Traffic Trace Info
DumpFile: 201301141400.dump
FileSize: 1866.09MB
Id: 201301141400
StartTime: Mon Jan 14 14:00:00 2013
EndTime: Mon Jan 14 14:15:00 2013
TotalTime: 900.20 seconds
TotalCapSize: 1463.45MB CapLen: 96 bytes
# of packets: 26386943 (19815.40MB)
AvgRate: 184.66Mbps stddev:31.17M
IP flow (unique src/dst pair) Information
# of flows: 1691309 (avg. 15.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.7% 4.0% 2.6% 2.3% 2.2% 2.0% 1.9% 1.7% 1.6% 1.4%
IP address Information
# of IPv4 addresses: 1347417
Top 10 bandwidth usage (bytes/total in %):
24.2% 15.6% 12.6% 4.2% 3.7% 3.3% 2.7% 2.5% 2.5% 2.3%
# of IPv6 addresses: 10430
Top 10 bandwidth usage (bytes/total in %):
6.4% 6.3% 5.5% 5.4% 3.7% 3.4% 3.1% 3.1% 2.9% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201301141400.pktlen.png)
detailed numbers
[ 32- 63]: 5064564
[ 64- 127]: 5962323
[ 128- 255]: 547745
[ 256- 511]: 630883
[ 512- 1023]: 1613109
[ 1024- 2047]: 12568319
Protocol Breakdown
![[protocol breakdown chart]](201301141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26386943 (100.00%) 20777952576 (100.00%) 787.43
ip 25076354 ( 95.03%) 19611583560 ( 94.39%) 782.07
tcp 19487365 ( 73.85%) 17444440854 ( 83.96%) 895.17
http(s) 9890040 ( 37.48%) 12624511390 ( 60.76%) 1276.49
http(c) 6032408 ( 22.86%) 2003906557 ( 9.64%) 332.19
squid 51495 ( 0.20%) 20725463 ( 0.10%) 402.48
smtp 47088 ( 0.18%) 7317119 ( 0.04%) 155.39
nntp 15 ( 0.00%) 966 ( 0.00%) 64.40
ftp 83558 ( 0.32%) 75491801 ( 0.36%) 903.47
pop3 1494 ( 0.01%) 575176 ( 0.00%) 384.99
imap 64234 ( 0.24%) 62242779 ( 0.30%) 969.00
telnet 20935 ( 0.08%) 3038385 ( 0.01%) 145.13
ssh 255591 ( 0.97%) 45325858 ( 0.22%) 177.34
dns 4979 ( 0.02%) 3595644 ( 0.02%) 722.16
bgp 502 ( 0.00%) 98351 ( 0.00%) 195.92
napster 18 ( 0.00%) 1583 ( 0.00%) 87.94
realaud 6 ( 0.00%) 414 ( 0.00%) 69.00
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 683 ( 0.00%) 64690 ( 0.00%) 94.71
hotline 19 ( 0.00%) 2758 ( 0.00%) 145.16
other 3034298 ( 11.50%) 2597541800 ( 12.50%) 856.06
udp 3713665 ( 14.07%) 1870676049 ( 9.00%) 503.73
dns 1952871 ( 7.40%) 943460582 ( 4.54%) 483.11
rip 4 ( 0.00%) 300 ( 0.00%) 75.00
realaud 26 ( 0.00%) 2001 ( 0.00%) 76.96
halflif 35 ( 0.00%) 2549 ( 0.00%) 72.83
starcra 43 ( 0.00%) 3120 ( 0.00%) 72.56
everque 121 ( 0.00%) 11702 ( 0.00%) 96.71
unreal 49 ( 0.00%) 5591 ( 0.00%) 114.10
quake 63 ( 0.00%) 4961 ( 0.00%) 78.75
cuseeme 34 ( 0.00%) 2630 ( 0.00%) 77.35
other 1760102 ( 6.67%) 926830720 ( 4.46%) 526.58
icmp 1450003 ( 5.50%) 128605573 ( 0.62%) 88.69
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 17549 ( 0.07%) 6727174 ( 0.03%) 383.34
ip6 358938 ( 1.36%) 147220682 ( 0.71%) 410.16
other 48649 ( 0.18%) 13893958 ( 0.07%) 285.60
frag 678357 ( 2.57%) 742803742 ( 3.57%) 1095.00
ip6 1310589 ( 4.97%) 1166369016 ( 5.61%) 889.96
tcp6 932605 ( 3.53%) 813571130 ( 3.92%) 872.36
http(s) 695386 ( 2.64%) 710297128 ( 3.42%) 1021.44
http(c) 134698 ( 0.51%) 19661330 ( 0.09%) 145.97
smtp 238 ( 0.00%) 236877 ( 0.00%) 995.28
ftp 62 ( 0.00%) 6510 ( 0.00%) 105.00
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 265 ( 0.00%) 46629 ( 0.00%) 175.96
bgp 94 ( 0.00%) 29071 ( 0.00%) 309.27
other 101850 ( 0.39%) 83292577 ( 0.40%) 817.80
udp6 115579 ( 0.44%) 71532764 ( 0.34%) 618.91
dns 45734 ( 0.17%) 14902855 ( 0.07%) 325.86
other 69845 ( 0.26%) 56629909 ( 0.27%) 810.79
icmp6 31281 ( 0.12%) 3259376 ( 0.02%) 104.20
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 231011 ( 0.88%) 277990322 ( 1.34%) 1203.36
tcpdump file: 201301141400.dump.gz (572.58 MB)