Traffic Trace Info
DumpFile: 201301271400.dump
FileSize: 2633.29MB
Id: 201301271400
StartTime: Sun Jan 27 14:00:01 2013
EndTime: Sun Jan 27 14:15:01 2013
TotalTime: 899.92 seconds
TotalCapSize: 2018.40MB CapLen: 96 bytes
# of packets: 40296864 (20007.72MB)
AvgRate: 186.56Mbps stddev:48.39M
IP flow (unique src/dst pair) Information
# of flows: 15433217 (avg. 2.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.6% 5.5% 4.9% 4.0% 2.7% 1.6% 1.5% 1.4% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 11962906
Top 10 bandwidth usage (bytes/total in %):
17.7% 15.5% 10.9% 8.4% 7.2% 6.1% 5.3% 4.9% 4.3% 2.9%
# of IPv6 addresses: 8577
Top 10 bandwidth usage (bytes/total in %):
18.3% 13.0% 12.9% 7.7% 5.6% 4.9% 4.0% 3.9% 3.9% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201301271400.pktlen.png)
detailed numbers
[ 32- 63]: 19454314
[ 64- 127]: 5932214
[ 128- 255]: 1039532
[ 256- 511]: 608472
[ 512- 1023]: 604692
[ 1024- 2047]: 12657640
Protocol Breakdown
![[protocol breakdown chart]](201301271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40296864 (100.00%) 20979619862 (100.00%) 520.63
ip 38680403 ( 95.99%) 19515781168 ( 93.02%) 504.54
tcp 17488190 ( 43.40%) 16390429032 ( 78.13%) 937.23
http(s) 9343961 ( 23.19%) 12399693590 ( 59.10%) 1327.03
http(c) 4905645 ( 12.17%) 992047737 ( 4.73%) 202.23
squid 33778 ( 0.08%) 16687966 ( 0.08%) 494.05
smtp 32725 ( 0.08%) 6257146 ( 0.03%) 191.20
nntp 83 ( 0.00%) 4980 ( 0.00%) 60.00
ftp 3353 ( 0.01%) 270944 ( 0.00%) 80.81
pop3 3096 ( 0.01%) 965821 ( 0.00%) 311.96
imap 2130 ( 0.01%) 370871 ( 0.00%) 174.12
telnet 5655 ( 0.01%) 1901494 ( 0.01%) 336.25
ssh 117711 ( 0.29%) 19670687 ( 0.09%) 167.11
dns 6101 ( 0.02%) 384545 ( 0.00%) 63.03
bgp 517 ( 0.00%) 94422 ( 0.00%) 182.63
napster 17 ( 0.00%) 2128 ( 0.00%) 125.18
realaud 17 ( 0.00%) 2124 ( 0.00%) 124.94
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 51942 ( 0.13%) 37468745 ( 0.18%) 721.36
hotline 11 ( 0.00%) 1397 ( 0.00%) 127.00
other 2981447 ( 7.40%) 2914604375 ( 13.89%) 977.58
udp 3093403 ( 7.68%) 1417803747 ( 6.76%) 458.33
dns 794219 ( 1.97%) 374952152 ( 1.79%) 472.10
realaud 14 ( 0.00%) 987 ( 0.00%) 70.50
halflif 84 ( 0.00%) 7151 ( 0.00%) 85.13
starcra 80 ( 0.00%) 8810 ( 0.00%) 110.12
everque 99 ( 0.00%) 20133 ( 0.00%) 203.36
unreal 53 ( 0.00%) 8299 ( 0.00%) 156.58
quake 23 ( 0.00%) 1833 ( 0.00%) 79.70
other 2298705 ( 5.70%) 1042673665 ( 4.97%) 453.59
icmp 17354325 ( 43.07%) 1114396802 ( 5.31%) 64.21
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 17209 ( 0.04%) 7598686 ( 0.04%) 441.55
ip6 676658 ( 1.68%) 571695715 ( 2.73%) 844.88
other 50433 ( 0.13%) 13837916 ( 0.07%) 274.38
frag 255047 ( 0.63%) 267159941 ( 1.27%) 1047.49
ip6 1616459 ( 4.01%) 1463838574 ( 6.98%) 905.58
tcp6 1037297 ( 2.57%) 868386109 ( 4.14%) 837.16
http(s) 601443 ( 1.49%) 662767638 ( 3.16%) 1101.96
http(c) 119793 ( 0.30%) 13683551 ( 0.07%) 114.23
smtp 74 ( 0.00%) 11278 ( 0.00%) 152.41
ftp 66 ( 0.00%) 5876 ( 0.00%) 89.03
dns 277 ( 0.00%) 60815 ( 0.00%) 219.55
bgp 105 ( 0.00%) 37152 ( 0.00%) 353.83
other 315539 ( 0.78%) 191819799 ( 0.91%) 607.91
udp6 165398 ( 0.41%) 129374576 ( 0.62%) 782.20
dns 44391 ( 0.11%) 13586858 ( 0.06%) 306.07
quake 1 ( 0.00%) 115 ( 0.00%) 115.00
other 121006 ( 0.30%) 115787603 ( 0.55%) 956.87
icmp6 25984 ( 0.06%) 2721367 ( 0.01%) 104.73
ip6 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 387664 ( 0.96%) 463340794 ( 2.21%) 1195.21
tcpdump file: 201301271400.dump.gz (825.50 MB)