Traffic Trace Info
DumpFile: 201301231400.dump
FileSize: 1890.74MB
Id: 201301231400
StartTime: Wed Jan 23 14:00:00 2013
EndTime: Wed Jan 23 14:15:00 2013
TotalTime: 900.07 seconds
TotalCapSize: 1483.95MB CapLen: 96 bytes
# of packets: 26658541 (19901.50MB)
AvgRate: 185.49Mbps stddev:28.92M
IP flow (unique src/dst pair) Information
# of flows: 1825592 (avg. 14.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.0% 2.2% 1.7% 1.5% 1.5% 1.5% 1.2% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 1372037
Top 10 bandwidth usage (bytes/total in %):
18.4% 12.1% 5.8% 4.9% 4.3% 2.6% 2.4% 2.4% 2.3% 2.2%
# of IPv6 addresses: 13032
Top 10 bandwidth usage (bytes/total in %):
20.6% 7.4% 5.4% 5.0% 4.9% 3.5% 3.3% 3.2% 3.1% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201301231400.pktlen.png)
detailed numbers
[ 32- 63]: 4036773
[ 64- 127]: 6638591
[ 128- 255]: 829058
[ 256- 511]: 1194409
[ 512- 1023]: 884455
[ 1024- 2047]: 13075255
Protocol Breakdown
![[protocol breakdown chart]](201301231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26658541 (100.00%) 20868239559 (100.00%) 782.80
ip 24923965 ( 93.49%) 19309066022 ( 92.53%) 774.72
tcp 18153162 ( 68.10%) 15813910905 ( 75.78%) 871.14
http(s) 10109873 ( 37.92%) 12547245953 ( 60.13%) 1241.09
http(c) 4967633 ( 18.63%) 1100712837 ( 5.27%) 221.58
squid 167697 ( 0.63%) 150617515 ( 0.72%) 898.15
smtp 60075 ( 0.23%) 31122309 ( 0.15%) 518.06
nntp 18 ( 0.00%) 1098 ( 0.00%) 61.00
ftp 3001 ( 0.01%) 241072 ( 0.00%) 80.33
pop3 23853 ( 0.09%) 28511970 ( 0.14%) 1195.32
imap 83317 ( 0.31%) 84415244 ( 0.40%) 1013.18
telnet 3450 ( 0.01%) 1743546 ( 0.01%) 505.38
ssh 26583 ( 0.10%) 5369601 ( 0.03%) 201.99
dns 3471 ( 0.01%) 2111718 ( 0.01%) 608.39
bgp 800 ( 0.00%) 139736 ( 0.00%) 174.67
napster 4 ( 0.00%) 242 ( 0.00%) 60.50
realaud 5 ( 0.00%) 334 ( 0.00%) 66.80
rtsp 102 ( 0.00%) 126165 ( 0.00%) 1236.91
icecast 34525 ( 0.13%) 31037639 ( 0.15%) 898.99
other 2668754 ( 10.01%) 1830513866 ( 8.77%) 685.91
udp 4522744 ( 16.97%) 3065611940 ( 14.69%) 677.82
dns 830124 ( 3.11%) 375918619 ( 1.80%) 452.85
realaud 11 ( 0.00%) 811 ( 0.00%) 73.73
halflif 7 ( 0.00%) 913 ( 0.00%) 130.43
starcra 41 ( 0.00%) 5757 ( 0.00%) 140.41
everque 101 ( 0.00%) 21882 ( 0.00%) 216.65
unreal 23 ( 0.00%) 3968 ( 0.00%) 172.52
quake 15 ( 0.00%) 1660 ( 0.00%) 110.67
other 3690964 ( 13.85%) 2689232464 ( 12.89%) 728.60
icmp 1637067 ( 6.14%) 171027324 ( 0.82%) 104.47
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 26500 ( 0.10%) 8701848 ( 0.04%) 328.37
ip6 509180 ( 1.91%) 231673714 ( 1.11%) 454.99
other 75127 ( 0.28%) 18121021 ( 0.09%) 241.21
frag 222283 ( 0.83%) 238405535 ( 1.14%) 1072.53
ip6 1734576 ( 6.51%) 1559173537 ( 7.47%) 898.88
tcp6 1157302 ( 4.34%) 1038047861 ( 4.97%) 896.96
http(s) 918441 ( 3.45%) 891074391 ( 4.27%) 970.20
http(c) 73924 ( 0.28%) 8084144 ( 0.04%) 109.36
smtp 63 ( 0.00%) 13012 ( 0.00%) 206.54
ftp 67 ( 0.00%) 5973 ( 0.00%) 89.15
ssh 29 ( 0.00%) 2918 ( 0.00%) 100.62
dns 338 ( 0.00%) 86018 ( 0.00%) 254.49
bgp 111 ( 0.00%) 46418 ( 0.00%) 418.18
other 164329 ( 0.62%) 138734987 ( 0.66%) 844.25
udp6 226699 ( 0.85%) 142907135 ( 0.68%) 630.38
dns 71078 ( 0.27%) 21577423 ( 0.10%) 303.57
quake 1 ( 0.00%) 90 ( 0.00%) 90.00
cuseeme 1 ( 0.00%) 107 ( 0.00%) 107.00
other 155619 ( 0.58%) 121329515 ( 0.58%) 779.66
icmp6 33877 ( 0.13%) 4202542 ( 0.02%) 124.05
ip6 86 ( 0.00%) 11698 ( 0.00%) 136.02
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 316582 ( 1.19%) 374000221 ( 1.79%) 1181.37
tcpdump file: 201301231400.dump.gz (611.21 MB)