Traffic Trace Info
DumpFile: 201302141400.dump
FileSize: 3636.53MB
Id: 201302141400
StartTime: Thu Feb 14 14:00:00 2013
EndTime: Thu Feb 14 14:15:00 2013
TotalTime: 899.78 seconds
TotalCapSize: -1337.07MB CapLen: 96 bytes
# of packets: 57513807 (21462.82MB)
AvgRate: 200.11Mbps stddev:32.15M
IP flow (unique src/dst pair) Information
# of flows: 28320403 (avg. 2.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.4% 1.5% 1.5% 1.4% 1.3% 1.3% 1.3% 1.3% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 22159646
Top 10 bandwidth usage (bytes/total in %):
18.8% 10.4% 10.3% 10.2% 5.5% 4.5% 4.3% 3.6% 1.8% 1.6%
# of IPv6 addresses: 10266
Top 10 bandwidth usage (bytes/total in %):
13.9% 11.3% 10.1% 7.3% 7.2% 5.3% 4.5% 3.9% 3.5% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201302141400.pktlen.png)
detailed numbers
[ 32- 63]: 34845530
[ 64- 127]: 7751068
[ 128- 255]: 637539
[ 256- 511]: 709050
[ 512- 1023]: 673967
[ 1024- 2047]: 12896653
Protocol Breakdown
![[protocol breakdown chart]](201302141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 57513807 (100.00%) 22505400162 (100.00%) 391.30
ip 55689736 ( 96.83%) 20777393233 ( 92.32%) 373.09
tcp 19740037 ( 34.32%) 17889148093 ( 79.49%) 906.24
http(s) 11709130 ( 20.36%) 15310888591 ( 68.03%) 1307.60
http(c) 6435314 ( 11.19%) 1731162996 ( 7.69%) 269.01
squid 38358 ( 0.07%) 17555534 ( 0.08%) 457.68
smtp 134210 ( 0.23%) 86406785 ( 0.38%) 643.82
nntp 9 ( 0.00%) 554 ( 0.00%) 61.56
ftp 3207 ( 0.01%) 233440 ( 0.00%) 72.79
pop3 4650 ( 0.01%) 2040508 ( 0.01%) 438.82
imap 1847 ( 0.00%) 248916 ( 0.00%) 134.77
telnet 14562 ( 0.03%) 2512282 ( 0.01%) 172.52
ssh 71067 ( 0.12%) 11998845 ( 0.05%) 168.84
dns 3243 ( 0.01%) 1984762 ( 0.01%) 612.01
bgp 592 ( 0.00%) 175743 ( 0.00%) 296.86
napster 68 ( 0.00%) 5488 ( 0.00%) 80.71
realaud 5 ( 0.00%) 300 ( 0.00%) 60.00
rtsp 7928 ( 0.01%) 11358102 ( 0.05%) 1432.66
icecast 1886 ( 0.00%) 502165 ( 0.00%) 266.26
hotline 10 ( 0.00%) 970 ( 0.00%) 97.00
other 1313949 ( 2.28%) 712071992 ( 3.16%) 541.93
udp 1722803 ( 3.00%) 651875290 ( 2.90%) 378.38
dns 787775 ( 1.37%) 352225768 ( 1.57%) 447.11
rip 3 ( 0.00%) 198 ( 0.00%) 66.00
realaud 15 ( 0.00%) 1404 ( 0.00%) 93.60
halflif 20 ( 0.00%) 1769 ( 0.00%) 88.45
starcra 37 ( 0.00%) 2928 ( 0.00%) 79.14
everque 151 ( 0.00%) 22668 ( 0.00%) 150.12
unreal 8 ( 0.00%) 776 ( 0.00%) 97.00
quake 52 ( 0.00%) 4630 ( 0.00%) 89.04
cuseeme 7 ( 0.00%) 514 ( 0.00%) 73.43
other 933162 ( 1.62%) 297911063 ( 1.32%) 319.25
icmp 33823289 ( 58.81%) 2108078743 ( 9.37%) 62.33
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 28402 ( 0.05%) 12400404 ( 0.06%) 436.60
ip6 322072 ( 0.56%) 100114731 ( 0.44%) 310.85
other 52949 ( 0.09%) 15756812 ( 0.07%) 297.58
frag 183863 ( 0.32%) 209276733 ( 0.93%) 1138.22
ip6 1824071 ( 3.17%) 1728006929 ( 7.68%) 947.34
tcp6 1143473 ( 1.99%) 1049736483 ( 4.66%) 918.02
http(s) 742216 ( 1.29%) 752873676 ( 3.35%) 1014.36
http(c) 127943 ( 0.22%) 19835787 ( 0.09%) 155.04
smtp 129 ( 0.00%) 51173 ( 0.00%) 396.69
ftp 106 ( 0.00%) 10010 ( 0.00%) 94.43
ssh 518 ( 0.00%) 306660 ( 0.00%) 592.01
dns 177 ( 0.00%) 78415 ( 0.00%) 443.02
bgp 104 ( 0.00%) 36505 ( 0.00%) 351.01
other 272280 ( 0.47%) 276544257 ( 1.23%) 1015.66
udp6 157123 ( 0.27%) 73580069 ( 0.33%) 468.30
dns 68704 ( 0.12%) 23594086 ( 0.10%) 343.42
realaud 1 ( 0.00%) 111 ( 0.00%) 111.00
halflif 1 ( 0.00%) 115 ( 0.00%) 115.00
quake 2 ( 0.00%) 221 ( 0.00%) 110.50
other 88415 ( 0.15%) 49985536 ( 0.22%) 565.35
icmp6 24807 ( 0.04%) 2853095 ( 0.01%) 115.01
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 498638 ( 0.87%) 601833202 ( 2.67%) 1206.95
tcpdump file: 201302141400.dump.gz (1203.90 MB)