakdown chart]](201212311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29699568 (100.00%) 11799807885 (100.00%) 397.31
ip 28316212 ( 95.34%) 10585311399 ( 89.71%) 373.83
tcp 11537723 ( 38.85%) 8950988152 ( 75.86%) 775.80
http(s) 4946806 ( 16.66%) 5743480408 ( 48.67%) 1161.05
http(c) 3361012 ( 11.32%) 1052419319 ( 8.92%) 313.13
squid 15007 ( 0.05%) 6743434 ( 0.06%) 449.35
smtp 55372 ( 0.19%) 20583525 ( 0.17%) 371.73
nntp 96 ( 0.00%) 5760 ( 0.00%) 60.00
ftp 51179 ( 0.17%) 42738814 ( 0.36%) 835.08
pop3 1910 ( 0.01%) 375348 ( 0.00%) 196.52
imap 3209 ( 0.01%) 810046 ( 0.01%) 252.43
telnet 7762 ( 0.03%) 2039422 ( 0.02%) 262.74
ssh 29428 ( 0.10%) 4518747 ( 0.04%) 153.55
dns 3459 ( 0.01%) 2138775 ( 0.02%) 618.32
bgp 523 ( 0.00%) 113699 ( 0.00%) 217.40
napster 3 ( 0.00%) 184 ( 0.00%) 61.33
realaud 6 ( 0.00%) 1164 ( 0.00%) 194.00
rtsp 101 ( 0.00%) 6060 ( 0.00%) 60.00
icecast 181213 ( 0.61%) 160190421 ( 1.36%) 883.99
hotline 6 ( 0.00%) 645 ( 0.00%) 107.50
other 2880615 ( 9.70%) 1914821421 ( 16.23%) 664.73
udp 1133074 ( 3.82%) 539363373 ( 4.57%) 476.02
dns 604268 ( 2.03%) 352988017 ( 2.99%) 584.16
realaud 8 ( 0.00%) 637 ( 0.00%) 79.62
halflif 10 ( 0.00%) 1097 ( 0.00%) 109.70
starcra 52 ( 0.00%) 3615 ( 0.00%) 69.52
everque 55 ( 0.00%) 9132 ( 0.00%) 166.04
unreal 4 ( 0.00%) 546 ( 0.00%) 136.50
quake 9 ( 0.00%) 823 ( 0.00%) 91.44
cuseeme 2 ( 0.00%) 166 ( 0.00%) 83.00
other 528299 ( 1.78%) 185904986 ( 1.58%) 351.89
icmp 15253433 ( 51.36%) 969156196 ( 8.21%) 63.54
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 17246 ( 0.06%) 6325416 ( 0.05%) 366.78
ip6 319650 ( 1.08%) 100011316 ( 0.85%) 312.88
pim 76 ( 0.00%) 4560 ( 0.00%) 60.00
other 54826 ( 0.18%) 19443226 ( 0.16%) 354.64
frag 208378 ( 0.70%) 230819653 ( 1.96%) 1107.70
ip6 1383356 ( 4.66%) 1214496486 ( 10.29%) 877.93
tcp6 1024717 ( 3.45%) 921076640 ( 7.81%) 898.86
http(s) 609466 ( 2.05%) 631467399 ( 5.35%) 1036.10
http(c) 147414 ( 0.50%) 19913149 ( 0.17%) 135.08
smtp 33 ( 0.00%) 7768 ( 0.00%) 235.39
ftp 73058 ( 0.25%) 49938694 ( 0.42%) 683.55
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 192 ( 0.00%) 27576 ( 0.00%) 143.62
bgp 112 ( 0.00%) 42710 ( 0.00%) 381.34
other 194430 ( 0.65%) 219678336 ( 1.86%) 1129.86
udp6 257415 ( 0.87%) 215137953 ( 1.82%) 835.76
dns 36171 ( 0.12%) 12011236 ( 0.10%) 332.07
realaud 1 ( 0.00%) 99 ( 0.00%) 99.00
other 221243 ( 0.74%) 203126618 ( 1.72%) 918.12
icmp6 39552 ( 0.13%) 4287408 ( 0.04%) 108.40
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 61558 ( 0.21%) 73978993 ( 0.63%) 1201.78
tcpdump file: 201212311400.dump.gz (655.55 MB)