Traffic Trace Info
DumpFile: 201301281400.dump
FileSize: 2719.48MB
Id: 201301281400
StartTime: Mon Jan 28 14:00:01 2013
EndTime: Mon Jan 28 14:15:00 2013
TotalTime: 899.39 seconds
TotalCapSize: -2003.94MB CapLen: 96 bytes
# of packets: 41118072 (17966.80MB)
AvgRate: 167.57Mbps stddev:32.70M
IP flow (unique src/dst pair) Information
# of flows: 15489786 (avg. 2.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 1.8% 1.7% 1.7% 1.6% 1.6% 1.1% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 11932532
Top 10 bandwidth usage (bytes/total in %):
11.7% 7.0% 5.8% 5.6% 4.9% 4.7% 2.9% 2.7% 2.4% 2.0%
# of IPv6 addresses: 10339
Top 10 bandwidth usage (bytes/total in %):
23.0% 7.6% 6.5% 5.3% 3.1% 3.0% 2.7% 2.6% 2.4% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201301281400.pktlen.png)
detailed numbers
[ 32- 63]: 19956516
[ 64- 127]: 7842082
[ 128- 255]: 715958
[ 256- 511]: 800948
[ 512- 1023]: 919738
[ 1024- 2047]: 10882830
Protocol Breakdown
![[protocol breakdown chart]](201301281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41118072 (100.00%) 18839555836 (100.00%) 458.18
ip 39245701 ( 95.45%) 17089946803 ( 90.71%) 435.46
tcp 17577267 ( 42.75%) 13714003258 ( 72.79%) 780.21
http(s) 8609413 ( 20.94%) 10390239493 ( 55.15%) 1206.85
http(c) 5743242 ( 13.97%) 1150623070 ( 6.11%) 200.34
squid 17863 ( 0.04%) 8308777 ( 0.04%) 465.14
smtp 64387 ( 0.16%) 37149229 ( 0.20%) 576.97
nntp 89 ( 0.00%) 5340 ( 0.00%) 60.00
ftp 7322 ( 0.02%) 754158 ( 0.00%) 103.00
pop3 44172 ( 0.11%) 8571914 ( 0.05%) 194.06
imap 3417 ( 0.01%) 1399459 ( 0.01%) 409.56
telnet 4455 ( 0.01%) 1812427 ( 0.01%) 406.83
ssh 202026 ( 0.49%) 45007195 ( 0.24%) 222.78
dns 3220 ( 0.01%) 361881 ( 0.00%) 112.39
bgp 532 ( 0.00%) 107101 ( 0.00%) 201.32
napster 18 ( 0.00%) 6577 ( 0.00%) 365.39
realaud 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 150777 ( 0.37%) 120503568 ( 0.64%) 799.22
hotline 9 ( 0.00%) 628 ( 0.00%) 69.78
other 2726324 ( 6.63%) 1949152381 ( 10.35%) 714.94
udp 3128843 ( 7.61%) 1996199204 ( 10.60%) 638.00
dns 922052 ( 2.24%) 386018357 ( 2.05%) 418.65
rip 15 ( 0.00%) 1050 ( 0.00%) 70.00
realaud 47 ( 0.00%) 3291 ( 0.00%) 70.02
halflif 28 ( 0.00%) 2311 ( 0.00%) 82.54
starcra 48 ( 0.00%) 11075 ( 0.00%) 230.73
everque 141 ( 0.00%) 28669 ( 0.00%) 203.33
unreal 28 ( 0.00%) 2299 ( 0.00%) 82.11
quake 7 ( 0.00%) 827 ( 0.00%) 118.14
cuseeme 2 ( 0.00%) 134 ( 0.00%) 67.00
other 2124957 ( 5.17%) 1604112821 ( 8.51%) 754.89
icmp 17828715 ( 43.36%) 1142117009 ( 6.06%) 64.06
ipip 186 ( 0.00%) 19350 ( 0.00%) 104.03
ipsec 25394 ( 0.06%) 8018028 ( 0.04%) 315.74
ip6 637681 ( 1.55%) 216035266 ( 1.15%) 338.78
other 47615 ( 0.12%) 13554688 ( 0.07%) 284.67
frag 496999 ( 1.21%) 449411675 ( 2.39%) 904.25
ip6 1872369 ( 4.55%) 1749608913 ( 9.29%) 934.44
tcp6 1507010 ( 3.67%) 1423931297 ( 7.56%) 944.87
http(s) 1287409 ( 3.13%) 1297602311 ( 6.89%) 1007.92
http(c) 78701 ( 0.19%) 12395189 ( 0.07%) 157.50
smtp 74 ( 0.00%) 25795 ( 0.00%) 348.58
ftp 64 ( 0.00%) 5704 ( 0.00%) 89.12
ssh 556 ( 0.00%) 422360 ( 0.00%) 759.64
dns 199 ( 0.00%) 57220 ( 0.00%) 287.54
bgp 91 ( 0.00%) 22604 ( 0.00%) 248.40
napster 5 ( 0.00%) 539 ( 0.00%) 107.80
other 139911 ( 0.34%) 113399575 ( 0.60%) 810.51
udp6 138760 ( 0.34%) 76724803 ( 0.41%) 552.93
dns 70715 ( 0.17%) 21299548 ( 0.11%) 301.20
realaud 1 ( 0.00%) 112 ( 0.00%) 112.00
everque 1 ( 0.00%) 113 ( 0.00%) 113.00
other 68043 ( 0.17%) 55425030 ( 0.29%) 814.56
icmp6 21855 ( 0.05%) 2546059 ( 0.01%) 116.50
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 204630 ( 0.50%) 246391262 ( 1.31%) 1204.08
tcpdump file: 201301281400.dump.gz (895.40 MB)