Traffic Trace Info
DumpFile: 201302171400.dump
FileSize: 1378.63MB
Id: 201302171400
StartTime: Sun Feb 17 14:00:00 2013
EndTime: Sun Feb 17 14:15:00 2013
TotalTime: 899.87 seconds
TotalCapSize: 1080.28MB CapLen: 96 bytes
# of packets: 19552588 (15233.17MB)
AvgRate: 142.02Mbps stddev:21.81M
IP flow (unique src/dst pair) Information
# of flows: 737404 (avg. 26.52 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.8% 6.5% 2.2% 1.4% 1.3% 1.2% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 394109
Top 10 bandwidth usage (bytes/total in %):
20.4% 12.5% 11.8% 11.8% 8.6% 7.0% 4.1% 3.4% 2.3% 2.3%
# of IPv6 addresses: 10567
Top 10 bandwidth usage (bytes/total in %):
8.9% 8.8% 7.5% 6.5% 6.5% 5.0% 5.0% 4.8% 4.8% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201302171400.pktlen.png)
detailed numbers
[ 32- 63]: 3594613
[ 64- 127]: 4250295
[ 128- 255]: 502626
[ 256- 511]: 478703
[ 512- 1023]: 677046
[ 1024- 2047]: 10049305
Protocol Breakdown
![[protocol breakdown chart]](201302171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19552588 (100.00%) 15973138541 (100.00%) 816.93
ip 18437949 ( 94.30%) 14933801235 ( 93.49%) 809.95
tcp 14819196 ( 75.79%) 13322031287 ( 83.40%) 898.97
http(s) 7805372 ( 39.92%) 10172620890 ( 63.69%) 1303.28
http(c) 3606923 ( 18.45%) 424906461 ( 2.66%) 117.80
squid 30165 ( 0.15%) 19224367 ( 0.12%) 637.31
smtp 26293 ( 0.13%) 4580821 ( 0.03%) 174.22
ftp 3124 ( 0.02%) 225559 ( 0.00%) 72.20
pop3 4335 ( 0.02%) 808289 ( 0.01%) 186.46
imap 1539 ( 0.01%) 148576 ( 0.00%) 96.54
telnet 4100 ( 0.02%) 1786498 ( 0.01%) 435.73
ssh 2125275 ( 10.87%) 1786244557 ( 11.18%) 840.48
dns 426 ( 0.00%) 50142 ( 0.00%) 117.70
bgp 562 ( 0.00%) 136952 ( 0.00%) 243.69
napster 22 ( 0.00%) 2820 ( 0.00%) 128.18
icecast 359 ( 0.00%) 31746 ( 0.00%) 88.43
other 1210701 ( 6.19%) 911263609 ( 5.70%) 752.67
udp 2782070 ( 14.23%) 1363198474 ( 8.53%) 489.99
dns 572950 ( 2.93%) 244106753 ( 1.53%) 426.05
rip 15 ( 0.00%) 1050 ( 0.00%) 70.00
realaud 82 ( 0.00%) 5511 ( 0.00%) 67.21
halflif 10 ( 0.00%) 1122 ( 0.00%) 112.20
starcra 37 ( 0.00%) 6406 ( 0.00%) 173.14
everque 62 ( 0.00%) 10465 ( 0.00%) 168.79
unreal 22 ( 0.00%) 4999 ( 0.00%) 227.23
quake 20 ( 0.00%) 2068 ( 0.00%) 103.40
cuseeme 2 ( 0.00%) 199 ( 0.00%) 99.50
other 2204685 ( 11.28%) 1118325234 ( 7.00%) 507.25
icmp 447445 ( 2.29%) 84702617 ( 0.53%) 189.30
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 8750 ( 0.04%) 3995084 ( 0.03%) 456.58
ip6 326964 ( 1.67%) 145404260 ( 0.91%) 444.71
other 53339 ( 0.27%) 14450243 ( 0.09%) 270.91
frag 162350 ( 0.83%) 162762544 ( 1.02%) 1002.54
ip6 1114639 ( 5.70%) 1039337306 ( 6.51%) 932.44
tcp6 709665 ( 3.63%) 629858949 ( 3.94%) 887.54
http(s) 497596 ( 2.54%) 516384276 ( 3.23%) 1037.76
http(c) 96146 ( 0.49%) 12234868 ( 0.08%) 127.25
smtp 11 ( 0.00%) 1185 ( 0.00%) 107.73
ftp 1105 ( 0.01%) 119494 ( 0.00%) 108.14
dns 123 ( 0.00%) 39791 ( 0.00%) 323.50
bgp 101 ( 0.00%) 30214 ( 0.00%) 299.15
other 114583 ( 0.59%) 101049121 ( 0.63%) 881.89
udp6 72149 ( 0.37%) 35464723 ( 0.22%) 491.55
dns 42728 ( 0.22%) 14003590 ( 0.09%) 327.74
realaud 1 ( 0.00%) 118 ( 0.00%) 118.00
halflif 2 ( 0.00%) 215 ( 0.00%) 107.50
other 29418 ( 0.15%) 21460800 ( 0.13%) 729.51
icmp6 23746 ( 0.12%) 2990064 ( 0.02%) 125.92
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 309049 ( 1.58%) 371019490 ( 2.32%) 1200.52
tcpdump file: 201302171400.dump.gz (425.23 MB)