Traffic Trace Info
DumpFile: 201301311400.dump
FileSize: 1819.81MB
Id: 201301311400
StartTime: Thu Jan 31 14:00:00 2013
EndTime: Thu Jan 31 14:15:00 2013
TotalTime: 900.09 seconds
TotalCapSize: 1430.84MB CapLen: 96 bytes
# of packets: 25490831 (17939.78MB)
AvgRate: 167.21Mbps stddev:43.58M
IP flow (unique src/dst pair) Information
# of flows: 1722924 (avg. 14.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.4% 2.4% 1.7% 1.5% 1.5% 1.5% 1.3% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 1326010
Top 10 bandwidth usage (bytes/total in %):
21.0% 14.5% 9.2% 5.0% 3.1% 2.6% 2.6% 2.2% 1.9% 1.8%
# of IPv6 addresses: 11015
Top 10 bandwidth usage (bytes/total in %):
14.2% 7.2% 6.2% 5.5% 5.3% 4.7% 3.7% 3.0% 2.9% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201301311400.pktlen.png)
detailed numbers
[ 32- 63]: 4744548
[ 64- 127]: 6515816
[ 128- 255]: 721184
[ 256- 511]: 813770
[ 512- 1023]: 939247
[ 1024- 2047]: 11756266
Protocol Breakdown
![[protocol breakdown chart]](201301311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25490831 (100.00%) 18811223028 (100.00%) 737.96
ip 23921034 ( 93.84%) 17516026483 ( 93.11%) 732.24
tcp 18514845 ( 72.63%) 15699805790 ( 83.46%) 847.96
http(s) 9917474 ( 38.91%) 11826753026 ( 62.87%) 1192.52
http(c) 5805724 ( 22.78%) 1884838571 ( 10.02%) 324.65
squid 165226 ( 0.65%) 117674215 ( 0.63%) 712.20
smtp 68889 ( 0.27%) 46520611 ( 0.25%) 675.30
nntp 4 ( 0.00%) 240 ( 0.00%) 60.00
ftp 7607 ( 0.03%) 573658 ( 0.00%) 75.41
pop3 4958 ( 0.02%) 2189894 ( 0.01%) 441.69
imap 3194 ( 0.01%) 494849 ( 0.00%) 154.93
telnet 16573 ( 0.07%) 2713431 ( 0.01%) 163.73
ssh 226672 ( 0.89%) 46546849 ( 0.25%) 205.35
dns 4161 ( 0.02%) 2033568 ( 0.01%) 488.72
bgp 605 ( 0.00%) 164132 ( 0.00%) 271.29
napster 33 ( 0.00%) 3584 ( 0.00%) 108.61
realaud 24 ( 0.00%) 4209 ( 0.00%) 175.38
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 21809 ( 0.09%) 18921117 ( 0.10%) 867.58
hotline 7 ( 0.00%) 788 ( 0.00%) 112.57
other 2271883 ( 8.91%) 1750372928 ( 9.30%) 770.45
udp 2812093 ( 11.03%) 1068963910 ( 5.68%) 380.13
dns 904097 ( 3.55%) 385665679 ( 2.05%) 426.58
realaud 12 ( 0.00%) 1033 ( 0.00%) 86.08
halflif 5 ( 0.00%) 1254 ( 0.00%) 250.80
starcra 23 ( 0.00%) 3930 ( 0.00%) 170.87
everque 155 ( 0.00%) 24364 ( 0.00%) 157.19
unreal 15 ( 0.00%) 1503 ( 0.00%) 100.20
quake 33 ( 0.00%) 2492 ( 0.00%) 75.52
cuseeme 2 ( 0.00%) 169 ( 0.00%) 84.50
other 1906886 ( 7.48%) 682695828 ( 3.63%) 358.02
icmp 1993572 ( 7.82%) 512139466 ( 2.72%) 256.90
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 26980 ( 0.11%) 8986852 ( 0.05%) 333.09
ip6 528465 ( 2.07%) 212385139 ( 1.13%) 401.89
other 44895 ( 0.18%) 13726166 ( 0.07%) 305.74
frag 185478 ( 0.73%) 214652606 ( 1.14%) 1157.29
ip6 1569797 ( 6.16%) 1295196545 ( 6.89%) 825.07
tcp6 1098836 ( 4.31%) 906043317 ( 4.82%) 824.55
http(s) 782502 ( 3.07%) 734235824 ( 3.90%) 938.32
http(c) 136910 ( 0.54%) 15263549 ( 0.08%) 111.49
squid 22 ( 0.00%) 3729 ( 0.00%) 169.50
smtp 661 ( 0.00%) 182834 ( 0.00%) 276.60
ftp 66 ( 0.00%) 5876 ( 0.00%) 89.03
ssh 865 ( 0.00%) 627882 ( 0.00%) 725.88
dns 309 ( 0.00%) 69314 ( 0.00%) 224.32
bgp 93 ( 0.00%) 20300 ( 0.00%) 218.28
other 177408 ( 0.70%) 155634009 ( 0.83%) 877.27
udp6 372210 ( 1.46%) 319172969 ( 1.70%) 857.51
dns 68110 ( 0.27%) 20411503 ( 0.11%) 299.68
other 304100 ( 1.19%) 298761466 ( 1.59%) 982.44
icmp6 41308 ( 0.16%) 3991236 ( 0.02%) 96.62
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 57413 ( 0.23%) 65984943 ( 0.35%) 1149.30
tcpdump file: 201301311400.dump.gz (602.92 MB)