Traffic Trace Info
DumpFile: 201302211400.dump
FileSize: 1898.49MB
Id: 201302211400
StartTime: Thu Feb 21 14:00:00 2013
EndTime: Thu Feb 21 14:15:01 2013
TotalTime: 900.26 seconds
TotalCapSize: 1502.34MB CapLen: 96 bytes
# of packets: 25961416 (18118.96MB)
AvgRate: 168.84Mbps stddev:30.25M
IP flow (unique src/dst pair) Information
# of flows: 1943202 (avg. 13.36 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.9% 4.3% 3.1% 1.9% 1.5% 1.2% 1.2% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 998151
Top 10 bandwidth usage (bytes/total in %):
13.2% 9.0% 4.9% 4.9% 4.9% 3.6% 3.5% 3.2% 2.8% 2.8%
# of IPv6 addresses: 11177
Top 10 bandwidth usage (bytes/total in %):
46.8% 46.6% 6.7% 5.7% 5.6% 3.0% 3.0% 3.0% 2.5% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201302211400.pktlen.png)
detailed numbers
[ 32- 63]: 4551936
[ 64- 127]: 6902189
[ 128- 255]: 878657
[ 256- 511]: 957554
[ 512- 1023]: 852642
[ 1024- 2047]: 11818438
Protocol Breakdown
![[protocol breakdown chart]](201302211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25961416 (100.00%) 18999105281 (100.00%) 731.82
ip 23602336 ( 90.91%) 16579260875 ( 87.26%) 702.44
tcp 18629195 ( 71.76%) 14929320983 ( 78.58%) 801.39
http(s) 8595678 ( 33.11%) 10262686689 ( 54.02%) 1193.94
http(c) 5364873 ( 20.66%) 1430511738 ( 7.53%) 266.64
squid 122404 ( 0.47%) 110034745 ( 0.58%) 898.95
smtp 51247 ( 0.20%) 19197054 ( 0.10%) 374.60
ftp 3568 ( 0.01%) 283195 ( 0.00%) 79.37
pop3 9307 ( 0.04%) 3850172 ( 0.02%) 413.69
imap 2091 ( 0.01%) 683074 ( 0.00%) 326.67
telnet 37028 ( 0.14%) 3882154 ( 0.02%) 104.84
ssh 660277 ( 2.54%) 91582081 ( 0.48%) 138.70
dns 3302 ( 0.01%) 1996121 ( 0.01%) 604.52
bgp 1030 ( 0.00%) 149080 ( 0.00%) 144.74
napster 60 ( 0.00%) 8188 ( 0.00%) 136.47
realaud 23 ( 0.00%) 3028 ( 0.00%) 131.65
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 293811 ( 1.13%) 307786652 ( 1.62%) 1047.57
hotline 20 ( 0.00%) 2731 ( 0.00%) 136.55
other 3484474 ( 13.42%) 2696664161 ( 14.19%) 773.91
udp 2467952 ( 9.51%) 1264481514 ( 6.66%) 512.36
dns 629329 ( 2.42%) 260196192 ( 1.37%) 413.45
realaud 33 ( 0.00%) 2206 ( 0.00%) 66.85
halflif 14 ( 0.00%) 1889 ( 0.00%) 134.93
starcra 22 ( 0.00%) 8914 ( 0.00%) 405.18
everque 125 ( 0.00%) 27915 ( 0.00%) 223.32
unreal 49 ( 0.00%) 22290 ( 0.00%) 454.90
quake 53 ( 0.00%) 4136 ( 0.00%) 78.04
cuseeme 1 ( 0.00%) 98 ( 0.00%) 98.00
other 1838158 ( 7.08%) 1004090939 ( 5.28%) 546.25
icmp 1654580 ( 6.37%) 162238898 ( 0.85%) 98.05
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 12525 ( 0.05%) 5118974 ( 0.03%) 408.70
ip6 787665 ( 3.03%) 208861147 ( 1.10%) 265.16
other 50235 ( 0.19%) 9220199 ( 0.05%) 183.54
frag 93316 ( 0.36%) 121982738 ( 0.64%) 1307.20
ip6 2359080 ( 9.09%) 2419844406 ( 12.74%) 1025.76
tcp6 1990530 ( 7.67%) 2101488942 ( 11.06%) 1055.74
http(s) 746235 ( 2.87%) 780313007 ( 4.11%) 1045.67
http(c) 155230 ( 0.60%) 19706392 ( 0.10%) 126.95
smtp 239 ( 0.00%) 121070 ( 0.00%) 506.57
ftp 73 ( 0.00%) 6426 ( 0.00%) 88.03
dns 373 ( 0.00%) 182789 ( 0.00%) 490.05
bgp 95 ( 0.00%) 26111 ( 0.00%) 274.85
other 1088285 ( 4.19%) 1301133147 ( 6.85%) 1195.58
udp6 172142 ( 0.66%) 111126375 ( 0.58%) 645.55
dns 67910 ( 0.26%) 21687260 ( 0.11%) 319.35
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
unreal 1 ( 0.00%) 110 ( 0.00%) 110.00
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
cuseeme 1 ( 0.00%) 110 ( 0.00%) 110.00
other 104228 ( 0.40%) 89438684 ( 0.47%) 858.11
icmp6 26394 ( 0.10%) 2976659 ( 0.02%) 112.78
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 169983 ( 0.65%) 204248214 ( 1.08%) 1201.58
tcpdump file: 201302211400.dump.gz (620.42 MB)