Traffic Trace Info
DumpFile: 201302061400.dump
FileSize: 2549.52MB
Id: 201302061400
StartTime: Wed Feb 6 14:00:00 2013
EndTime: Wed Feb 6 14:15:00 2013
TotalTime: 900.16 seconds
TotalCapSize: 1969.62MB CapLen: 96 bytes
# of packets: 38004079 (15445.10MB)
AvgRate: 143.94Mbps stddev:26.39M
IP flow (unique src/dst pair) Information
# of flows: 11361882 (avg. 3.34 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.8% 1.8% 1.6% 1.6% 1.4% 1.3% 1.3% 1.3% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 8662693
Top 10 bandwidth usage (bytes/total in %):
8.9% 7.4% 7.4% 6.3% 6.0% 4.0% 3.1% 2.1% 2.0% 2.0%
# of IPv6 addresses: 13558
Top 10 bandwidth usage (bytes/total in %):
13.9% 8.7% 5.8% 4.7% 4.7% 4.5% 3.0% 2.8% 2.8% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201302061400.pktlen.png)
detailed numbers
[ 32- 63]: 17314695
[ 64- 127]: 9314508
[ 128- 255]: 633837
[ 256- 511]: 628175
[ 512- 1023]: 946294
[ 1024- 2047]: 9166570
Protocol Breakdown
![[protocol breakdown chart]](201302061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38004079 (100.00%) 16195366111 (100.00%) 426.15
ip 36710492 ( 96.60%) 14946558087 ( 92.29%) 407.15
tcp 18913214 ( 49.77%) 12845123931 ( 79.31%) 679.16
http(s) 8162483 ( 21.48%) 9788857294 ( 60.44%) 1199.25
http(c) 7640045 ( 20.10%) 1325687437 ( 8.19%) 173.52
squid 106791 ( 0.28%) 103397736 ( 0.64%) 968.23
smtp 50588 ( 0.13%) 18260214 ( 0.11%) 360.96
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 14060 ( 0.04%) 4608919 ( 0.03%) 327.80
pop3 42742 ( 0.11%) 5924439 ( 0.04%) 138.61
imap 1783 ( 0.00%) 235428 ( 0.00%) 132.04
telnet 92104 ( 0.24%) 8268864 ( 0.05%) 89.78
ssh 32785 ( 0.09%) 5549146 ( 0.03%) 169.26
dns 3230 ( 0.01%) 1998997 ( 0.01%) 618.88
bgp 560 ( 0.00%) 130086 ( 0.00%) 232.30
napster 43 ( 0.00%) 7724 ( 0.00%) 179.63
realaud 11 ( 0.00%) 1017 ( 0.00%) 92.45
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 73640 ( 0.19%) 64034577 ( 0.40%) 869.56
hotline 26 ( 0.00%) 2752 ( 0.00%) 105.85
other 2692315 ( 7.08%) 1518158807 ( 9.37%) 563.89
udp 1915969 ( 5.04%) 862884849 ( 5.33%) 450.36
dns 485276 ( 1.28%) 157923886 ( 0.98%) 325.43
realaud 13 ( 0.00%) 980 ( 0.00%) 75.38
halflif 22829 ( 0.06%) 3727800 ( 0.02%) 163.29
starcra 21 ( 0.00%) 2173 ( 0.00%) 103.48
everque 151 ( 0.00%) 25498 ( 0.00%) 168.86
unreal 10 ( 0.00%) 1898 ( 0.00%) 189.80
quake 25 ( 0.00%) 2951 ( 0.00%) 118.04
cuseeme 2 ( 0.00%) 454 ( 0.00%) 227.00
other 1407436 ( 3.70%) 701004700 ( 4.33%) 498.07
icmp 15320290 ( 40.31%) 986768528 ( 6.09%) 64.41
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 51799 ( 0.14%) 23339542 ( 0.14%) 450.58
ip6 453177 ( 1.19%) 213477476 ( 1.32%) 471.07
other 55858 ( 0.15%) 14944491 ( 0.09%) 267.54
frag 11270 ( 0.03%) 13926133 ( 0.09%) 1235.68
ip6 1293587 ( 3.40%) 1248808024 ( 7.71%) 965.38
tcp6 977706 ( 2.57%) 981349400 ( 6.06%) 1003.73
http(s) 769145 ( 2.02%) 797850843 ( 4.93%) 1037.32
http(c) 52491 ( 0.14%) 5766119 ( 0.04%) 109.85
smtp 327 ( 0.00%) 170230 ( 0.00%) 520.58
ftp 65 ( 0.00%) 5806 ( 0.00%) 89.32
ssh 111 ( 0.00%) 14934 ( 0.00%) 134.54
dns 376 ( 0.00%) 94609 ( 0.00%) 251.62
bgp 101 ( 0.00%) 29332 ( 0.00%) 290.42
other 155090 ( 0.41%) 177417527 ( 1.10%) 1143.96
udp6 106788 ( 0.28%) 41766845 ( 0.26%) 391.12
dns 65997 ( 0.17%) 19885971 ( 0.12%) 301.32
unreal 1 ( 0.00%) 101 ( 0.00%) 101.00
other 40790 ( 0.11%) 21880773 ( 0.14%) 536.42
icmp6 25245 ( 0.07%) 4196066 ( 0.03%) 166.21
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 183818 ( 0.48%) 221491633 ( 1.37%) 1204.95
tcpdump file: 201302061400.dump.gz (853.66 MB)