Traffic Trace Info
DumpFile: 201301151400.dump
FileSize: 2111.80MB
Id: 201301151400
StartTime: Tue Jan 15 14:00:00 2013
EndTime: Tue Jan 15 14:15:00 2013
TotalTime: 899.99 seconds
TotalCapSize: 1670.61MB CapLen: 96 bytes
# of packets: 28913077 (20506.14MB)
AvgRate: 191.11Mbps stddev:41.99M
IP flow (unique src/dst pair) Information
# of flows: 1845929 (avg. 15.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 3.3% 2.1% 2.0% 2.0% 1.6% 1.6% 1.5% 1.5% 1.3%
IP address Information
# of IPv4 addresses: 1404592
Top 10 bandwidth usage (bytes/total in %):
7.1% 6.9% 4.6% 4.4% 3.9% 3.8% 3.8% 3.7% 3.1% 2.7%
# of IPv6 addresses: 12702
Top 10 bandwidth usage (bytes/total in %):
9.8% 6.2% 6.2% 4.0% 3.8% 3.5% 3.5% 3.5% 2.6% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201301151400.pktlen.png)
detailed numbers
[ 32- 63]: 5032946
[ 64- 127]: 7764760
[ 128- 255]: 807998
[ 256- 511]: 927236
[ 512- 1023]: 1045323
[ 1024- 2047]: 13334814
Protocol Breakdown
![[protocol breakdown chart]](201301151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28913077 (100.00%) 21502245269 (100.00%) 743.69
ip 26322363 ( 91.04%) 19298019943 ( 89.75%) 733.14
tcp 20728383 ( 71.69%) 17318022804 ( 80.54%) 835.47
http(s) 11169871 ( 38.63%) 13750616851 ( 63.95%) 1231.05
http(c) 6822439 ( 23.60%) 1894896600 ( 8.81%) 277.74
squid 52891 ( 0.18%) 27887674 ( 0.13%) 527.27
smtp 94180 ( 0.33%) 47539454 ( 0.22%) 504.77
nntp 94 ( 0.00%) 5640 ( 0.00%) 60.00
ftp 3884 ( 0.01%) 314030 ( 0.00%) 80.85
pop3 6491 ( 0.02%) 3987547 ( 0.02%) 614.32
imap 2337 ( 0.01%) 308227 ( 0.00%) 131.89
telnet 3998 ( 0.01%) 1785905 ( 0.01%) 446.70
ssh 603452 ( 2.09%) 229716692 ( 1.07%) 380.67
dns 3530 ( 0.01%) 2109213 ( 0.01%) 597.51
bgp 511 ( 0.00%) 108552 ( 0.00%) 212.43
napster 9 ( 0.00%) 582 ( 0.00%) 64.67
realaud 5 ( 0.00%) 324 ( 0.00%) 64.80
rtsp 6250 ( 0.02%) 7753406 ( 0.04%) 1240.54
icecast 19535 ( 0.07%) 8453111 ( 0.04%) 432.72
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 1938905 ( 6.71%) 1342538936 ( 6.24%) 692.42
udp 2797717 ( 9.68%) 1480410048 ( 6.88%) 529.15
dns 1191563 ( 4.12%) 548633580 ( 2.55%) 460.43
rip 1 ( 0.00%) 62 ( 0.00%) 62.00
realaud 53 ( 0.00%) 4050 ( 0.00%) 76.42
halflif 47 ( 0.00%) 3482 ( 0.00%) 74.09
starcra 62 ( 0.00%) 5736 ( 0.00%) 92.52
everque 60 ( 0.00%) 8061 ( 0.00%) 134.35
unreal 37 ( 0.00%) 4754 ( 0.00%) 128.49
quake 26 ( 0.00%) 1903 ( 0.00%) 73.19
cuseeme 2 ( 0.00%) 173 ( 0.00%) 86.50
other 1605548 ( 5.55%) 931387340 ( 4.33%) 580.11
icmp 2173925 ( 7.52%) 197693026 ( 0.92%) 90.94
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 14897 ( 0.05%) 6621802 ( 0.03%) 444.51
ip6 554034 ( 1.92%) 279690539 ( 1.30%) 504.83
other 53222 ( 0.18%) 15562454 ( 0.07%) 292.41
frag 302562 ( 1.05%) 332625333 ( 1.55%) 1099.36
ip6 2590714 ( 8.96%) 2204225326 ( 10.25%) 850.82
tcp6 2018961 ( 6.98%) 1678306983 ( 7.81%) 831.27
http(s) 1456822 ( 5.04%) 1445653797 ( 6.72%) 992.33
http(c) 295815 ( 1.02%) 35792475 ( 0.17%) 121.00
smtp 167 ( 0.00%) 94028 ( 0.00%) 563.04
ftp 140 ( 0.00%) 15090 ( 0.00%) 107.79
ssh 1248 ( 0.00%) 1081448 ( 0.01%) 866.54
dns 375 ( 0.00%) 81841 ( 0.00%) 218.24
bgp 101 ( 0.00%) 32970 ( 0.00%) 326.44
other 264293 ( 0.91%) 195555334 ( 0.91%) 739.92
udp6 292856 ( 1.01%) 223372872 ( 1.04%) 762.74
dns 68060 ( 0.24%) 21185959 ( 0.10%) 311.28
realaud 1 ( 0.00%) 94 ( 0.00%) 94.00
halflif 1 ( 0.00%) 116 ( 0.00%) 116.00
other 224794 ( 0.78%) 202186703 ( 0.94%) 899.43
icmp6 31686 ( 0.11%) 3579745 ( 0.02%) 112.98
ip6 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 247095 ( 0.85%) 298949998 ( 1.39%) 1209.86
tcpdump file: 201301151400.dump.gz (684.01 MB)