Traffic Trace Info
DumpFile: 201301171400.dump
FileSize: 2458.65MB
Id: 201301171400
StartTime: Thu Jan 17 14:00:00 2013
EndTime: Thu Jan 17 14:15:00 2013
TotalTime: 899.90 seconds
TotalCapSize: 1950.56MB CapLen: 96 bytes
# of packets: 33297280 (25880.04MB)
AvgRate: 241.27Mbps stddev:49.80M
IP flow (unique src/dst pair) Information
# of flows: 1821357 (avg. 18.28 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 5.0% 3.2% 3.0% 2.2% 2.1% 1.8% 1.6% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 1370009
Top 10 bandwidth usage (bytes/total in %):
9.7% 9.6% 9.3% 8.8% 5.7% 5.4% 4.4% 4.3% 3.8% 3.6%
# of IPv6 addresses: 12296
Top 10 bandwidth usage (bytes/total in %):
12.5% 11.6% 4.5% 4.2% 4.1% 3.6% 3.4% 3.2% 2.8% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201301171400.pktlen.png)
detailed numbers
[ 32- 63]: 5234396
[ 64- 127]: 8214958
[ 128- 255]: 738283
[ 256- 511]: 983977
[ 512- 1023]: 1183869
[ 1024- 2047]: 16941797
Protocol Breakdown
![[protocol breakdown chart]](201301171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33297280 (100.00%) 27137193550 (100.00%) 815.00
ip 31074501 ( 93.32%) 25268652687 ( 93.11%) 813.16
tcp 26765081 ( 80.38%) 24055181515 ( 88.64%) 898.75
http(s) 14288232 ( 42.91%) 17844149517 ( 65.76%) 1248.87
http(c) 8039466 ( 24.14%) 2926782041 ( 10.79%) 364.05
squid 128987 ( 0.39%) 106316701 ( 0.39%) 824.24
smtp 76987 ( 0.23%) 34045863 ( 0.13%) 442.23
nntp 84 ( 0.00%) 5040 ( 0.00%) 60.00
ftp 51982 ( 0.16%) 43427788 ( 0.16%) 835.44
pop3 6174 ( 0.02%) 3476369 ( 0.01%) 563.07
imap 7528 ( 0.02%) 908316 ( 0.00%) 120.66
telnet 6531 ( 0.02%) 1993109 ( 0.01%) 305.18
ssh 36010 ( 0.11%) 5933505 ( 0.02%) 164.77
dns 1571 ( 0.00%) 259326 ( 0.00%) 165.07
bgp 548 ( 0.00%) 125927 ( 0.00%) 229.79
napster 15 ( 0.00%) 1911 ( 0.00%) 127.40
realaud 37 ( 0.00%) 2854 ( 0.00%) 77.14
rtsp 6 ( 0.00%) 360 ( 0.00%) 60.00
icecast 12098 ( 0.04%) 8112913 ( 0.03%) 670.60
hotline 17 ( 0.00%) 2392 ( 0.00%) 140.71
other 4108807 ( 12.34%) 3079637523 ( 11.35%) 749.52
udp 1893958 ( 5.69%) 724839072 ( 2.67%) 382.71
dns 1032561 ( 3.10%) 465806654 ( 1.72%) 451.12
realaud 1 ( 0.00%) 81 ( 0.00%) 81.00
halflif 17 ( 0.00%) 1351 ( 0.00%) 79.47
starcra 42 ( 0.00%) 3884 ( 0.00%) 92.48
everque 260 ( 0.00%) 32087 ( 0.00%) 123.41
unreal 8 ( 0.00%) 683 ( 0.00%) 85.38
quake 18 ( 0.00%) 1343 ( 0.00%) 74.61
cuseeme 5 ( 0.00%) 500 ( 0.00%) 100.00
other 860814 ( 2.59%) 258744640 ( 0.95%) 300.58
icmp 1648402 ( 4.95%) 160455639 ( 0.59%) 97.34
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 50986 ( 0.15%) 15929296 ( 0.06%) 312.42
ip6 653874 ( 1.96%) 290592516 ( 1.07%) 444.42
other 62016 ( 0.19%) 21635489 ( 0.08%) 348.87
frag 292531 ( 0.88%) 311511739 ( 1.15%) 1064.88
ip6 2222779 ( 6.68%) 1868540863 ( 6.89%) 840.63
tcp6 1959793 ( 5.89%) 1651987095 ( 6.09%) 842.94
http(s) 1475189 ( 4.43%) 1550471935 ( 5.71%) 1051.03
http(c) 421091 ( 1.26%) 43853497 ( 0.16%) 104.14
smtp 324 ( 0.00%) 152902 ( 0.00%) 471.92
ftp 89 ( 0.00%) 7915 ( 0.00%) 88.93
pop3 11 ( 0.00%) 981 ( 0.00%) 89.18
ssh 77 ( 0.00%) 6366 ( 0.00%) 82.68
dns 363 ( 0.00%) 81342 ( 0.00%) 224.08
bgp 99 ( 0.00%) 33477 ( 0.00%) 338.15
other 62550 ( 0.19%) 57378680 ( 0.21%) 917.33
udp6 82373 ( 0.25%) 28741916 ( 0.11%) 348.92
dns 68686 ( 0.21%) 21730921 ( 0.08%) 316.38
halflif 2 ( 0.00%) 208 ( 0.00%) 104.00
cuseeme 1 ( 0.00%) 102 ( 0.00%) 102.00
other 13684 ( 0.04%) 7010685 ( 0.03%) 512.33
icmp6 27238 ( 0.08%) 3247958 ( 0.01%) 119.24
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 153262 ( 0.46%) 184548502 ( 0.68%) 1204.14
tcpdump file: 201301171400.dump.gz (786.67 MB)