Traffic Trace Info
DumpFile: 201301051400.dump
FileSize: 1396.64MB
Id: 201301051400
StartTime: Sat Jan 5 14:00:00 2013
EndTime: Sat Jan 5 14:15:00 2013
TotalTime: 900.14 seconds
TotalCapSize: 1099.77MB CapLen: 96 bytes
# of packets: 19455386 (13940.81MB)
AvgRate: 129.94Mbps stddev:23.81M
IP flow (unique src/dst pair) Information
# of flows: 1840638 (avg. 10.57 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 4.2% 2.4% 2.0% 1.9% 1.7% 1.6% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 1378417
Top 10 bandwidth usage (bytes/total in %):
11.6% 10.7% 8.2% 6.9% 5.8% 4.6% 4.6% 2.8% 2.7% 2.4%
# of IPv6 addresses: 9376
Top 10 bandwidth usage (bytes/total in %):
11.5% 10.0% 8.2% 7.3% 7.0% 5.0% 5.0% 4.9% 4.9% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201301051400.pktlen.png)
detailed numbers
[ 32- 63]: 3946798
[ 64- 127]: 4580092
[ 128- 255]: 695718
[ 256- 511]: 610133
[ 512- 1023]: 555604
[ 1024- 2047]: 9067041
Protocol Breakdown
![[protocol breakdown chart]](201301051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19455386 (100.00%) 14617999756 (100.00%) 751.36
ip 18036314 ( 92.71%) 13381496707 ( 91.54%) 741.92
tcp 13545322 ( 69.62%) 12027588917 ( 82.28%) 887.95
http(s) 7153001 ( 36.77%) 9105516361 ( 62.29%) 1272.96
http(c) 3501535 ( 18.00%) 932608471 ( 6.38%) 266.34
squid 166979 ( 0.86%) 99624322 ( 0.68%) 596.63
smtp 56551 ( 0.29%) 7737317 ( 0.05%) 136.82
nntp 89 ( 0.00%) 5340 ( 0.00%) 60.00
ftp 76963 ( 0.40%) 70134430 ( 0.48%) 911.27
pop3 2516 ( 0.01%) 1328473 ( 0.01%) 528.01
imap 2827 ( 0.01%) 645535 ( 0.00%) 228.35
telnet 4355 ( 0.02%) 1800746 ( 0.01%) 413.49
ssh 63775 ( 0.33%) 19525322 ( 0.13%) 306.16
dns 3326 ( 0.02%) 2276691 ( 0.02%) 684.51
bgp 530 ( 0.00%) 101509 ( 0.00%) 191.53
napster 9 ( 0.00%) 546 ( 0.00%) 60.67
realaud 11 ( 0.00%) 1086 ( 0.00%) 98.73
rtsp 127 ( 0.00%) 19874 ( 0.00%) 156.49
icecast 112516 ( 0.58%) 86152384 ( 0.59%) 765.69
hotline 3 ( 0.00%) 182 ( 0.00%) 60.67
other 2400208 ( 12.34%) 1700110268 ( 11.63%) 708.32
udp 2317417 ( 11.91%) 878310713 ( 6.01%) 379.00
dns 1026868 ( 5.28%) 550487688 ( 3.77%) 536.08
realaud 923 ( 0.00%) 55624 ( 0.00%) 60.26
halflif 38 ( 0.00%) 3158 ( 0.00%) 83.11
starcra 35 ( 0.00%) 4077 ( 0.00%) 116.49
everque 73 ( 0.00%) 9052 ( 0.00%) 124.00
unreal 18 ( 0.00%) 3271 ( 0.00%) 181.72
quake 1 ( 0.00%) 94 ( 0.00%) 94.00
cuseeme 1 ( 0.00%) 89 ( 0.00%) 89.00
other 1289178 ( 6.63%) 327514526 ( 2.24%) 254.05
icmp 1673246 ( 8.60%) 161425146 ( 1.10%) 96.47
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 14858 ( 0.08%) 6791636 ( 0.05%) 457.10
ip6 433617 ( 2.23%) 291811159 ( 2.00%) 672.97
pim 78 ( 0.00%) 4680 ( 0.00%) 60.00
other 51591 ( 0.27%) 15545186 ( 0.11%) 301.32
frag 438342 ( 2.25%) 400243784 ( 2.74%) 913.09
ip6 1419072 ( 7.29%) 1236503049 ( 8.46%) 871.35
tcp6 1102373 ( 5.67%) 1010407246 ( 6.91%) 916.57
http(s) 689292 ( 3.54%) 741751312 ( 5.07%) 1076.11
http(c) 137859 ( 0.71%) 19246813 ( 0.13%) 139.61
smtp 36 ( 0.00%) 13856 ( 0.00%) 384.89
ftp 66 ( 0.00%) 5876 ( 0.00%) 89.03
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 239 ( 0.00%) 124387 ( 0.00%) 520.45
bgp 92 ( 0.00%) 24400 ( 0.00%) 265.22
other 274777 ( 1.41%) 249239594 ( 1.71%) 907.06
udp6 162213 ( 0.83%) 74875314 ( 0.51%) 461.59
dns 44350 ( 0.23%) 13707309 ( 0.09%) 309.07
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
other 117861 ( 0.61%) 61167792 ( 0.42%) 518.98
icmp6 31756 ( 0.16%) 3414434 ( 0.02%) 107.52
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 122615 ( 0.63%) 147790395 ( 1.01%) 1205.32
tcpdump file: 201301051400.dump.gz (441.15 MB)