Traffic Trace Info
DumpFile: 201301191400.dump
FileSize: 1447.23MB
Id: 201301191400
StartTime: Sat Jan 19 14:00:00 2013
EndTime: Sat Jan 19 14:15:00 2013
TotalTime: 900.00 seconds
TotalCapSize: 1131.80MB CapLen: 96 bytes
# of packets: 20671602 (12834.29MB)
AvgRate: 119.66Mbps stddev:22.07M
IP flow (unique src/dst pair) Information
# of flows: 1871691 (avg. 11.04 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 2.6% 2.4% 2.3% 2.3% 2.2% 1.8% 1.6% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 1416686
Top 10 bandwidth usage (bytes/total in %):
10.4% 7.3% 7.0% 6.9% 5.4% 3.3% 2.9% 2.9% 2.8% 2.7%
# of IPv6 addresses: 9653
Top 10 bandwidth usage (bytes/total in %):
17.9% 13.1% 9.2% 6.6% 6.6% 5.1% 5.0% 4.1% 3.1% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201301191400.pktlen.png)
detailed numbers
[ 32- 63]: 4647147
[ 64- 127]: 5739518
[ 128- 255]: 697672
[ 256- 511]: 679366
[ 512- 1023]: 715458
[ 1024- 2047]: 8192441
Protocol Breakdown
![[protocol breakdown chart]](201301191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20671602 (100.00%) 13457725664 (100.00%) 651.02
ip 19267620 ( 93.21%) 12200964015 ( 90.66%) 633.24
tcp 13211682 ( 63.91%) 9685394386 ( 71.97%) 733.09
http(s) 6183735 ( 29.91%) 7213541191 ( 53.60%) 1166.53
http(c) 4733588 ( 22.90%) 1174062309 ( 8.72%) 248.03
squid 36523 ( 0.18%) 11714841 ( 0.09%) 320.75
smtp 42975 ( 0.21%) 9635399 ( 0.07%) 224.21
ftp 8643 ( 0.04%) 2528196 ( 0.02%) 292.51
pop3 1212 ( 0.01%) 206096 ( 0.00%) 170.05
imap 2925 ( 0.01%) 311794 ( 0.00%) 106.60
telnet 4921 ( 0.02%) 1846605 ( 0.01%) 375.25
ssh 277672 ( 1.34%) 60839407 ( 0.45%) 219.11
dns 2080 ( 0.01%) 278837 ( 0.00%) 134.06
bgp 1213 ( 0.01%) 156050 ( 0.00%) 128.65
napster 14 ( 0.00%) 1587 ( 0.00%) 113.36
realaud 9 ( 0.00%) 972 ( 0.00%) 108.00
rtsp 3 ( 0.00%) 194 ( 0.00%) 64.67
icecast 13720 ( 0.07%) 8197624 ( 0.06%) 597.49
hotline 8 ( 0.00%) 480 ( 0.00%) 60.00
other 1902441 ( 9.20%) 1202072804 ( 8.93%) 631.86
udp 3796243 ( 18.36%) 2152790800 ( 16.00%) 567.08
dns 692073 ( 3.35%) 327142540 ( 2.43%) 472.70
realaud 19 ( 0.00%) 1698 ( 0.00%) 89.37
halflif 36 ( 0.00%) 4109 ( 0.00%) 114.14
starcra 32 ( 0.00%) 4037 ( 0.00%) 126.16
everque 40 ( 0.00%) 5668 ( 0.00%) 141.70
unreal 16 ( 0.00%) 2083 ( 0.00%) 130.19
quake 41 ( 0.00%) 3417 ( 0.00%) 83.34
cuseeme 7 ( 0.00%) 1145 ( 0.00%) 163.57
other 3103607 ( 15.01%) 1825235043 ( 13.56%) 588.10
icmp 1732622 ( 8.38%) 182522392 ( 1.36%) 105.34
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 36357 ( 0.18%) 23865042 ( 0.18%) 656.41
ip6 437165 ( 2.11%) 142377289 ( 1.06%) 325.68
other 53366 ( 0.26%) 13994836 ( 0.10%) 262.24
frag 193622 ( 0.94%) 210846449 ( 1.57%) 1088.96
ip6 1403982 ( 6.79%) 1256761649 ( 9.34%) 895.14
tcp6 970503 ( 4.69%) 830990135 ( 6.17%) 856.25
http(s) 602673 ( 2.92%) 574628542 ( 4.27%) 953.47
http(c) 129730 ( 0.63%) 17829008 ( 0.13%) 137.43
smtp 172 ( 0.00%) 45465 ( 0.00%) 264.33
ftp 71 ( 0.00%) 6580 ( 0.00%) 92.68
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 187 ( 0.00%) 70957 ( 0.00%) 379.45
bgp 98 ( 0.00%) 30334 ( 0.00%) 309.53
napster 5 ( 0.00%) 422 ( 0.00%) 84.40
other 237555 ( 1.15%) 238377819 ( 1.77%) 1003.46
udp6 121132 ( 0.59%) 85983150 ( 0.64%) 709.83
dns 44201 ( 0.21%) 14325137 ( 0.11%) 324.09
halflif 1 ( 0.00%) 94 ( 0.00%) 94.00
other 76930 ( 0.37%) 71657919 ( 0.53%) 931.47
icmp6 32944 ( 0.16%) 3719045 ( 0.03%) 112.89
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 279288 ( 1.35%) 336053691 ( 2.50%) 1203.25
tcpdump file: 201301191400.dump.gz (479.82 MB)