Traffic Trace Info
DumpFile: 201301181400.dump
FileSize: 2020.17MB
Id: 201301181400
StartTime: Fri Jan 18 14:00:00 2013
EndTime: Fri Jan 18 14:15:00 2013
TotalTime: 900.04 seconds
TotalCapSize: 1592.96MB CapLen: 96 bytes
# of packets: 27996893 (19321.86MB)
AvgRate: 180.01Mbps stddev:34.64M
IP flow (unique src/dst pair) Information
# of flows: 1778564 (avg. 15.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.4% 6.5% 5.7% 3.8% 1.3% 1.1% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 1352576
Top 10 bandwidth usage (bytes/total in %):
14.3% 12.4% 8.1% 7.1% 6.8% 6.2% 4.1% 4.1% 4.0% 3.7%
# of IPv6 addresses: 12146
Top 10 bandwidth usage (bytes/total in %):
4.5% 4.5% 4.4% 4.1% 3.5% 3.1% 2.7% 2.6% 2.5% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201301181400.pktlen.png)
detailed numbers
[ 32- 63]: 5260769
[ 64- 127]: 7512440
[ 128- 255]: 644565
[ 256- 511]: 849884
[ 512- 1023]: 1360215
[ 1024- 2047]: 12369020
Protocol Breakdown
![[protocol breakdown chart]](201301181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27996893 (100.00%) 20260441870 (100.00%) 723.67
ip 26201646 ( 93.59%) 18892897017 ( 93.25%) 721.06
tcp 19512992 ( 69.70%) 16110740370 ( 79.52%) 825.64
http(s) 8424892 ( 30.09%) 9959783336 ( 49.16%) 1182.19
http(c) 5292958 ( 18.91%) 1349809037 ( 6.66%) 255.02
squid 29474 ( 0.11%) 11366204 ( 0.06%) 385.63
smtp 82794 ( 0.30%) 23836910 ( 0.12%) 287.91
ftp 2582 ( 0.01%) 200608 ( 0.00%) 77.69
pop3 3754 ( 0.01%) 2496347 ( 0.01%) 664.98
imap 3181 ( 0.01%) 400821 ( 0.00%) 126.00
telnet 14156 ( 0.05%) 2532042 ( 0.01%) 178.87
ssh 109928 ( 0.39%) 12627466 ( 0.06%) 114.87
dns 1529 ( 0.01%) 377734 ( 0.00%) 247.05
bgp 760 ( 0.00%) 323051 ( 0.00%) 425.07
napster 29 ( 0.00%) 2210 ( 0.00%) 76.21
realaud 6 ( 0.00%) 414 ( 0.00%) 69.00
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 10475 ( 0.04%) 7981333 ( 0.04%) 761.94
hotline 5 ( 0.00%) 775 ( 0.00%) 155.00
other 5536467 ( 19.78%) 4739001962 ( 23.39%) 855.96
udp 3649747 ( 13.04%) 1787206481 ( 8.82%) 489.68
dns 1007085 ( 3.60%) 459370032 ( 2.27%) 456.14
realaud 3 ( 0.00%) 279 ( 0.00%) 93.00
halflif 20 ( 0.00%) 2601 ( 0.00%) 130.05
starcra 58 ( 0.00%) 5792 ( 0.00%) 99.86
everque 50 ( 0.00%) 7736 ( 0.00%) 154.72
unreal 71 ( 0.00%) 22776 ( 0.00%) 320.79
quake 143 ( 0.00%) 68962 ( 0.00%) 482.25
cuseeme 9 ( 0.00%) 643 ( 0.00%) 71.44
other 2640059 ( 9.43%) 1327220724 ( 6.55%) 502.72
icmp 1996705 ( 7.13%) 191158909 ( 0.94%) 95.74
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 16573 ( 0.06%) 6641422 ( 0.03%) 400.74
ip6 957821 ( 3.42%) 781397751 ( 3.86%) 815.81
other 67623 ( 0.24%) 15732814 ( 0.08%) 232.65
frag 292258 ( 1.04%) 314048196 ( 1.55%) 1074.56
ip6 1795247 ( 6.41%) 1367544853 ( 6.75%) 761.76
tcp6 1404962 ( 5.02%) 1054149195 ( 5.20%) 750.30
http(s) 1020455 ( 3.64%) 980517364 ( 4.84%) 960.86
http(c) 314088 ( 1.12%) 33426918 ( 0.16%) 106.43
smtp 762 ( 0.00%) 244280 ( 0.00%) 320.58
ftp 110 ( 0.00%) 10061 ( 0.00%) 91.46
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 133 ( 0.00%) 45059 ( 0.00%) 338.79
bgp 93 ( 0.00%) 21610 ( 0.00%) 232.37
napster 3 ( 0.00%) 246 ( 0.00%) 82.00
other 69306 ( 0.25%) 39882649 ( 0.20%) 575.46
udp6 175087 ( 0.63%) 91256966 ( 0.45%) 521.21
dns 68960 ( 0.25%) 21165666 ( 0.10%) 306.93
other 106127 ( 0.38%) 70091300 ( 0.35%) 660.45
icmp6 28599 ( 0.10%) 3208252 ( 0.02%) 112.18
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 186485 ( 0.67%) 218914948 ( 1.08%) 1173.90
tcpdump file: 201301181400.dump.gz (638.66 MB)