Traffic Trace Info
DumpFile: 201302241400.dump
FileSize: 1317.53MB
Id: 201302241400
StartTime: Sun Feb 24 14:00:00 2013
EndTime: Sun Feb 24 14:15:00 2013
TotalTime: 899.88 seconds
TotalCapSize: 1029.29MB CapLen: 96 bytes
# of packets: 18889757 (13006.61MB)
AvgRate: 121.24Mbps stddev:26.02M
IP flow (unique src/dst pair) Information
# of flows: 2094428 (avg. 9.02 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.5% 5.7% 3.1% 3.1% 2.6% 1.4% 1.3% 1.2% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 1609496
Top 10 bandwidth usage (bytes/total in %):
11.3% 10.6% 10.6% 9.8% 6.3% 6.3% 5.5% 3.6% 3.0% 2.9%
# of IPv6 addresses: 11782
Top 10 bandwidth usage (bytes/total in %):
29.8% 29.7% 4.6% 4.1% 3.8% 3.8% 3.4% 3.1% 2.7% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201302241400.pktlen.png)
detailed numbers
[ 32- 63]: 3331343
[ 64- 127]: 5159039
[ 128- 255]: 679882
[ 256- 511]: 599821
[ 512- 1023]: 780015
[ 1024- 2047]: 8339657
Protocol Breakdown
![[protocol breakdown chart]](201302241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18889757 (100.00%) 13638421941 (100.00%) 722.00
ip 17217143 ( 91.15%) 12151526148 ( 89.10%) 705.78
tcp 10987729 ( 58.17%) 9146209510 ( 67.06%) 832.40
http(s) 5639751 ( 29.86%) 6831736905 ( 50.09%) 1211.35
http(c) 3174378 ( 16.80%) 898242229 ( 6.59%) 282.97
squid 34611 ( 0.18%) 7960562 ( 0.06%) 230.00
smtp 31575 ( 0.17%) 16100705 ( 0.12%) 509.92
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 2262 ( 0.01%) 173655 ( 0.00%) 76.77
pop3 8213 ( 0.04%) 5432838 ( 0.04%) 661.49
imap 2216 ( 0.01%) 229767 ( 0.00%) 103.69
telnet 13977 ( 0.07%) 2518200 ( 0.02%) 180.17
ssh 654676 ( 3.47%) 786023100 ( 5.76%) 1200.63
dns 3523 ( 0.02%) 2255271 ( 0.02%) 640.16
bgp 501 ( 0.00%) 96497 ( 0.00%) 192.61
napster 144 ( 0.00%) 25216 ( 0.00%) 175.11
realaud 7 ( 0.00%) 895 ( 0.00%) 127.86
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 8818 ( 0.05%) 7720395 ( 0.06%) 875.53
hotline 28 ( 0.00%) 3061 ( 0.00%) 109.32
other 1413047 ( 7.48%) 587690094 ( 4.31%) 415.90
udp 4236751 ( 22.43%) 2665746322 ( 19.55%) 629.20
dns 1166578 ( 6.18%) 747127514 ( 5.48%) 640.44
realaud 14 ( 0.00%) 1424 ( 0.00%) 101.71
halflif 25 ( 0.00%) 1963 ( 0.00%) 78.52
starcra 9 ( 0.00%) 2188 ( 0.00%) 243.11
everque 67 ( 0.00%) 10911 ( 0.00%) 162.85
unreal 20 ( 0.00%) 3302 ( 0.00%) 165.10
quake 21 ( 0.00%) 2098 ( 0.00%) 99.90
cuseeme 2 ( 0.00%) 414 ( 0.00%) 207.00
other 3061693 ( 16.21%) 1908306689 ( 13.99%) 623.28
icmp 1553044 ( 8.22%) 149789871 ( 1.10%) 96.45
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 5987 ( 0.03%) 3407550 ( 0.02%) 569.16
ip6 388116 ( 2.05%) 178273385 ( 1.31%) 459.33
other 45332 ( 0.24%) 8080350 ( 0.06%) 178.25
frag 491165 ( 2.60%) 620884040 ( 4.55%) 1264.10
ip6 1672614 ( 8.85%) 1486895793 ( 10.90%) 888.97
tcp6 1256054 ( 6.65%) 1124157901 ( 8.24%) 894.99
http(s) 607036 ( 3.21%) 603933345 ( 4.43%) 994.89
http(c) 116368 ( 0.62%) 13021405 ( 0.10%) 111.90
smtp 598 ( 0.00%) 74099 ( 0.00%) 123.91
ftp 91 ( 0.00%) 8085 ( 0.00%) 88.85
dns 729 ( 0.00%) 531731 ( 0.00%) 729.40
bgp 103 ( 0.00%) 26646 ( 0.00%) 258.70
icecast 32 ( 0.00%) 3876 ( 0.00%) 121.12
other 531097 ( 2.81%) 506558714 ( 3.71%) 953.80
udp6 136553 ( 0.72%) 59514362 ( 0.44%) 435.83
dns 40745 ( 0.22%) 13646401 ( 0.10%) 334.92
halflif 3 ( 0.00%) 307 ( 0.00%) 102.33
everque 1 ( 0.00%) 176 ( 0.00%) 176.00
cuseeme 1 ( 0.00%) 101 ( 0.00%) 101.00
other 95803 ( 0.51%) 45867377 ( 0.34%) 478.77
icmp6 27471 ( 0.15%) 2802638 ( 0.02%) 102.02
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 252506 ( 1.34%) 300416812 ( 2.20%) 1189.74
tcpdump file: 201302241400.dump.gz (415.73 MB)