Traffic Trace Info
DumpFile: 201302131400.dump
FileSize: 4120.20MB
Id: 201302131400
StartTime: Wed Feb 13 14:00:00 2013
EndTime: Wed Feb 13 14:15:01 2013
TotalTime: 900.46 seconds
TotalCapSize: -946.18MB CapLen: 96 bytes
# of packets: 63594673 (25957.07MB)
AvgRate: 241.83Mbps stddev:82.75M
IP flow (unique src/dst pair) Information
# of flows: 28265579 (avg. 2.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
17.2% 15.3% 4.9% 1.0% 0.9% 0.7% 0.7% 0.7% 0.6% 0.5%
IP address Information
# of IPv4 addresses: 22060753
Top 10 bandwidth usage (bytes/total in %):
30.3% 18.7% 17.0% 16.7% 5.3% 4.5% 3.5% 2.4% 2.1% 1.4%
# of IPv6 addresses: 9542
Top 10 bandwidth usage (bytes/total in %):
18.6% 11.8% 10.3% 4.6% 4.5% 4.0% 3.5% 3.3% 3.2% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201302131400.pktlen.png)
detailed numbers
[ 32- 63]: 34992060
[ 64- 127]: 10250433
[ 128- 255]: 852639
[ 256- 511]: 698211
[ 512- 1023]: 853887
[ 1024- 2047]: 15947443
Protocol Breakdown
![[protocol breakdown chart]](201302131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 63594673 (100.00%) 27217964997 (100.00%) 427.99
ip 61791675 ( 97.16%) 25366221757 ( 93.20%) 410.51
tcp 24002322 ( 37.74%) 21308175105 ( 78.29%) 887.75
http(s) 10104500 ( 15.89%) 12853724733 ( 47.23%) 1272.08
http(c) 5596338 ( 8.80%) 892200191 ( 3.28%) 159.43
squid 25958 ( 0.04%) 12862904 ( 0.05%) 495.53
smtp 49751 ( 0.08%) 20400498 ( 0.07%) 410.05
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 3620 ( 0.01%) 267952 ( 0.00%) 74.02
pop3 5454 ( 0.01%) 3002177 ( 0.01%) 550.45
imap 2527 ( 0.00%) 460479 ( 0.00%) 182.22
telnet 3631 ( 0.01%) 1771412 ( 0.01%) 487.86
ssh 32697 ( 0.05%) 5744650 ( 0.02%) 175.69
dns 1966 ( 0.00%) 153663 ( 0.00%) 78.16
bgp 523 ( 0.00%) 111765 ( 0.00%) 213.70
napster 94 ( 0.00%) 8914 ( 0.00%) 94.83
realaud 15 ( 0.00%) 1655 ( 0.00%) 110.33
rtsp 287967 ( 0.45%) 291005647 ( 1.07%) 1010.55
icecast 54599 ( 0.09%) 46754630 ( 0.17%) 856.33
hotline 33 ( 0.00%) 3635 ( 0.00%) 110.15
other 7832648 ( 12.32%) 7179700140 ( 26.38%) 916.64
udp 3426951 ( 5.39%) 1794655391 ( 6.59%) 523.69
dns 965396 ( 1.52%) 565951668 ( 2.08%) 586.24
rip 3 ( 0.00%) 270 ( 0.00%) 90.00
realaud 11 ( 0.00%) 1362 ( 0.00%) 123.82
halflif 20 ( 0.00%) 2386 ( 0.00%) 119.30
starcra 44 ( 0.00%) 5721 ( 0.00%) 130.02
everque 92 ( 0.00%) 18121 ( 0.00%) 196.97
unreal 15 ( 0.00%) 2429 ( 0.00%) 161.93
quake 24 ( 0.00%) 2135 ( 0.00%) 88.96
cuseeme 8 ( 0.00%) 604 ( 0.00%) 75.50
other 2457681 ( 3.86%) 1226710473 ( 4.51%) 499.13
icmp 33916738 ( 53.33%) 2115858314 ( 7.77%) 62.38
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 47563 ( 0.07%) 14730942 ( 0.05%) 309.71
ip6 349742 ( 0.55%) 117074645 ( 0.43%) 334.75
other 48175 ( 0.08%) 15708200 ( 0.06%) 326.07
frag 341707 ( 0.54%) 424665596 ( 1.56%) 1242.78
ip6 1802998 ( 2.84%) 1851743240 ( 6.80%) 1027.04
tcp6 1133378 ( 1.78%) 1191742649 ( 4.38%) 1051.50
http(s) 939961 ( 1.48%) 1075292504 ( 3.95%) 1143.98
http(c) 55160 ( 0.09%) 7139637 ( 0.03%) 129.44
smtp 1054 ( 0.00%) 128704 ( 0.00%) 122.11
ftp 88 ( 0.00%) 8109 ( 0.00%) 92.15
dns 163 ( 0.00%) 76315 ( 0.00%) 468.19
bgp 95 ( 0.00%) 30999 ( 0.00%) 326.31
other 136857 ( 0.22%) 109066381 ( 0.40%) 796.94
udp6 301641 ( 0.47%) 251678508 ( 0.92%) 834.36
dns 68418 ( 0.11%) 21818076 ( 0.08%) 318.89
starcra 1 ( 0.00%) 107 ( 0.00%) 107.00
other 233222 ( 0.37%) 229860325 ( 0.84%) 985.59
icmp6 26155 ( 0.04%) 3191726 ( 0.01%) 122.03
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 341793 ( 0.54%) 405126141 ( 1.49%) 1185.30
tcpdump file: 201302131400.dump.gz (1327.81 MB)