Traffic Trace Info
DumpFile: 201301061400.dump
FileSize: 1443.08MB
Id: 201301061400
StartTime: Sun Jan 6 14:00:00 2013
EndTime: Sun Jan 6 14:15:01 2013
TotalTime: 900.32 seconds
TotalCapSize: 1133.34MB CapLen: 96 bytes
# of packets: 20298315 (14672.18MB)
AvgRate: 136.70Mbps stddev:22.97M
IP flow (unique src/dst pair) Information
# of flows: 1696326 (avg. 11.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 3.5% 3.0% 3.0% 2.3% 2.3% 2.3% 1.5% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 1347464
Top 10 bandwidth usage (bytes/total in %):
19.9% 12.6% 6.6% 4.1% 3.9% 3.9% 3.4% 3.3% 3.3% 2.6%
# of IPv6 addresses: 10465
Top 10 bandwidth usage (bytes/total in %):
17.7% 7.5% 5.4% 5.2% 4.4% 3.7% 3.5% 3.3% 3.2% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201301061400.pktlen.png)
detailed numbers
[ 32- 63]: 4676303
[ 64- 127]: 4326745
[ 128- 255]: 609812
[ 256- 511]: 370557
[ 512- 1023]: 550718
[ 1024- 2047]: 9764180
Protocol Breakdown
![[protocol breakdown chart]](201301061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20298315 (100.00%) 15384897561 (100.00%) 757.94
ip 18743415 ( 92.34%) 14009857268 ( 91.06%) 747.45
tcp 14843051 ( 73.12%) 12393023888 ( 80.55%) 834.94
http(s) 6364732 ( 31.36%) 7587261935 ( 49.32%) 1192.08
http(c) 3605642 ( 17.76%) 1005172311 ( 6.53%) 278.78
squid 142641 ( 0.70%) 21863509 ( 0.14%) 153.28
smtp 49568 ( 0.24%) 12872116 ( 0.08%) 259.69
nntp 90 ( 0.00%) 5400 ( 0.00%) 60.00
ftp 68896 ( 0.34%) 33427788 ( 0.22%) 485.19
pop3 1968 ( 0.01%) 761494 ( 0.00%) 386.94
imap 4873 ( 0.02%) 3983445 ( 0.03%) 817.45
telnet 22562 ( 0.11%) 3148868 ( 0.02%) 139.57
ssh 21881 ( 0.11%) 4640635 ( 0.03%) 212.09
dns 3345 ( 0.02%) 2091224 ( 0.01%) 625.18
bgp 514 ( 0.00%) 102211 ( 0.00%) 198.85
napster 44 ( 0.00%) 3461 ( 0.00%) 78.66
realaud 9 ( 0.00%) 600 ( 0.00%) 66.67
rtsp 1 ( 0.00%) 62 ( 0.00%) 62.00
icecast 9016 ( 0.04%) 3342616 ( 0.02%) 370.74
hotline 13 ( 0.00%) 1212 ( 0.00%) 93.23
other 4547256 ( 22.40%) 3714345001 ( 24.14%) 816.83
udp 1816691 ( 8.95%) 1085937580 ( 7.06%) 597.76
dns 1037741 ( 5.11%) 648050524 ( 4.21%) 624.48
rip 15 ( 0.00%) 1050 ( 0.00%) 70.00
realaud 6 ( 0.00%) 447 ( 0.00%) 74.50
halflif 22 ( 0.00%) 2238 ( 0.00%) 101.73
starcra 21 ( 0.00%) 2000 ( 0.00%) 95.24
everque 325 ( 0.00%) 33489 ( 0.00%) 103.04
unreal 2 ( 0.00%) 393 ( 0.00%) 196.50
quake 26 ( 0.00%) 1946 ( 0.00%) 74.85
cuseeme 22 ( 0.00%) 1571 ( 0.00%) 71.41
other 778273 ( 3.83%) 437587989 ( 2.84%) 562.26
icmp 1566008 ( 7.71%) 151591227 ( 0.99%) 96.80
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 15047 ( 0.07%) 6810858 ( 0.04%) 452.64
ip6 455578 ( 2.24%) 358134047 ( 2.33%) 786.11
pim 109 ( 0.00%) 6540 ( 0.00%) 60.00
other 46746 ( 0.23%) 14333858 ( 0.09%) 306.63
frag 547625 ( 2.70%) 531156126 ( 3.45%) 969.93
ip6 1554900 ( 7.66%) 1375040293 ( 8.94%) 884.33
tcp6 850866 ( 4.19%) 656815439 ( 4.27%) 771.94
http(s) 489894 ( 2.41%) 485571487 ( 3.16%) 991.18
http(c) 112128 ( 0.55%) 15657886 ( 0.10%) 139.64
squid 50 ( 0.00%) 35309 ( 0.00%) 706.18
smtp 115 ( 0.00%) 35194 ( 0.00%) 306.03
ftp 66 ( 0.00%) 5876 ( 0.00%) 89.03
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 64 ( 0.00%) 16768 ( 0.00%) 262.00
bgp 95 ( 0.00%) 28159 ( 0.00%) 296.41
other 248442 ( 1.22%) 155463752 ( 1.01%) 625.75
udp6 163981 ( 0.81%) 106774752 ( 0.69%) 651.14
dns 42352 ( 0.21%) 13454367 ( 0.09%) 317.68
realaud 1 ( 0.00%) 106 ( 0.00%) 106.00
everque 2 ( 0.00%) 582 ( 0.00%) 291.00
other 121626 ( 0.60%) 93319697 ( 0.61%) 767.27
icmp6 36604 ( 0.18%) 3545582 ( 0.02%) 96.86
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 503333 ( 2.48%) 607888724 ( 3.95%) 1207.73
tcpdump file: 201301061400.dump.gz (451.52 MB)