Traffic Trace Info
DumpFile: 201302231400.dump
FileSize: 1342.43MB
Id: 201302231400
StartTime: Sat Feb 23 14:00:01 2013
EndTime: Sat Feb 23 14:15:01 2013
TotalTime: 899.89 seconds
TotalCapSize: 1054.12MB CapLen: 96 bytes
# of packets: 18893995 (13767.25MB)
AvgRate: 128.35Mbps stddev:24.19M
IP flow (unique src/dst pair) Information
# of flows: 1681552 (avg. 11.24 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.5% 2.5% 2.2% 2.0% 1.9% 1.9% 1.6% 1.5% 1.4%
IP address Information
# of IPv4 addresses: 1345175
Top 10 bandwidth usage (bytes/total in %):
11.4% 8.4% 6.6% 5.5% 4.5% 3.0% 3.0% 2.8% 2.7% 2.7%
# of IPv6 addresses: 9754
Top 10 bandwidth usage (bytes/total in %):
17.4% 12.4% 11.5% 7.9% 6.7% 5.2% 5.0% 4.6% 4.5% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201302231400.pktlen.png)
detailed numbers
[ 32- 63]: 3569457
[ 64- 127]: 4511861
[ 128- 255]: 611474
[ 256- 511]: 540378
[ 512- 1023]: 661791
[ 1024- 2047]: 8999034
Protocol Breakdown
![[protocol breakdown chart]](201302231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18893995 (100.00%) 14436006582 (100.00%) 764.05
ip 17280277 ( 91.46%) 13000842732 ( 90.06%) 752.35
tcp 12948909 ( 68.53%) 11265942982 ( 78.04%) 870.03
http(s) 5967342 ( 31.58%) 6926384966 ( 47.98%) 1160.72
http(c) 3775006 ( 19.98%) 1507418238 ( 10.44%) 399.32
squid 26907 ( 0.14%) 15151607 ( 0.10%) 563.11
smtp 152186 ( 0.81%) 12156462 ( 0.08%) 79.88
nntp 5 ( 0.00%) 300 ( 0.00%) 60.00
ftp 1368 ( 0.01%) 99829 ( 0.00%) 72.97
pop3 2767 ( 0.01%) 971116 ( 0.01%) 350.96
imap 1537 ( 0.01%) 148610 ( 0.00%) 96.69
telnet 16588 ( 0.09%) 2757456 ( 0.02%) 166.23
ssh 14250 ( 0.08%) 3655709 ( 0.03%) 256.54
dns 1405 ( 0.01%) 377848 ( 0.00%) 268.93
bgp 497 ( 0.00%) 98328 ( 0.00%) 197.84
napster 6 ( 0.00%) 1010 ( 0.00%) 168.33
realaud 1 ( 0.00%) 60 ( 0.00%) 60.00
rtsp 5 ( 0.00%) 300 ( 0.00%) 60.00
icecast 119891 ( 0.63%) 112822463 ( 0.78%) 941.04
other 2869147 ( 15.19%) 2683898620 ( 18.59%) 935.43
udp 2372394 ( 12.56%) 1320379298 ( 9.15%) 556.56
dns 1253999 ( 6.64%) 686305909 ( 4.75%) 547.29
rip 17 ( 0.00%) 1190 ( 0.00%) 70.00
realaud 28 ( 0.00%) 2109 ( 0.00%) 75.32
halflif 34 ( 0.00%) 3229 ( 0.00%) 94.97
starcra 15 ( 0.00%) 1777 ( 0.00%) 118.47
everque 204 ( 0.00%) 24944 ( 0.00%) 122.27
unreal 5 ( 0.00%) 826 ( 0.00%) 165.20
quake 47 ( 0.00%) 3748 ( 0.00%) 79.74
cuseeme 2 ( 0.00%) 473 ( 0.00%) 236.50
other 1114957 ( 5.90%) 630926634 ( 4.37%) 565.88
icmp 1505558 ( 7.97%) 152990987 ( 1.06%) 101.62
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 12279 ( 0.06%) 6367242 ( 0.04%) 518.55
ip6 393590 ( 2.08%) 247286962 ( 1.71%) 628.29
other 47362 ( 0.25%) 7855991 ( 0.05%) 165.87
frag 456835 ( 2.42%) 543572014 ( 3.77%) 1189.87
ip6 1613718 ( 8.54%) 1435163850 ( 9.94%) 889.35
tcp6 804183 ( 4.26%) 657937089 ( 4.56%) 818.14
http(s) 481971 ( 2.55%) 480099688 ( 3.33%) 996.12
http(c) 72140 ( 0.38%) 8028664 ( 0.06%) 111.29
smtp 334 ( 0.00%) 95177 ( 0.00%) 284.96
ftp 66 ( 0.00%) 5876 ( 0.00%) 89.03
dns 901 ( 0.00%) 670587 ( 0.00%) 744.27
bgp 97 ( 0.00%) 26848 ( 0.00%) 276.78
other 248674 ( 1.32%) 169010249 ( 1.17%) 679.65
udp6 302517 ( 1.60%) 213331826 ( 1.48%) 705.19
dns 41869 ( 0.22%) 14590787 ( 0.10%) 348.49
halflif 1 ( 0.00%) 114 ( 0.00%) 114.00
starcra 2 ( 0.00%) 184 ( 0.00%) 92.00
unreal 1 ( 0.00%) 124 ( 0.00%) 124.00
other 260644 ( 1.38%) 198740617 ( 1.38%) 762.50
icmp6 21395 ( 0.11%) 2036415 ( 0.01%) 95.18
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 485593 ( 2.57%) 561854440 ( 3.89%) 1157.05
tcpdump file: 201302231400.dump.gz (431.11 MB)