Traffic Trace Info
DumpFile: 201302151400.dump
FileSize: 3626.93MB
Id: 201302151400
StartTime: Fri Feb 15 14:00:00 2013
EndTime: Fri Feb 15 14:15:01 2013
TotalTime: 900.54 seconds
TotalCapSize: -1339.82MB CapLen: 96 bytes
# of packets: 57064817 (16914.77MB)
AvgRate: 157.54Mbps stddev:27.43M
IP flow (unique src/dst pair) Information
# of flows: 28286697 (avg. 2.02 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 1.5% 1.2% 1.1% 1.1% 0.8% 0.7% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 22105280
Top 10 bandwidth usage (bytes/total in %):
20.9% 7.8% 5.6% 4.5% 4.5% 2.8% 2.7% 2.6% 2.1% 1.6%
# of IPv6 addresses: 9290
Top 10 bandwidth usage (bytes/total in %):
16.8% 9.2% 7.6% 5.7% 5.6% 4.6% 4.1% 4.0% 3.8% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201302151400.pktlen.png)
detailed numbers
[ 32- 63]: 35614441
[ 64- 127]: 9426825
[ 128- 255]: 857501
[ 256- 511]: 770980
[ 512- 1023]: 925309
[ 1024- 2047]: 9469761
Protocol Breakdown
![[protocol breakdown chart]](201302151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 57064817 (100.00%) 17736420720 (100.00%) 310.81
ip 55468734 ( 97.20%) 16162046787 ( 91.12%) 291.37
tcp 17211562 ( 30.16%) 12946809494 ( 73.00%) 752.22
http(s) 8149343 ( 14.28%) 9888232697 ( 55.75%) 1213.38
http(c) 4675856 ( 8.19%) 1033091666 ( 5.82%) 220.94
squid 40790 ( 0.07%) 33094080 ( 0.19%) 811.33
smtp 76221 ( 0.13%) 37880761 ( 0.21%) 496.99
nntp 4 ( 0.00%) 240 ( 0.00%) 60.00
ftp 3554 ( 0.01%) 280005 ( 0.00%) 78.79
pop3 5845 ( 0.01%) 3148019 ( 0.02%) 538.58
imap 2021 ( 0.00%) 420940 ( 0.00%) 208.28
telnet 22816 ( 0.04%) 3161107 ( 0.02%) 138.55
ssh 1647183 ( 2.89%) 245293120 ( 1.38%) 148.92
dns 2184 ( 0.00%) 578410 ( 0.00%) 264.84
bgp 536 ( 0.00%) 135994 ( 0.00%) 253.72
napster 16 ( 0.00%) 2511 ( 0.00%) 156.94
realaud 21 ( 0.00%) 2121 ( 0.00%) 101.00
rtsp 7940 ( 0.01%) 11371217 ( 0.06%) 1432.14
icecast 270169 ( 0.47%) 275069409 ( 1.55%) 1018.14
hotline 49 ( 0.00%) 5236 ( 0.00%) 106.86
other 2307012 ( 4.04%) 1415041841 ( 7.98%) 613.37
udp 1854639 ( 3.25%) 795321357 ( 4.48%) 428.83
dns 703714 ( 1.23%) 327502611 ( 1.85%) 465.39
rip 4 ( 0.00%) 264 ( 0.00%) 66.00
realaud 12 ( 0.00%) 1101 ( 0.00%) 91.75
halflif 7 ( 0.00%) 1117 ( 0.00%) 159.57
starcra 23 ( 0.00%) 2161 ( 0.00%) 93.96
everque 148 ( 0.00%) 33312 ( 0.00%) 225.08
unreal 14 ( 0.00%) 1002 ( 0.00%) 71.57
quake 30 ( 0.00%) 3279 ( 0.00%) 109.30
cuseeme 1 ( 0.00%) 62 ( 0.00%) 62.00
other 1149274 ( 2.01%) 466164023 ( 2.63%) 405.62
icmp 35964768 ( 63.02%) 2270414644 ( 12.80%) 63.13
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 20134 ( 0.04%) 6163312 ( 0.03%) 306.11
ip6 364095 ( 0.64%) 128861357 ( 0.73%) 353.92
other 53351 ( 0.09%) 14457353 ( 0.08%) 270.99
frag 160379 ( 0.28%) 176872160 ( 1.00%) 1102.84
ip6 1596083 ( 2.80%) 1574373933 ( 8.88%) 986.40
tcp6 1002932 ( 1.76%) 959479954 ( 5.41%) 956.67
http(s) 722466 ( 1.27%) 777601277 ( 4.38%) 1076.32
http(c) 122698 ( 0.22%) 14606458 ( 0.08%) 119.04
smtp 176 ( 0.00%) 57241 ( 0.00%) 325.23
ftp 137 ( 0.00%) 14871 ( 0.00%) 108.55
ssh 1224 ( 0.00%) 872900 ( 0.00%) 713.15
dns 810 ( 0.00%) 595899 ( 0.00%) 735.68
bgp 94 ( 0.00%) 28451 ( 0.00%) 302.67
other 155327 ( 0.27%) 165702857 ( 0.93%) 1066.80
udp6 118742 ( 0.21%) 71100785 ( 0.40%) 598.78
dns 67351 ( 0.12%) 22481246 ( 0.13%) 333.79
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 2 ( 0.00%) 220 ( 0.00%) 110.00
other 51388 ( 0.09%) 48619213 ( 0.27%) 946.12
icmp6 26854 ( 0.05%) 3182842 ( 0.02%) 118.52
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 447524 ( 0.78%) 540606136 ( 3.05%) 1207.99
tcpdump file: 201302151400.dump.gz (1211.52 MB)