Traffic Trace Info
DumpFile: 201301261400.dump
FileSize: 2527.28MB
Id: 201301261400
StartTime: Sat Jan 26 14:00:00 2013
EndTime: Sat Jan 26 14:15:00 2013
TotalTime: 899.84 seconds
TotalCapSize: 1945.47MB CapLen: 96 bytes
# of packets: 38128937 (15802.30MB)
AvgRate: 147.31Mbps stddev:25.10M
IP flow (unique src/dst pair) Information
# of flows: 16675179 (avg. 2.29 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.5% 4.6% 4.1% 3.1% 2.1% 2.0% 1.2% 1.1% 1.1% 0.9%
IP address Information
# of IPv4 addresses: 13053033
Top 10 bandwidth usage (bytes/total in %):
10.2% 9.1% 8.1% 7.2% 6.8% 5.9% 5.0% 3.7% 3.6% 3.1%
# of IPv6 addresses: 14584
Top 10 bandwidth usage (bytes/total in %):
47.6% 47.5% 11.0% 3.8% 3.4% 3.3% 2.9% 2.7% 2.7% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201301261400.pktlen.png)
detailed numbers
[ 32- 63]: 19462828
[ 64- 127]: 7077959
[ 128- 255]: 541054
[ 256- 511]: 677729
[ 512- 1023]: 589358
[ 1024- 2047]: 9780009
Protocol Breakdown
![[protocol breakdown chart]](201301261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38128937 (100.00%) 16569913126 (100.00%) 434.58
ip 35746390 ( 93.75%) 13959711260 ( 84.25%) 390.52
tcp 14511133 ( 38.06%) 11751234437 ( 70.92%) 809.81
http(s) 6319403 ( 16.57%) 7700139746 ( 46.47%) 1218.49
http(c) 3648301 ( 9.57%) 945719470 ( 5.71%) 259.22
squid 22543 ( 0.06%) 13032294 ( 0.08%) 578.11
smtp 123480 ( 0.32%) 26929930 ( 0.16%) 218.09
nntp 95 ( 0.00%) 5700 ( 0.00%) 60.00
ftp 5835 ( 0.02%) 406690 ( 0.00%) 69.70
pop3 1347 ( 0.00%) 332558 ( 0.00%) 246.89
imap 2282 ( 0.01%) 275678 ( 0.00%) 120.81
telnet 6811 ( 0.02%) 1979457 ( 0.01%) 290.63
ssh 79358 ( 0.21%) 41390137 ( 0.25%) 521.56
dns 7206 ( 0.02%) 454284 ( 0.00%) 63.04
bgp 499 ( 0.00%) 88773 ( 0.00%) 177.90
napster 28 ( 0.00%) 4555 ( 0.00%) 162.68
realaud 21 ( 0.00%) 2063 ( 0.00%) 98.24
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 129567 ( 0.34%) 87088932 ( 0.53%) 672.15
hotline 2 ( 0.00%) 120 ( 0.00%) 60.00
other 4164354 ( 10.92%) 2933383990 ( 17.70%) 704.40
udp 1911343 ( 5.01%) 815806520 ( 4.92%) 426.82
dns 826396 ( 2.17%) 407782290 ( 2.46%) 493.45
rip 5 ( 0.00%) 350 ( 0.00%) 70.00
realaud 38 ( 0.00%) 2862 ( 0.00%) 75.32
halflif 14 ( 0.00%) 1738 ( 0.00%) 124.14
starcra 41 ( 0.00%) 4333 ( 0.00%) 105.68
everque 53 ( 0.00%) 8434 ( 0.00%) 159.13
unreal 44 ( 0.00%) 24414 ( 0.00%) 554.86
quake 35 ( 0.00%) 2840 ( 0.00%) 81.14
cuseeme 12 ( 0.00%) 1360 ( 0.00%) 113.33
other 1075268 ( 2.82%) 407084566 ( 2.46%) 378.59
icmp 18399397 ( 48.26%) 1165225323 ( 7.03%) 63.33
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 19989 ( 0.05%) 10578462 ( 0.06%) 529.21
ip6 852660 ( 2.24%) 202048753 ( 1.22%) 236.96
other 51683 ( 0.14%) 14798495 ( 0.09%) 286.33
frag 290433 ( 0.76%) 311147775 ( 1.88%) 1071.32
ip6 2382545 ( 6.25%) 2610201746 ( 15.75%) 1095.55
tcp6 1726626 ( 4.53%) 1945961922 ( 11.74%) 1127.03
http(s) 536712 ( 1.41%) 527169781 ( 3.18%) 982.22
http(c) 62532 ( 0.16%) 8573370 ( 0.05%) 137.10
smtp 84 ( 0.00%) 35923 ( 0.00%) 427.65
ftp 66 ( 0.00%) 5876 ( 0.00%) 89.03
dns 410 ( 0.00%) 140031 ( 0.00%) 341.54
bgp 100 ( 0.00%) 35711 ( 0.00%) 357.11
other 1126722 ( 2.96%) 1410001230 ( 8.51%) 1251.42
udp6 121996 ( 0.32%) 59936295 ( 0.36%) 491.30
dns 44782 ( 0.12%) 13935392 ( 0.08%) 311.18
realaud 1 ( 0.00%) 159 ( 0.00%) 159.00
unreal 1 ( 0.00%) 106 ( 0.00%) 106.00
other 77212 ( 0.20%) 46000638 ( 0.28%) 595.77
icmp6 37236 ( 0.10%) 5012231 ( 0.03%) 134.61
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 496575 ( 1.30%) 599276042 ( 3.62%) 1206.82
tcpdump file: 201301261400.dump.gz (800.10 MB)