Traffic Trace Info
DumpFile: 201302111400.dump
FileSize: 3269.37MB
Id: 201302111400
StartTime: Mon Feb 11 14:00:00 2013
EndTime: Mon Feb 11 14:15:00 2013
TotalTime: 900.06 seconds
TotalCapSize: -1633.41MB CapLen: 96 bytes
# of packets: 52872297 (15396.32MB)
AvgRate: 143.48Mbps stddev:20.93M
IP flow (unique src/dst pair) Information
# of flows: 28230382 (avg. 1.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 3.8% 2.9% 2.7% 2.7% 2.4% 2.2% 1.6% 1.4% 1.2%
IP address Information
# of IPv4 addresses: 22459609
Top 10 bandwidth usage (bytes/total in %):
14.9% 9.6% 9.1% 7.6% 6.0% 5.4% 4.2% 4.1% 3.2% 3.2%
# of IPv6 addresses: 10438
Top 10 bandwidth usage (bytes/total in %):
27.9% 27.4% 11.6% 5.1% 4.8% 4.4% 3.8% 2.9% 2.9% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201302111400.pktlen.png)
detailed numbers
[ 32- 63]: 33475312
[ 64- 127]: 8023176
[ 128- 255]: 1043778
[ 256- 511]: 432684
[ 512- 1023]: 1562245
[ 1024- 2047]: 8335102
Protocol Breakdown
![[protocol breakdown chart]](201302111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 52872297 (100.00%) 16144211346 (100.00%) 305.34
ip 51381729 ( 97.18%) 14693412897 ( 91.01%) 285.97
tcp 12231418 ( 23.13%) 9198959058 ( 56.98%) 752.08
http(s) 5671531 ( 10.73%) 6893135646 ( 42.70%) 1215.39
http(c) 4414960 ( 8.35%) 1190124556 ( 7.37%) 269.57
squid 21045 ( 0.04%) 9985348 ( 0.06%) 474.48
smtp 49487 ( 0.09%) 19998502 ( 0.12%) 404.12
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 1503 ( 0.00%) 118711 ( 0.00%) 78.98
pop3 797 ( 0.00%) 113603 ( 0.00%) 142.54
imap 3792 ( 0.01%) 856199 ( 0.01%) 225.79
telnet 3404 ( 0.01%) 1737449 ( 0.01%) 510.41
ssh 623937 ( 1.18%) 76300254 ( 0.47%) 122.29
dns 512 ( 0.00%) 84673 ( 0.00%) 165.38
bgp 529 ( 0.00%) 104176 ( 0.00%) 196.93
napster 25 ( 0.00%) 2921 ( 0.00%) 116.84
realaud 10 ( 0.00%) 1338 ( 0.00%) 133.80
rtsp 11 ( 0.00%) 660 ( 0.00%) 60.00
icecast 457 ( 0.00%) 72466 ( 0.00%) 158.57
other 1439417 ( 2.72%) 1006322496 ( 6.23%) 699.12
udp 4973409 ( 9.41%) 3056973332 ( 18.94%) 614.66
dns 938561 ( 1.78%) 522291423 ( 3.24%) 556.48
realaud 5 ( 0.00%) 573 ( 0.00%) 114.60
halflif 7 ( 0.00%) 799 ( 0.00%) 114.14
starcra 31 ( 0.00%) 2699 ( 0.00%) 87.06
everque 29 ( 0.00%) 4908 ( 0.00%) 169.24
unreal 8 ( 0.00%) 527 ( 0.00%) 65.88
quake 24 ( 0.00%) 1964 ( 0.00%) 81.83
cuseeme 1 ( 0.00%) 94 ( 0.00%) 94.00
other 4031467 ( 7.62%) 2531254885 ( 15.68%) 627.87
icmp 33715938 ( 63.77%) 2272809947 ( 14.08%) 67.41
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 24649 ( 0.05%) 9544770 ( 0.06%) 387.23
ip6 315501 ( 0.60%) 97628562 ( 0.60%) 309.44
other 120629 ( 0.23%) 57477958 ( 0.36%) 476.49
frag 319322 ( 0.60%) 383967822 ( 2.38%) 1202.45
ip6 1490568 ( 2.82%) 1450798449 ( 8.99%) 973.32
tcp6 1247706 ( 2.36%) 1247003211 ( 7.72%) 999.44
http(s) 746791 ( 1.41%) 809229044 ( 5.01%) 1083.61
http(c) 42554 ( 0.08%) 8037110 ( 0.05%) 188.87
smtp 214 ( 0.00%) 108664 ( 0.00%) 507.78
ftp 158 ( 0.00%) 16272 ( 0.00%) 102.99
dns 171 ( 0.00%) 71779 ( 0.00%) 419.76
bgp 97 ( 0.00%) 31275 ( 0.00%) 322.42
other 457721 ( 0.87%) 429509067 ( 2.66%) 938.36
udp6 64368 ( 0.12%) 23215863 ( 0.14%) 360.67
dns 50171 ( 0.09%) 15524162 ( 0.10%) 309.43
starcra 1 ( 0.00%) 106 ( 0.00%) 106.00
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
other 14195 ( 0.03%) 7691487 ( 0.05%) 541.84
icmp6 30330 ( 0.06%) 3216130 ( 0.02%) 106.04
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 148134 ( 0.28%) 177359165 ( 1.10%) 1197.29
tcpdump file: 201302111400.dump.gz (1082.95 MB)