Traffic Trace Info
DumpFile: 201302011400.dump
FileSize: 2255.81MB
Id: 201302011400
StartTime: Fri Feb 1 14:00:01 2013
EndTime: Fri Feb 1 14:15:00 2013
TotalTime: 899.41 seconds
TotalCapSize: 1786.71MB CapLen: 96 bytes
# of packets: 30742615 (20487.35MB)
AvgRate: 191.09Mbps stddev:32.40M
IP flow (unique src/dst pair) Information
# of flows: 1846679 (avg. 16.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.0% 6.5% 4.7% 2.2% 1.8% 1.6% 1.5% 1.4% 1.2% 1.0%
IP address Information
# of IPv4 addresses: 1405995
Top 10 bandwidth usage (bytes/total in %):
9.0% 8.6% 8.6% 7.2% 7.1% 7.0% 4.9% 4.9% 4.8% 3.5%
# of IPv6 addresses: 12292
Top 10 bandwidth usage (bytes/total in %):
8.3% 7.1% 7.0% 7.0% 6.7% 4.6% 4.6% 3.8% 3.6% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201302011400.pktlen.png)
detailed numbers
[ 32- 63]: 4949272
[ 64- 127]: 9991353
[ 128- 255]: 682477
[ 256- 511]: 757018
[ 512- 1023]: 1010557
[ 1024- 2047]: 13351938
Protocol Breakdown
![[protocol breakdown chart]](201302011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30742615 (100.00%) 21482547334 (100.00%) 698.79
ip 29218700 ( 95.04%) 20274323838 ( 94.38%) 693.88
tcp 23875178 ( 77.66%) 18408495478 ( 85.69%) 771.03
http(s) 11244667 ( 36.58%) 13963575188 ( 65.00%) 1241.80
http(c) 8333724 ( 27.11%) 881851643 ( 4.10%) 105.82
squid 26540 ( 0.09%) 16441857 ( 0.08%) 619.51
smtp 97196 ( 0.32%) 65259511 ( 0.30%) 671.42
ftp 70745 ( 0.23%) 90366344 ( 0.42%) 1277.35
pop3 5026 ( 0.02%) 2680051 ( 0.01%) 533.24
imap 2734 ( 0.01%) 352888 ( 0.00%) 129.07
telnet 20040 ( 0.07%) 3017556 ( 0.01%) 150.58
ssh 59981 ( 0.20%) 10516820 ( 0.05%) 175.34
dns 4013 ( 0.01%) 2093250 ( 0.01%) 521.62
bgp 529 ( 0.00%) 115324 ( 0.00%) 218.00
napster 29 ( 0.00%) 4051 ( 0.00%) 139.69
realaud 15 ( 0.00%) 1614 ( 0.00%) 107.60
rtsp 220 ( 0.00%) 16305 ( 0.00%) 74.11
icecast 29718 ( 0.10%) 17881479 ( 0.08%) 601.71
hotline 15 ( 0.00%) 1972 ( 0.00%) 131.47
other 3979986 ( 12.95%) 3354319625 ( 15.61%) 842.80
udp 2695653 ( 8.77%) 1398887414 ( 6.51%) 518.94
dns 632734 ( 2.06%) 262553240 ( 1.22%) 414.95
rip 1 ( 0.00%) 79 ( 0.00%) 79.00
realaud 39 ( 0.00%) 3039 ( 0.00%) 77.92
halflif 14 ( 0.00%) 1107 ( 0.00%) 79.07
starcra 40 ( 0.00%) 5947 ( 0.00%) 148.68
everque 80 ( 0.00%) 25725 ( 0.00%) 321.56
unreal 7 ( 0.00%) 1135 ( 0.00%) 162.14
quake 6 ( 0.00%) 738 ( 0.00%) 123.00
cuseeme 2 ( 0.00%) 189 ( 0.00%) 94.50
other 2043960 ( 6.65%) 1134741567 ( 5.28%) 555.17
icmp 1742454 ( 5.67%) 174701945 ( 0.81%) 100.26
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 23446 ( 0.08%) 8241532 ( 0.04%) 351.51
ip6 835799 ( 2.72%) 270526800 ( 1.26%) 323.67
other 45985 ( 0.15%) 13451399 ( 0.06%) 292.52
frag 156581 ( 0.51%) 166973287 ( 0.78%) 1066.37
ip6 1523915 ( 4.96%) 1208223496 ( 5.62%) 792.84
tcp6 1198766 ( 3.90%) 938238610 ( 4.37%) 782.67
http(s) 721055 ( 2.35%) 710579387 ( 3.31%) 985.47
http(c) 258536 ( 0.84%) 23413758 ( 0.11%) 90.56
squid 36 ( 0.00%) 3487 ( 0.00%) 96.86
smtp 721 ( 0.00%) 280313 ( 0.00%) 388.78
ftp 756 ( 0.00%) 67050 ( 0.00%) 88.69
ssh 105 ( 0.00%) 14578 ( 0.00%) 138.84
dns 311 ( 0.00%) 80657 ( 0.00%) 259.35
bgp 104 ( 0.00%) 27364 ( 0.00%) 263.12
other 217142 ( 0.71%) 203772016 ( 0.95%) 938.43
udp6 92290 ( 0.30%) 34475644 ( 0.16%) 373.56
dns 66711 ( 0.22%) 20171230 ( 0.09%) 302.37
unreal 2 ( 0.00%) 214 ( 0.00%) 107.00
other 25577 ( 0.08%) 14304200 ( 0.07%) 559.26
icmp6 40782 ( 0.13%) 3560661 ( 0.02%) 87.31
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 192046 ( 0.62%) 231944365 ( 1.08%) 1207.75
tcpdump file: 201302011400.dump.gz (710.39 MB)