Traffic Trace Info
DumpFile: 201302201400.dump
FileSize: 1981.94MB
Id: 201302201400
StartTime: Wed Feb 20 14:00:01 2013
EndTime: Wed Feb 20 14:15:00 2013
TotalTime: 899.52 seconds
TotalCapSize: 1567.97MB CapLen: 96 bytes
# of packets: 27129508 (23108.78MB)
AvgRate: 215.41Mbps stddev:41.67M
IP flow (unique src/dst pair) Information
# of flows: 787452 (avg. 34.45 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.6% 4.5% 3.6% 3.1% 2.9% 2.0% 2.0% 1.3% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 415882
Top 10 bandwidth usage (bytes/total in %):
7.5% 7.2% 7.2% 6.4% 6.3% 6.1% 4.9% 4.5% 3.9% 3.9%
# of IPv6 addresses: 11478
Top 10 bandwidth usage (bytes/total in %):
13.6% 7.9% 7.6% 7.2% 6.5% 5.0% 3.4% 3.1% 2.8% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201302201400.pktlen.png)
detailed numbers
[ 32- 63]: 4111965
[ 64- 127]: 5062214
[ 128- 255]: 756448
[ 256- 511]: 878525
[ 512- 1023]: 1077897
[ 1024- 2047]: 15242459
Protocol Breakdown
![[protocol breakdown chart]](201302201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27129508 (100.00%) 24231316763 (100.00%) 893.17
ip 25064662 ( 92.39%) 22388156018 ( 92.39%) 893.22
tcp 21722835 ( 80.07%) 20766836738 ( 85.70%) 955.99
http(s) 11738181 ( 43.27%) 14813004047 ( 61.13%) 1261.95
http(c) 5116973 ( 18.86%) 2000025711 ( 8.25%) 390.86
squid 56824 ( 0.21%) 46560246 ( 0.19%) 819.38
smtp 66030 ( 0.24%) 28315127 ( 0.12%) 428.82
nntp 4 ( 0.00%) 268 ( 0.00%) 67.00
ftp 6313 ( 0.02%) 518817 ( 0.00%) 82.18
pop3 35748 ( 0.13%) 35928288 ( 0.15%) 1005.04
imap 2150 ( 0.01%) 287317 ( 0.00%) 133.64
telnet 9947 ( 0.04%) 2238691 ( 0.01%) 225.06
ssh 85692 ( 0.32%) 8408669 ( 0.03%) 98.13
dns 1054 ( 0.00%) 207938 ( 0.00%) 197.28
bgp 551 ( 0.00%) 130466 ( 0.00%) 236.78
napster 4 ( 0.00%) 242 ( 0.00%) 60.50
rtsp 337098 ( 1.24%) 346001449 ( 1.43%) 1026.41
icecast 283119 ( 1.04%) 274225473 ( 1.13%) 968.59
hotline 6 ( 0.00%) 810 ( 0.00%) 135.00
other 3983141 ( 14.68%) 3210983179 ( 13.25%) 806.14
udp 2126004 ( 7.84%) 991686221 ( 4.09%) 466.46
dns 613451 ( 2.26%) 247154557 ( 1.02%) 402.89
realaud 7 ( 0.00%) 820 ( 0.00%) 117.14
halflif 10 ( 0.00%) 1772 ( 0.00%) 177.20
starcra 11 ( 0.00%) 1813 ( 0.00%) 164.82
everque 593 ( 0.00%) 134406 ( 0.00%) 226.65
unreal 8 ( 0.00%) 1467 ( 0.00%) 183.38
quake 19 ( 0.00%) 1928 ( 0.00%) 101.47
cuseeme 5 ( 0.00%) 412 ( 0.00%) 82.40
other 1508422 ( 5.56%) 739830638 ( 3.05%) 490.47
icmp 512035 ( 1.89%) 104628544 ( 0.43%) 204.34
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 42266 ( 0.16%) 12740700 ( 0.05%) 301.44
ip6 615500 ( 2.27%) 503475864 ( 2.08%) 817.99
other 45837 ( 0.17%) 8768681 ( 0.04%) 191.30
frag 76749 ( 0.28%) 105746668 ( 0.44%) 1377.82
ip6 2064846 ( 7.61%) 1843160745 ( 7.61%) 892.64
tcp6 1403554 ( 5.17%) 1158498142 ( 4.78%) 825.40
http(s) 900242 ( 3.32%) 919646971 ( 3.80%) 1021.56
http(c) 272217 ( 1.00%) 59488079 ( 0.25%) 218.53
smtp 603 ( 0.00%) 177357 ( 0.00%) 294.12
ftp 70 ( 0.00%) 6270 ( 0.00%) 89.57
ssh 33 ( 0.00%) 4950 ( 0.00%) 150.00
dns 569 ( 0.00%) 405715 ( 0.00%) 713.03
bgp 99 ( 0.00%) 27378 ( 0.00%) 276.55
other 229721 ( 0.85%) 178741422 ( 0.74%) 778.08
udp6 113067 ( 0.42%) 55171288 ( 0.23%) 487.95
dns 67625 ( 0.25%) 21614953 ( 0.09%) 319.63
starcra 1 ( 0.00%) 108 ( 0.00%) 108.00
everque 5 ( 0.00%) 695 ( 0.00%) 139.00
other 45436 ( 0.17%) 33555532 ( 0.14%) 738.52
icmp6 27323 ( 0.10%) 3149906 ( 0.01%) 115.28
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 520871 ( 1.92%) 626337193 ( 2.58%) 1202.48
tcpdump file: 201302201400.dump.gz (616.97 MB)