Traffic Trace Info
DumpFile: 201302021400.dump
FileSize: 2258.60MB
Id: 201302021400
StartTime: Sat Feb 2 14:00:01 2013
EndTime: Sat Feb 2 14:15:00 2013
TotalTime: 899.87 seconds
TotalCapSize: 1720.34MB CapLen: 96 bytes
# of packets: 35275411 (15829.36MB)
AvgRate: 147.58Mbps stddev:29.32M
IP flow (unique src/dst pair) Information
# of flows: 12095059 (avg. 2.92 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 3.3% 2.5% 2.5% 2.2% 1.8% 1.5% 1.3% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 9500245
Top 10 bandwidth usage (bytes/total in %):
10.4% 8.7% 8.4% 6.0% 5.8% 5.8% 5.2% 4.3% 3.7% 3.2%
# of IPv6 addresses: 9947
Top 10 bandwidth usage (bytes/total in %):
14.7% 12.8% 11.5% 7.5% 7.5% 5.1% 4.9% 4.8% 3.9% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201302021400.pktlen.png)
detailed numbers
[ 32- 63]: 17551831
[ 64- 127]: 5909430
[ 128- 255]: 781161
[ 256- 511]: 538712
[ 512- 1023]: 524200
[ 1024- 2047]: 9970077
Protocol Breakdown
![[protocol breakdown chart]](201302021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35275411 (100.00%) 16598285220 (100.00%) 470.53
ip 33437054 ( 94.79%) 14792710872 ( 89.12%) 442.40
tcp 12606302 ( 35.74%) 10911756411 ( 65.74%) 865.58
http(s) 6725563 ( 19.07%) 8211907034 ( 49.47%) 1221.00
http(c) 3393718 ( 9.62%) 793408890 ( 4.78%) 233.79
squid 68450 ( 0.19%) 67017611 ( 0.40%) 979.07
smtp 31797 ( 0.09%) 6958444 ( 0.04%) 218.84
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 6206 ( 0.02%) 429484 ( 0.00%) 69.20
pop3 1760 ( 0.00%) 505839 ( 0.00%) 287.41
imap 2918 ( 0.01%) 356895 ( 0.00%) 122.31
telnet 4388 ( 0.01%) 1806312 ( 0.01%) 411.65
ssh 123571 ( 0.35%) 20505791 ( 0.12%) 165.94
dns 795 ( 0.00%) 76021 ( 0.00%) 95.62
bgp 521 ( 0.00%) 115844 ( 0.00%) 222.35
napster 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 9616 ( 0.03%) 634994 ( 0.00%) 66.04
icecast 7202 ( 0.02%) 3659073 ( 0.02%) 508.06
hotline 7 ( 0.00%) 832 ( 0.00%) 118.86
other 2229783 ( 6.32%) 1804372921 ( 10.87%) 809.21
udp 4024815 ( 11.41%) 2688037350 ( 16.19%) 667.87
dns 661641 ( 1.88%) 425308958 ( 2.56%) 642.81
realaud 22 ( 0.00%) 2023 ( 0.00%) 91.95
halflif 17 ( 0.00%) 2336 ( 0.00%) 137.41
starcra 34 ( 0.00%) 4683 ( 0.00%) 137.74
everque 36 ( 0.00%) 6598 ( 0.00%) 183.28
unreal 3 ( 0.00%) 575 ( 0.00%) 191.67
quake 98 ( 0.00%) 6520 ( 0.00%) 66.53
cuseeme 4 ( 0.00%) 615 ( 0.00%) 153.75
other 3362590 ( 9.53%) 2262327597 ( 13.63%) 672.79
icmp 16396482 ( 46.48%) 1054341989 ( 6.35%) 64.30
ipip 186 ( 0.00%) 19380 ( 0.00%) 104.19
ipsec 33181 ( 0.09%) 11978190 ( 0.07%) 361.00
ip6 324943 ( 0.92%) 112286138 ( 0.68%) 345.56
other 51145 ( 0.14%) 14291414 ( 0.09%) 279.43
frag 246011 ( 0.70%) 334689461 ( 2.02%) 1360.47
ip6 1838357 ( 5.21%) 1805574348 ( 10.88%) 982.17
tcp6 715915 ( 2.03%) 661059195 ( 3.98%) 923.38
http(s) 504153 ( 1.43%) 492756089 ( 2.97%) 977.39
http(c) 50199 ( 0.14%) 6513840 ( 0.04%) 129.76
squid 9 ( 0.00%) 1198 ( 0.00%) 133.11
smtp 769 ( 0.00%) 235778 ( 0.00%) 306.60
ftp 69 ( 0.00%) 6130 ( 0.00%) 88.84
dns 525 ( 0.00%) 271369 ( 0.00%) 516.89
bgp 94 ( 0.00%) 27530 ( 0.00%) 292.87
hotline 3 ( 0.00%) 254 ( 0.00%) 84.67
other 160094 ( 0.45%) 161247007 ( 0.97%) 1007.20
udp6 232008 ( 0.66%) 97934227 ( 0.59%) 422.12
dns 49838 ( 0.14%) 15561967 ( 0.09%) 312.25
everque 1 ( 0.00%) 115 ( 0.00%) 115.00
quake 6 ( 0.00%) 580 ( 0.00%) 96.67
other 182163 ( 0.52%) 82371565 ( 0.50%) 452.19
icmp6 27407 ( 0.08%) 2885544 ( 0.02%) 105.28
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 862997 ( 2.45%) 1043691302 ( 6.29%) 1209.38
tcpdump file: 201302021400.dump.gz (758.12 MB)