Traffic Trace Info
DumpFile: 201301081400.dump
FileSize: 2546.66MB
Id: 201301081400
StartTime: Tue Jan 8 14:00:01 2013
EndTime: Tue Jan 8 14:15:01 2013
TotalTime: 900.04 seconds
TotalCapSize: 2014.62MB CapLen: 96 bytes
# of packets: 34867195 (26859.05MB)
AvgRate: 250.35Mbps stddev:38.75M
IP flow (unique src/dst pair) Information
# of flows: 1835940 (avg. 18.99 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.2% 3.0% 2.3% 2.2% 2.1% 2.0% 1.8% 1.5% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 1384142
Top 10 bandwidth usage (bytes/total in %):
15.8% 11.2% 9.8% 9.7% 6.9% 3.4% 3.2% 2.5% 2.5% 2.4%
# of IPv6 addresses: 13720
Top 10 bandwidth usage (bytes/total in %):
10.7% 4.7% 4.5% 3.4% 3.1% 2.7% 2.6% 2.5% 2.2% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201301081400.pktlen.png)
detailed numbers
[ 32- 63]: 6372712
[ 64- 127]: 8010680
[ 128- 255]: 1002435
[ 256- 511]: 890407
[ 512- 1023]: 984740
[ 1024- 2047]: 17606221
Protocol Breakdown
![[protocol breakdown chart]](201301081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34867195 (100.00%) 28163750788 (100.00%) 807.74
ip 32442156 ( 93.04%) 26221314862 ( 93.10%) 808.25
tcp 27832069 ( 79.82%) 24686374075 ( 87.65%) 886.98
http(s) 15413266 ( 44.21%) 19971899732 ( 70.91%) 1295.76
http(c) 9145171 ( 26.23%) 2387362376 ( 8.48%) 261.05
squid 27639 ( 0.08%) 10585793 ( 0.04%) 383.00
smtp 62091 ( 0.18%) 14834425 ( 0.05%) 238.91
nntp 90 ( 0.00%) 5406 ( 0.00%) 60.07
ftp 16743 ( 0.05%) 5609273 ( 0.02%) 335.02
pop3 7678 ( 0.02%) 3943232 ( 0.01%) 513.58
imap 17759 ( 0.05%) 20675249 ( 0.07%) 1164.21
telnet 25961 ( 0.07%) 3398355 ( 0.01%) 130.90
ssh 185530 ( 0.53%) 73051057 ( 0.26%) 393.74
dns 1922 ( 0.01%) 261581 ( 0.00%) 136.10
bgp 971 ( 0.00%) 189497 ( 0.00%) 195.16
napster 18 ( 0.00%) 1554 ( 0.00%) 86.33
realaud 236 ( 0.00%) 34858 ( 0.00%) 147.70
rtsp 2173 ( 0.01%) 2061878 ( 0.01%) 948.86
icecast 495930 ( 1.42%) 430783844 ( 1.53%) 868.64
hotline 6 ( 0.00%) 414 ( 0.00%) 69.00
other 2428884 ( 6.97%) 1761675491 ( 6.26%) 725.30
udp 2096757 ( 6.01%) 706047151 ( 2.51%) 336.73
dns 1182725 ( 3.39%) 481451621 ( 1.71%) 407.07
rip 15 ( 0.00%) 1050 ( 0.00%) 70.00
realaud 8 ( 0.00%) 1134 ( 0.00%) 141.75
halflif 9 ( 0.00%) 760 ( 0.00%) 84.44
starcra 40 ( 0.00%) 4143 ( 0.00%) 103.58
everque 558 ( 0.00%) 69284 ( 0.00%) 124.16
unreal 7 ( 0.00%) 616 ( 0.00%) 88.00
quake 19 ( 0.00%) 3366 ( 0.00%) 177.16
cuseeme 3 ( 0.00%) 277 ( 0.00%) 92.33
other 912835 ( 2.62%) 223882349 ( 0.79%) 245.26
icmp 1570920 ( 4.51%) 164517615 ( 0.58%) 104.73
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 28772 ( 0.08%) 10399660 ( 0.04%) 361.45
ip6 862389 ( 2.47%) 639997992 ( 2.27%) 742.12
pim 78 ( 0.00%) 4680 ( 0.00%) 60.00
other 50987 ( 0.15%) 13954529 ( 0.05%) 273.69
frag 234170 ( 0.67%) 223174205 ( 0.79%) 953.04
ip6 2425039 ( 6.96%) 1942435926 ( 6.90%) 800.99
tcp6 2205811 ( 6.33%) 1842058529 ( 6.54%) 835.09
http(s) 1465310 ( 4.20%) 1429734630 ( 5.08%) 975.72
http(c) 282774 ( 0.81%) 33433855 ( 0.12%) 118.24
smtp 289 ( 0.00%) 172515 ( 0.00%) 596.94
ftp 138 ( 0.00%) 11946 ( 0.00%) 86.57
pop3 4 ( 0.00%) 384 ( 0.00%) 96.00
ssh 686 ( 0.00%) 131311 ( 0.00%) 191.42
dns 192 ( 0.00%) 76332 ( 0.00%) 397.56
bgp 92 ( 0.00%) 28084 ( 0.00%) 305.26
other 456326 ( 1.31%) 378469472 ( 1.34%) 829.38
udp6 140070 ( 0.40%) 45307099 ( 0.16%) 323.46
dns 79261 ( 0.23%) 24562849 ( 0.09%) 309.90
quake 1 ( 0.00%) 105 ( 0.00%) 105.00
other 60808 ( 0.17%) 20744145 ( 0.07%) 341.14
icmp6 34547 ( 0.10%) 3472872 ( 0.01%) 100.53
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 44499 ( 0.13%) 51582170 ( 0.18%) 1159.18
tcpdump file: 201301081400.dump.gz (805.14 MB)