Traffic Trace Info
DumpFile: 201302191400.dump
FileSize: 2035.87MB
Id: 201302191400
StartTime: Tue Feb 19 14:00:00 2013
EndTime: Tue Feb 19 14:15:01 2013
TotalTime: 900.52 seconds
TotalCapSize: 1614.35MB CapLen: 96 bytes
# of packets: 27623677 (22727.51MB)
AvgRate: 211.61Mbps stddev:102.12M
IP flow (unique src/dst pair) Information
# of flows: 846090 (avg. 32.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.4% 7.0% 2.5% 2.5% 1.8% 1.5% 1.2% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 413315
Top 10 bandwidth usage (bytes/total in %):
18.9% 14.7% 11.0% 11.0% 7.5% 4.1% 3.3% 2.8% 2.8% 2.7%
# of IPv6 addresses: 11893
Top 10 bandwidth usage (bytes/total in %):
11.8% 6.4% 5.5% 5.5% 4.9% 3.7% 3.5% 3.2% 3.0% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201302191400.pktlen.png)
detailed numbers
[ 32- 63]: 3605462
[ 64- 127]: 6642583
[ 128- 255]: 748403
[ 256- 511]: 877725
[ 512- 1023]: 854688
[ 1024- 2047]: 14894816
Protocol Breakdown
![[protocol breakdown chart]](201302191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27623677 (100.00%) 23831522690 (100.00%) 862.72
ip 26161426 ( 94.71%) 22487823745 ( 94.36%) 859.58
tcp 23668309 ( 85.68%) 21604562224 ( 90.66%) 912.81
http(s) 10835779 ( 39.23%) 13519970068 ( 56.73%) 1247.72
http(c) 6012560 ( 21.77%) 1821214282 ( 7.64%) 302.90
squid 47534 ( 0.17%) 33392882 ( 0.14%) 702.51
smtp 53444 ( 0.19%) 13877935 ( 0.06%) 259.67
ftp 13055 ( 0.05%) 993379 ( 0.00%) 76.09
pop3 4823 ( 0.02%) 1782634 ( 0.01%) 369.61
imap 136967 ( 0.50%) 141655290 ( 0.59%) 1034.23
telnet 13179 ( 0.05%) 10205361 ( 0.04%) 774.37
ssh 106994 ( 0.39%) 15508617 ( 0.07%) 144.95
dns 62365 ( 0.23%) 5720207 ( 0.02%) 91.72
bgp 534 ( 0.00%) 126181 ( 0.00%) 236.29
napster 12 ( 0.00%) 1142 ( 0.00%) 95.17
realaud 2 ( 0.00%) 120 ( 0.00%) 60.00
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 382087 ( 1.38%) 367794262 ( 1.54%) 962.59
hotline 73 ( 0.00%) 6803 ( 0.00%) 93.19
other 5998900 ( 21.72%) 5672313001 ( 23.80%) 945.56
udp 1457857 ( 5.28%) 597270134 ( 2.51%) 409.69
dns 604997 ( 2.19%) 239180305 ( 1.00%) 395.34
realaud 12 ( 0.00%) 885 ( 0.00%) 73.75
halflif 9 ( 0.00%) 1086 ( 0.00%) 120.67
starcra 21 ( 0.00%) 1984 ( 0.00%) 94.48
everque 166 ( 0.00%) 38828 ( 0.00%) 233.90
unreal 20 ( 0.00%) 3521 ( 0.00%) 176.05
quake 58 ( 0.00%) 4520 ( 0.00%) 77.93
cuseeme 5 ( 0.00%) 711 ( 0.00%) 142.20
other 849266 ( 3.07%) 353780753 ( 1.48%) 416.57
icmp 507666 ( 1.84%) 74186638 ( 0.31%) 146.13
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 16327 ( 0.06%) 5005814 ( 0.02%) 306.60
ip6 414857 ( 1.50%) 171133513 ( 0.72%) 412.51
other 96226 ( 0.35%) 35646262 ( 0.15%) 370.44
frag 72244 ( 0.26%) 94797960 ( 0.40%) 1312.19
ip6 1462251 ( 5.29%) 1343698945 ( 5.64%) 918.92
tcp6 1032777 ( 3.74%) 980047232 ( 4.11%) 948.94
http(s) 750696 ( 2.72%) 768155397 ( 3.22%) 1023.26
http(c) 68224 ( 0.25%) 10218996 ( 0.04%) 149.79
smtp 1420 ( 0.01%) 511226 ( 0.00%) 360.02
ftp 218 ( 0.00%) 20422 ( 0.00%) 93.68
ssh 621 ( 0.00%) 387702 ( 0.00%) 624.32
dns 835 ( 0.00%) 595146 ( 0.00%) 712.75
bgp 98 ( 0.00%) 32939 ( 0.00%) 336.11
other 210665 ( 0.76%) 200125404 ( 0.84%) 949.97
udp6 166904 ( 0.60%) 85159496 ( 0.36%) 510.23
dns 71662 ( 0.26%) 23703181 ( 0.10%) 330.76
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
other 95241 ( 0.34%) 61456208 ( 0.26%) 645.27
icmp6 30868 ( 0.11%) 3445722 ( 0.01%) 111.63
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 231671 ( 0.84%) 275042279 ( 1.15%) 1187.21
tcpdump file: 201302191400.dump.gz (635.71 MB)