Traffic Trace Info
DumpFile: 201301041400.dump
FileSize: 1670.97MB
Id: 201301041400
StartTime: Fri Jan 4 14:00:00 2013
EndTime: Fri Jan 4 14:15:00 2013
TotalTime: 900.14 seconds
TotalCapSize: 1307.71MB CapLen: 96 bytes
# of packets: 23805630 (17883.41MB)
AvgRate: 166.65Mbps stddev:29.70M
IP flow (unique src/dst pair) Information
# of flows: 1760846 (avg. 13.52 pkts/flow)
Top 10 big flow size (bytes/total in %):
19.4% 4.9% 3.0% 2.2% 2.0% 1.7% 1.3% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 1353146
Top 10 bandwidth usage (bytes/total in %):
30.7% 21.0% 9.1% 8.0% 6.8% 5.3% 4.4% 3.1% 2.3% 2.2%
# of IPv6 addresses: 12562
Top 10 bandwidth usage (bytes/total in %):
9.8% 9.8% 7.8% 6.1% 6.1% 5.5% 5.4% 4.8% 4.8% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201301041400.pktlen.png)
detailed numbers
[ 32- 63]: 5256212
[ 64- 127]: 4808079
[ 128- 255]: 641502
[ 256- 511]: 636755
[ 512- 1023]: 812610
[ 1024- 2047]: 11650472
Protocol Breakdown
![[protocol breakdown chart]](201301041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23805630 (100.00%) 18752119641 (100.00%) 787.72
ip 22541303 ( 94.69%) 17710337846 ( 94.44%) 785.68
tcp 17254194 ( 72.48%) 15903004277 ( 84.81%) 921.69
http(s) 9803821 ( 41.18%) 13159935221 ( 70.18%) 1342.33
http(c) 4901745 ( 20.59%) 841267668 ( 4.49%) 171.63
squid 40236 ( 0.17%) 29405762 ( 0.16%) 730.83
smtp 58899 ( 0.25%) 11731243 ( 0.06%) 199.18
nntp 108 ( 0.00%) 6480 ( 0.00%) 60.00
ftp 74727 ( 0.31%) 64052053 ( 0.34%) 857.15
pop3 2402 ( 0.01%) 305960 ( 0.00%) 127.38
imap 2244 ( 0.01%) 339415 ( 0.00%) 151.25
telnet 20426 ( 0.09%) 2978162 ( 0.02%) 145.80
ssh 102547 ( 0.43%) 72953131 ( 0.39%) 711.41
dns 4844 ( 0.02%) 2372673 ( 0.01%) 489.82
bgp 486 ( 0.00%) 83180 ( 0.00%) 171.15
napster 3 ( 0.00%) 194 ( 0.00%) 64.67
rtsp 5 ( 0.00%) 300 ( 0.00%) 60.00
icecast 204796 ( 0.86%) 171184552 ( 0.91%) 835.88
hotline 7 ( 0.00%) 1178 ( 0.00%) 168.29
other 2036898 ( 8.56%) 1546387105 ( 8.25%) 759.19
udp 3131785 ( 13.16%) 1389966271 ( 7.41%) 443.83
dns 1372018 ( 5.76%) 588211378 ( 3.14%) 428.72
realaud 19 ( 0.00%) 1303 ( 0.00%) 68.58
halflif 58 ( 0.00%) 4087 ( 0.00%) 70.47
starcra 17 ( 0.00%) 1245 ( 0.00%) 73.24
everque 16591 ( 0.07%) 13591990 ( 0.07%) 819.24
unreal 17 ( 0.00%) 1391 ( 0.00%) 81.82
quake 47 ( 0.00%) 3430 ( 0.00%) 72.98
cuseeme 10 ( 0.00%) 727 ( 0.00%) 72.70
other 1731471 ( 7.27%) 787256575 ( 4.20%) 454.67
icmp 1671995 ( 7.02%) 158861401 ( 0.85%) 95.01
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 70427 ( 0.30%) 43661402 ( 0.23%) 619.95
ip6 362508 ( 1.52%) 200549775 ( 1.07%) 553.23
pim 83 ( 0.00%) 4980 ( 0.00%) 60.00
other 50126 ( 0.21%) 14270470 ( 0.08%) 284.69
frag 365740 ( 1.54%) 369698643 ( 1.97%) 1010.82
ip6 1264327 ( 5.31%) 1041781795 ( 5.56%) 823.98
tcp6 1022832 ( 4.30%) 862031160 ( 4.60%) 842.79
http(s) 548814 ( 2.31%) 562766239 ( 3.00%) 1025.42
http(c) 202010 ( 0.85%) 23614187 ( 0.13%) 116.90
smtp 276 ( 0.00%) 135329 ( 0.00%) 490.32
ftp 105 ( 0.00%) 9553 ( 0.00%) 90.98
pop3 38 ( 0.00%) 17127 ( 0.00%) 450.71
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 191 ( 0.00%) 74204 ( 0.00%) 388.50
bgp 99 ( 0.00%) 29843 ( 0.00%) 301.44
icecast 14 ( 0.00%) 1922 ( 0.00%) 137.29
other 271273 ( 1.14%) 275381748 ( 1.47%) 1015.15
udp6 141633 ( 0.59%) 104234244 ( 0.56%) 735.95
dns 49604 ( 0.21%) 15604359 ( 0.08%) 314.58
unreal 1 ( 0.00%) 107 ( 0.00%) 107.00
other 92028 ( 0.39%) 88629778 ( 0.47%) 963.07
icmp6 40206 ( 0.17%) 4059993 ( 0.02%) 100.98
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 59541 ( 0.25%) 71440738 ( 0.38%) 1199.86
tcpdump file: 201301041400.dump.gz (516.92 MB)