Traffic Trace Info
DumpFile: 201302041400.dump
FileSize: 2440.33MB
Id: 201302041400
StartTime: Mon Feb 4 14:00:01 2013
EndTime: Mon Feb 4 14:15:00 2013
TotalTime: 899.76 seconds
TotalCapSize: 1873.16MB CapLen: 96 bytes
# of packets: 37169841 (15377.68MB)
AvgRate: 143.33Mbps stddev:23.77M
IP flow (unique src/dst pair) Information
# of flows: 12288616 (avg. 3.02 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 2.1% 1.8% 1.5% 1.5% 1.4% 1.0% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 9569241
Top 10 bandwidth usage (bytes/total in %):
9.5% 8.7% 6.1% 5.7% 4.5% 4.0% 4.0% 3.7% 2.4% 2.1%
# of IPv6 addresses: 12923
Top 10 bandwidth usage (bytes/total in %):
16.4% 8.2% 7.7% 7.6% 7.0% 5.5% 5.5% 5.3% 3.7% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201302041400.pktlen.png)
detailed numbers
[ 32- 63]: 18057849
[ 64- 127]: 7522576
[ 128- 255]: 850857
[ 256- 511]: 708005
[ 512- 1023]: 761059
[ 1024- 2047]: 9269495
Protocol Breakdown
![[protocol breakdown chart]](201302041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37169841 (100.00%) 16124665528 (100.00%) 433.81
ip 35460684 ( 95.40%) 14531152393 ( 90.12%) 409.78
tcp 15496635 ( 41.69%) 11610386788 ( 72.00%) 749.22
http(s) 8060682 ( 21.69%) 9439336578 ( 58.54%) 1171.03
http(c) 5197294 ( 13.98%) 945883630 ( 5.87%) 182.00
squid 26578 ( 0.07%) 10890833 ( 0.07%) 409.77
smtp 41128 ( 0.11%) 9884498 ( 0.06%) 240.34
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 26854 ( 0.07%) 33539764 ( 0.21%) 1248.97
pop3 6493 ( 0.02%) 2403022 ( 0.01%) 370.09
imap 3431 ( 0.01%) 683024 ( 0.00%) 199.07
telnet 29847 ( 0.08%) 3667859 ( 0.02%) 122.89
ssh 404285 ( 1.09%) 64810089 ( 0.40%) 160.31
dns 2662 ( 0.01%) 1939523 ( 0.01%) 728.60
bgp 521 ( 0.00%) 108300 ( 0.00%) 207.87
napster 20 ( 0.00%) 2124 ( 0.00%) 106.20
realaud 7 ( 0.00%) 424 ( 0.00%) 60.57
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 65580 ( 0.18%) 47657268 ( 0.30%) 726.70
hotline 13 ( 0.00%) 3048 ( 0.00%) 234.46
other 1631236 ( 4.39%) 1049576292 ( 6.51%) 643.42
udp 3062333 ( 8.24%) 1673310383 ( 10.38%) 546.42
dns 925243 ( 2.49%) 533098206 ( 3.31%) 576.17
realaud 10 ( 0.00%) 671 ( 0.00%) 67.10
halflif 11 ( 0.00%) 1153 ( 0.00%) 104.82
starcra 17 ( 0.00%) 2266 ( 0.00%) 133.29
everque 76 ( 0.00%) 26317 ( 0.00%) 346.28
unreal 3 ( 0.00%) 317 ( 0.00%) 105.67
quake 47 ( 0.00%) 4048 ( 0.00%) 86.13
cuseeme 2 ( 0.00%) 178 ( 0.00%) 89.00
other 2136660 ( 5.75%) 1139923376 ( 7.07%) 533.51
icmp 16378063 ( 44.06%) 1051273152 ( 6.52%) 64.19
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 26566 ( 0.07%) 8755036 ( 0.05%) 329.56
ip6 444935 ( 1.20%) 171465862 ( 1.06%) 385.37
other 51967 ( 0.14%) 15941902 ( 0.10%) 306.77
frag 284199 ( 0.76%) 378484210 ( 2.35%) 1331.76
ip6 1709157 ( 4.60%) 1593513135 ( 9.88%) 932.34
tcp6 1037492 ( 2.79%) 877035239 ( 5.44%) 845.34
http(s) 771851 ( 2.08%) 752452303 ( 4.67%) 974.87
http(c) 96299 ( 0.26%) 12221612 ( 0.08%) 126.91
smtp 97 ( 0.00%) 32875 ( 0.00%) 338.92
ftp 66 ( 0.00%) 5923 ( 0.00%) 89.74
pop3 17 ( 0.00%) 3708 ( 0.00%) 218.12
dns 429 ( 0.00%) 124420 ( 0.00%) 290.02
bgp 100 ( 0.00%) 30560 ( 0.00%) 305.60
other 168633 ( 0.45%) 112163838 ( 0.70%) 665.14
udp6 174013 ( 0.47%) 144641751 ( 0.90%) 831.21
dns 70176 ( 0.19%) 21096348 ( 0.13%) 300.62
realaud 2 ( 0.00%) 203 ( 0.00%) 101.50
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 1 ( 0.00%) 105 ( 0.00%) 105.00
cuseeme 1 ( 0.00%) 106 ( 0.00%) 106.00
other 103832 ( 0.28%) 123544883 ( 0.77%) 1189.85
icmp6 27404 ( 0.07%) 3760890 ( 0.02%) 137.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 470218 ( 1.27%) 568071175 ( 3.52%) 1208.10
tcpdump file: 201302041400.dump.gz (845.22 MB)