Traffic Trace Info
DumpFile: 201301031400.dump
FileSize: 1407.25MB
Id: 201301031400
StartTime: Thu Jan 3 14:00:01 2013
EndTime: Thu Jan 3 14:15:00 2013
TotalTime: 899.52 seconds
TotalCapSize: 1105.86MB CapLen: 96 bytes
# of packets: 19751701 (14557.26MB)
AvgRate: 135.78Mbps stddev:26.48M
IP flow (unique src/dst pair) Information
# of flows: 1704215 (avg. 11.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.4% 7.2% 2.6% 2.4% 2.4% 2.2% 1.9% 1.8% 1.7% 1.5%
IP address Information
# of IPv4 addresses: 1345292
Top 10 bandwidth usage (bytes/total in %):
24.8% 12.7% 8.1% 7.9% 7.7% 4.9% 3.2% 3.2% 2.7% 2.7%
# of IPv6 addresses: 12097
Top 10 bandwidth usage (bytes/total in %):
29.8% 29.6% 4.0% 4.0% 3.5% 3.4% 3.2% 2.8% 2.6% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201301031400.pktlen.png)
detailed numbers
[ 32- 63]: 3471649
[ 64- 127]: 4896511
[ 128- 255]: 536600
[ 256- 511]: 527940
[ 512- 1023]: 998704
[ 1024- 2047]: 9320297
Protocol Breakdown
![[protocol breakdown chart]](201301031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19751701 (100.00%) 15264396203 (100.00%) 772.81
ip 18270057 ( 92.50%) 13901739990 ( 91.07%) 760.90
tcp 12711854 ( 64.36%) 11142108543 ( 72.99%) 876.51
http(s) 6645574 ( 33.65%) 8635000847 ( 56.57%) 1299.36
http(c) 3435256 ( 17.39%) 811297139 ( 5.31%) 236.17
squid 53930 ( 0.27%) 49143980 ( 0.32%) 911.25
smtp 75024 ( 0.38%) 13849074 ( 0.09%) 184.60
nntp 92 ( 0.00%) 5520 ( 0.00%) 60.00
ftp 84515 ( 0.43%) 74089836 ( 0.49%) 876.65
pop3 4056 ( 0.02%) 3212420 ( 0.02%) 792.02
imap 2103 ( 0.01%) 338069 ( 0.00%) 160.76
telnet 4413 ( 0.02%) 1811807 ( 0.01%) 410.56
ssh 84875 ( 0.43%) 12185138 ( 0.08%) 143.57
dns 1035 ( 0.01%) 203687 ( 0.00%) 196.80
bgp 523 ( 0.00%) 108120 ( 0.00%) 206.73
napster 31 ( 0.00%) 3790 ( 0.00%) 122.26
realaud 17 ( 0.00%) 1966 ( 0.00%) 115.65
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 219820 ( 1.11%) 180703636 ( 1.18%) 822.05
hotline 15 ( 0.00%) 2049 ( 0.00%) 136.60
other 2100558 ( 10.63%) 1360150445 ( 8.91%) 647.52
udp 3205471 ( 16.23%) 2198040104 ( 14.40%) 685.72
dns 1016033 ( 5.14%) 725930388 ( 4.76%) 714.48
realaud 29 ( 0.00%) 2248 ( 0.00%) 77.52
halflif 14 ( 0.00%) 1324 ( 0.00%) 94.57
starcra 14 ( 0.00%) 2079 ( 0.00%) 148.50
everque 272 ( 0.00%) 55899 ( 0.00%) 205.51
unreal 13 ( 0.00%) 2480 ( 0.00%) 190.77
quake 7 ( 0.00%) 719 ( 0.00%) 102.71
other 2188542 ( 11.08%) 1471755816 ( 9.64%) 672.48
icmp 1650857 ( 8.36%) 144354446 ( 0.95%) 87.44
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 40777 ( 0.21%) 21922262 ( 0.14%) 537.61
ip6 611431 ( 3.10%) 381204553 ( 2.50%) 623.46
pim 78 ( 0.00%) 4680 ( 0.00%) 60.00
other 49405 ( 0.25%) 14086242 ( 0.09%) 285.12
frag 547621 ( 2.77%) 598464083 ( 3.92%) 1092.84
ip6 1481644 ( 7.50%) 1362656213 ( 8.93%) 919.69
tcp6 1068708 ( 5.41%) 1040376746 ( 6.82%) 973.49
http(s) 604871 ( 3.06%) 602586876 ( 3.95%) 996.22
http(c) 169657 ( 0.86%) 22807380 ( 0.15%) 134.43
smtp 801 ( 0.00%) 259383 ( 0.00%) 323.82
ftp 15 ( 0.00%) 1410 ( 0.00%) 94.00
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 248 ( 0.00%) 59758 ( 0.00%) 240.96
bgp 111 ( 0.00%) 42424 ( 0.00%) 382.20
icecast 2 ( 0.00%) 148 ( 0.00%) 74.00
other 292991 ( 1.48%) 414618359 ( 2.72%) 1415.12
udp6 173445 ( 0.88%) 85095572 ( 0.56%) 490.62
dns 37512 ( 0.19%) 12277884 ( 0.08%) 327.31
other 135933 ( 0.69%) 72817688 ( 0.48%) 535.69
icmp6 44699 ( 0.23%) 4438584 ( 0.03%) 99.30
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 194678 ( 0.99%) 232729819 ( 1.52%) 1195.46
tcpdump file: 201301031400.dump.gz (444.76 MB)