Traffic Trace Info
DumpFile: 201301301400.dump
FileSize: 2139.80MB
Id: 201301301400
StartTime: Wed Jan 30 14:00:01 2013
EndTime: Wed Jan 30 14:15:00 2013
TotalTime: 899.70 seconds
TotalCapSize: 1668.12MB CapLen: 96 bytes
# of packets: 30911894 (18572.69MB)
AvgRate: 173.19Mbps stddev:36.66M
IP flow (unique src/dst pair) Information
# of flows: 7860445 (avg. 3.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 5.1% 4.3% 3.2% 3.0% 2.7% 2.2% 1.8% 1.5% 1.2%
IP address Information
# of IPv4 addresses: 6060196
Top 10 bandwidth usage (bytes/total in %):
16.7% 9.2% 6.2% 6.1% 5.5% 4.6% 4.6% 3.4% 3.4% 3.2%
# of IPv6 addresses: 11291
Top 10 bandwidth usage (bytes/total in %):
8.5% 7.8% 7.7% 5.8% 4.8% 4.6% 4.1% 3.8% 3.8% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201301301400.pktlen.png)
detailed numbers
[ 32- 63]: 11091402
[ 64- 127]: 5883341
[ 128- 255]: 673712
[ 256- 511]: 681553
[ 512- 1023]: 823473
[ 1024- 2047]: 11758413
Protocol Breakdown
![[protocol breakdown chart]](201301301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30911894 (100.00%) 19474876393 (100.00%) 630.01
ip 29279011 ( 94.72%) 18303260512 ( 93.98%) 625.13
tcp 18491022 ( 59.82%) 16744797021 ( 85.98%) 905.56
http(s) 11902250 ( 38.50%) 14644249988 ( 75.20%) 1230.38
http(c) 4850029 ( 15.69%) 1186636733 ( 6.09%) 244.67
squid 54265 ( 0.18%) 47880633 ( 0.25%) 882.35
smtp 47864 ( 0.15%) 14428551 ( 0.07%) 301.45
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 14347 ( 0.05%) 3390443 ( 0.02%) 236.32
pop3 6198 ( 0.02%) 2539091 ( 0.01%) 409.66
imap 3712 ( 0.01%) 580584 ( 0.00%) 156.41
telnet 3843 ( 0.01%) 1768465 ( 0.01%) 460.18
ssh 217869 ( 0.70%) 63600519 ( 0.33%) 291.92
dns 5351 ( 0.02%) 3601250 ( 0.02%) 673.01
bgp 569 ( 0.00%) 155872 ( 0.00%) 273.94
napster 17 ( 0.00%) 1072 ( 0.00%) 63.06
realaud 15 ( 0.00%) 1200 ( 0.00%) 80.00
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 15736 ( 0.05%) 14250351 ( 0.07%) 905.59
hotline 102 ( 0.00%) 9732 ( 0.00%) 95.41
other 1368848 ( 4.43%) 761702111 ( 3.91%) 556.45
udp 1762387 ( 5.70%) 735618645 ( 3.78%) 417.40
dns 860360 ( 2.78%) 432639132 ( 2.22%) 502.86
rip 16 ( 0.00%) 1129 ( 0.00%) 70.56
realaud 8 ( 0.00%) 586 ( 0.00%) 73.25
halflif 95 ( 0.00%) 10568 ( 0.00%) 111.24
starcra 10 ( 0.00%) 1398 ( 0.00%) 139.80
everque 42 ( 0.00%) 7815 ( 0.00%) 186.07
unreal 6 ( 0.00%) 877 ( 0.00%) 146.17
quake 5 ( 0.00%) 476 ( 0.00%) 95.20
cuseeme 16 ( 0.00%) 1157 ( 0.00%) 72.31
other 900798 ( 2.91%) 302328662 ( 1.55%) 335.62
icmp 8393040 ( 27.15%) 568278503 ( 2.92%) 67.71
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 26607 ( 0.09%) 8738806 ( 0.04%) 328.44
ip6 557519 ( 1.80%) 231495207 ( 1.19%) 415.22
other 48252 ( 0.16%) 14313170 ( 0.07%) 296.63
frag 211176 ( 0.68%) 267725891 ( 1.37%) 1267.79
ip6 1632883 ( 5.28%) 1171615881 ( 6.02%) 717.51
tcp6 1196609 ( 3.87%) 842623498 ( 4.33%) 704.18
http(s) 644069 ( 2.08%) 613970489 ( 3.15%) 953.27
http(c) 322824 ( 1.04%) 42246079 ( 0.22%) 130.86
smtp 177 ( 0.00%) 59036 ( 0.00%) 333.54
ftp 66 ( 0.00%) 5876 ( 0.00%) 89.03
ssh 105 ( 0.00%) 13830 ( 0.00%) 131.71
dns 303 ( 0.00%) 76103 ( 0.00%) 251.17
bgp 89 ( 0.00%) 23727 ( 0.00%) 266.60
other 228976 ( 0.74%) 186228358 ( 0.96%) 813.31
udp6 205653 ( 0.67%) 102271283 ( 0.53%) 497.30
dns 63597 ( 0.21%) 18943978 ( 0.10%) 297.88
realaud 1 ( 0.00%) 105 ( 0.00%) 105.00
halflif 1 ( 0.00%) 102 ( 0.00%) 102.00
starcra 144 ( 0.00%) 20833 ( 0.00%) 144.67
other 141910 ( 0.46%) 83306265 ( 0.43%) 587.04
icmp6 38749 ( 0.13%) 3853031 ( 0.02%) 99.44
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 191841 ( 0.62%) 222863853 ( 1.14%) 1161.71
tcpdump file: 201301301400.dump.gz (687.73 MB)