Traffic Trace Info
DumpFile: 201302161400.dump
FileSize: 1491.90MB
Id: 201302161400
StartTime: Sat Feb 16 14:00:00 2013
EndTime: Sat Feb 16 14:15:00 2013
TotalTime: 899.89 seconds
TotalCapSize: 1169.19MB CapLen: 96 bytes
# of packets: 21148393 (14088.58MB)
AvgRate: 131.33Mbps stddev:29.16M
IP flow (unique src/dst pair) Information
# of flows: 618566 (avg. 34.19 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.1% 5.3% 2.8% 2.1% 1.8% 1.7% 1.6% 1.6% 1.6% 1.5%
IP address Information
# of IPv4 addresses: 345223
Top 10 bandwidth usage (bytes/total in %):
19.6% 14.5% 7.0% 7.0% 5.8% 5.0% 3.1% 2.9% 2.3% 2.3%
# of IPv6 addresses: 8368
Top 10 bandwidth usage (bytes/total in %):
15.5% 7.2% 6.4% 5.1% 4.2% 4.1% 3.9% 3.8% 3.6% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201302161400.pktlen.png)
detailed numbers
[ 32- 63]: 3831835
[ 64- 127]: 5327131
[ 128- 255]: 721038
[ 256- 511]: 486026
[ 512- 1023]: 2084751
[ 1024- 2047]: 8697612
Protocol Breakdown
![[protocol breakdown chart]](201302161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21148393 (100.00%) 14772952069 (100.00%) 698.54
ip 20051277 ( 94.81%) 13731765434 ( 92.95%) 684.83
tcp 16264494 ( 76.91%) 11990417485 ( 81.16%) 737.21
http(s) 7470604 ( 35.32%) 9270448593 ( 62.75%) 1240.92
http(c) 4327542 ( 20.46%) 781166618 ( 5.29%) 180.51
squid 28764 ( 0.14%) 16573362 ( 0.11%) 576.18
smtp 41482 ( 0.20%) 19328238 ( 0.13%) 465.94
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 26317 ( 0.12%) 9231866 ( 0.06%) 350.79
pop3 2565 ( 0.01%) 421389 ( 0.00%) 164.28
imap 143252 ( 0.68%) 144244469 ( 0.98%) 1006.93
telnet 3578 ( 0.02%) 1750502 ( 0.01%) 489.24
ssh 3099058 ( 14.65%) 987455830 ( 6.68%) 318.63
dns 1968 ( 0.01%) 527689 ( 0.00%) 268.13
bgp 524 ( 0.00%) 109524 ( 0.00%) 209.02
napster 4 ( 0.00%) 240 ( 0.00%) 60.00
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 15211 ( 0.07%) 11302733 ( 0.08%) 743.06
hotline 8 ( 0.00%) 858 ( 0.00%) 107.25
other 1103615 ( 5.22%) 747855454 ( 5.06%) 677.64
udp 2909783 ( 13.76%) 1477715563 ( 10.00%) 507.84
dns 805530 ( 3.81%) 411019460 ( 2.78%) 510.25
realaud 2 ( 0.00%) 189 ( 0.00%) 94.50
halflif 116 ( 0.00%) 19447 ( 0.00%) 167.65
starcra 23 ( 0.00%) 7229 ( 0.00%) 314.30
everque 32 ( 0.00%) 6473 ( 0.00%) 202.28
unreal 8 ( 0.00%) 559 ( 0.00%) 69.88
quake 10 ( 0.00%) 758 ( 0.00%) 75.80
cuseeme 21 ( 0.00%) 1440 ( 0.00%) 68.57
other 2102263 ( 9.94%) 1064889907 ( 7.21%) 506.54
icmp 440889 ( 2.08%) 67777653 ( 0.46%) 153.73
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 9480 ( 0.04%) 4180844 ( 0.03%) 441.02
ip6 355506 ( 1.68%) 174876380 ( 1.18%) 491.91
other 70940 ( 0.34%) 16778239 ( 0.11%) 236.51
frag 278399 ( 1.32%) 293568655 ( 1.99%) 1054.49
ip6 1097116 ( 5.19%) 1041186635 ( 7.05%) 949.02
tcp6 709045 ( 3.35%) 632984249 ( 4.28%) 892.73
http(s) 454036 ( 2.15%) 471132623 ( 3.19%) 1037.65
http(c) 116052 ( 0.55%) 13741468 ( 0.09%) 118.41
smtp 1991 ( 0.01%) 2196490 ( 0.01%) 1103.21
ftp 66 ( 0.00%) 5876 ( 0.00%) 89.03
pop3 3 ( 0.00%) 254 ( 0.00%) 84.67
dns 183 ( 0.00%) 57156 ( 0.00%) 312.33
bgp 97 ( 0.00%) 29520 ( 0.00%) 304.33
other 136617 ( 0.65%) 145820862 ( 0.99%) 1067.37
udp6 85267 ( 0.40%) 64219494 ( 0.43%) 753.16
dns 42860 ( 0.20%) 14130128 ( 0.10%) 329.68
other 42407 ( 0.20%) 50089366 ( 0.34%) 1181.16
icmp6 19184 ( 0.09%) 2235138 ( 0.02%) 116.51
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 283590 ( 1.34%) 341743674 ( 2.31%) 1205.06
tcpdump file: 201302161400.dump.gz (463.60 MB)