Traffic Trace Info
DumpFile: 201302121400.dump
FileSize: 3599.36MB
Id: 201302121400
StartTime: Tue Feb 12 14:00:01 2013
EndTime: Tue Feb 12 14:15:01 2013
TotalTime: 900.14 seconds
TotalCapSize: -1347.42MB CapLen: 96 bytes
# of packets: 55756346 (24555.16MB)
AvgRate: 228.81Mbps stddev:73.04M
IP flow (unique src/dst pair) Information
# of flows: 21991646 (avg. 2.54 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.2% 4.4% 3.6% 2.6% 1.9% 1.5% 1.5% 1.3% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 17363143
Top 10 bandwidth usage (bytes/total in %):
14.8% 14.2% 12.5% 6.4% 6.3% 4.8% 4.4% 3.9% 3.9% 3.7%
# of IPv6 addresses: 10824
Top 10 bandwidth usage (bytes/total in %):
13.0% 8.3% 7.5% 6.3% 5.7% 5.4% 4.3% 3.3% 3.2% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201302121400.pktlen.png)
detailed numbers
[ 32- 63]: 30354949
[ 64- 127]: 7458830
[ 128- 255]: 728830
[ 256- 511]: 777710
[ 512- 1023]: 1002398
[ 1024- 2047]: 15433629
Protocol Breakdown
![[protocol breakdown chart]](201302121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 55756346 (100.00%) 25747953416 (100.00%) 461.79
ip 53923053 ( 96.71%) 23965945018 ( 93.08%) 444.45
tcp 21844059 ( 39.18%) 18960970406 ( 73.64%) 868.01
http(s) 12326054 ( 22.11%) 15659203529 ( 60.82%) 1270.41
http(c) 6397416 ( 11.47%) 1754709097 ( 6.81%) 274.28
squid 120214 ( 0.22%) 102830167 ( 0.40%) 855.39
smtp 47819 ( 0.09%) 19527423 ( 0.08%) 408.36
nntp 64 ( 0.00%) 3980 ( 0.00%) 62.19
ftp 7301 ( 0.01%) 566074 ( 0.00%) 77.53
pop3 1008759 ( 1.81%) 72136517 ( 0.28%) 71.51
imap 4847 ( 0.01%) 785860 ( 0.00%) 162.13
telnet 3613 ( 0.01%) 1762782 ( 0.01%) 487.90
ssh 130070 ( 0.23%) 33591486 ( 0.13%) 258.26
dns 1559 ( 0.00%) 468426 ( 0.00%) 300.47
bgp 871 ( 0.00%) 342831 ( 0.00%) 393.61
napster 12 ( 0.00%) 1457 ( 0.00%) 121.42
realaud 317 ( 0.00%) 44611 ( 0.00%) 140.73
rtsp 7 ( 0.00%) 420 ( 0.00%) 60.00
icecast 745662 ( 1.34%) 859840894 ( 3.34%) 1153.12
hotline 15 ( 0.00%) 3835 ( 0.00%) 255.67
other 1049454 ( 1.88%) 455150717 ( 1.77%) 433.70
udp 4170440 ( 7.48%) 2971006171 ( 11.54%) 712.40
dns 1231018 ( 2.21%) 697116101 ( 2.71%) 566.29
realaud 24 ( 0.00%) 2209 ( 0.00%) 92.04
halflif 72 ( 0.00%) 5060 ( 0.00%) 70.28
starcra 15 ( 0.00%) 972 ( 0.00%) 64.80
everque 103 ( 0.00%) 15504 ( 0.00%) 150.52
unreal 51 ( 0.00%) 3514 ( 0.00%) 68.90
quake 21 ( 0.00%) 2126 ( 0.00%) 101.24
cuseeme 5 ( 0.00%) 403 ( 0.00%) 80.60
other 2936458 ( 5.27%) 2270797661 ( 8.82%) 773.31
icmp 27256257 ( 48.88%) 1696284419 ( 6.59%) 62.23
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 20448 ( 0.04%) 7323828 ( 0.03%) 358.17
ip6 576331 ( 1.03%) 314861692 ( 1.22%) 546.32
other 55334 ( 0.10%) 15479342 ( 0.06%) 279.74
frag 399796 ( 0.72%) 514882022 ( 2.00%) 1287.86
ip6 1833293 ( 3.29%) 1782008398 ( 6.92%) 972.03
tcp6 997419 ( 1.79%) 994639830 ( 3.86%) 997.21
http(s) 828627 ( 1.49%) 917518585 ( 3.56%) 1107.28
http(c) 68455 ( 0.12%) 8951185 ( 0.03%) 130.76
smtp 827 ( 0.00%) 338601 ( 0.00%) 409.43
ftp 64 ( 0.00%) 5716 ( 0.00%) 89.31
ssh 24 ( 0.00%) 5908 ( 0.00%) 246.17
dns 216 ( 0.00%) 105079 ( 0.00%) 486.48
bgp 109 ( 0.00%) 36282 ( 0.00%) 332.86
other 99097 ( 0.18%) 67678474 ( 0.26%) 682.95
udp6 517721 ( 0.93%) 438231486 ( 1.70%) 846.46
dns 64883 ( 0.12%) 21438939 ( 0.08%) 330.42
halflif 1 ( 0.00%) 99 ( 0.00%) 99.00
quake 1 ( 0.00%) 124 ( 0.00%) 124.00
other 452836 ( 0.81%) 416792324 ( 1.62%) 920.40
icmp6 24649 ( 0.04%) 2894121 ( 0.01%) 117.41
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 293474 ( 0.53%) 346238881 ( 1.34%) 1179.79
tcpdump file: 201302121400.dump.gz (1168.08 MB)