Traffic Trace Info
DumpFile: 201302251400.dump
FileSize: 1757.92MB
Id: 201302251400
StartTime: Mon Feb 25 14:00:00 2013
EndTime: Mon Feb 25 14:15:00 2013
TotalTime: 900.20 seconds
TotalCapSize: 1372.39MB CapLen: 96 bytes
# of packets: 25266092 (15775.29MB)
AvgRate: 146.94Mbps stddev:31.81M
IP flow (unique src/dst pair) Information
# of flows: 4256461 (avg. 5.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 2.9% 2.4% 2.3% 2.2% 2.2% 2.2% 2.0% 2.0% 1.7%
IP address Information
# of IPv4 addresses: 2889185
Top 10 bandwidth usage (bytes/total in %):
16.2% 11.3% 4.6% 4.2% 4.2% 3.7% 3.3% 2.9% 2.7% 2.6%
# of IPv6 addresses: 10582
Top 10 bandwidth usage (bytes/total in %):
15.1% 10.2% 8.1% 6.8% 6.6% 5.5% 5.0% 3.3% 2.8% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201302251400.pktlen.png)
detailed numbers
[ 32- 63]: 6866769
[ 64- 127]: 5747784
[ 128- 255]: 702923
[ 256- 511]: 813296
[ 512- 1023]: 1242818
[ 1024- 2047]: 9892502
Protocol Breakdown
![[protocol breakdown chart]](201302251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25266092 (100.00%) 16541595462 (100.00%) 654.70
ip 23606979 ( 93.43%) 14989684647 ( 90.62%) 634.97
tcp 15608811 ( 61.78%) 12909600718 ( 78.04%) 827.07
http(s) 8752066 ( 34.64%) 10442407062 ( 63.13%) 1193.14
http(c) 4996536 ( 19.78%) 1648725930 ( 9.97%) 329.97
squid 152287 ( 0.60%) 88430623 ( 0.53%) 580.68
smtp 48067 ( 0.19%) 24865346 ( 0.15%) 517.31
ftp 3758 ( 0.01%) 299159 ( 0.00%) 79.61
pop3 8041 ( 0.03%) 6169612 ( 0.04%) 767.27
imap 1379 ( 0.01%) 194675 ( 0.00%) 141.17
telnet 32775 ( 0.13%) 3903032 ( 0.02%) 119.09
ssh 47466 ( 0.19%) 7917511 ( 0.05%) 166.80
dns 3594 ( 0.01%) 2230871 ( 0.01%) 620.72
bgp 523 ( 0.00%) 116084 ( 0.00%) 221.96
napster 17 ( 0.00%) 2801 ( 0.00%) 164.76
realaud 4 ( 0.00%) 240 ( 0.00%) 60.00
rtsp 91965 ( 0.36%) 96799058 ( 0.59%) 1052.56
icecast 25189 ( 0.10%) 16244887 ( 0.10%) 644.92
hotline 5 ( 0.00%) 672 ( 0.00%) 134.40
other 1445139 ( 5.72%) 571293155 ( 3.45%) 395.32
udp 3315620 ( 13.12%) 1544839457 ( 9.34%) 465.93
dns 1354688 ( 5.36%) 621548449 ( 3.76%) 458.81
realaud 57 ( 0.00%) 4284 ( 0.00%) 75.16
halflif 30 ( 0.00%) 3978 ( 0.00%) 132.60
starcra 36 ( 0.00%) 5009 ( 0.00%) 139.14
everque 93 ( 0.00%) 20114 ( 0.00%) 216.28
unreal 47 ( 0.00%) 5017 ( 0.00%) 106.74
quake 51 ( 0.00%) 4107 ( 0.00%) 80.53
cuseeme 3 ( 0.00%) 294 ( 0.00%) 98.00
other 1956329 ( 7.74%) 918074338 ( 5.55%) 469.28
icmp 3973990 ( 15.73%) 253289346 ( 1.53%) 63.74
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 20838 ( 0.08%) 6615452 ( 0.04%) 317.47
ip6 645377 ( 2.55%) 267668277 ( 1.62%) 414.75
other 42158 ( 0.17%) 7652127 ( 0.05%) 181.51
frag 327777 ( 1.30%) 397452929 ( 2.40%) 1212.57
ip6 1659113 ( 6.57%) 1551910815 ( 9.38%) 935.39
tcp6 1181974 ( 4.68%) 1087210659 ( 6.57%) 919.83
http(s) 853375 ( 3.38%) 925515705 ( 5.60%) 1084.54
http(c) 151872 ( 0.60%) 17413385 ( 0.11%) 114.66
squid 4 ( 0.00%) 300 ( 0.00%) 75.00
smtp 683 ( 0.00%) 219853 ( 0.00%) 321.89
ftp 987 ( 0.00%) 114773 ( 0.00%) 116.28
ssh 105 ( 0.00%) 13830 ( 0.00%) 131.71
dns 987 ( 0.00%) 710099 ( 0.00%) 719.45
bgp 102 ( 0.00%) 27779 ( 0.00%) 272.34
other 173859 ( 0.69%) 143194935 ( 0.87%) 823.63
udp6 139698 ( 0.55%) 92084975 ( 0.56%) 659.17
dns 66959 ( 0.27%) 20739070 ( 0.13%) 309.73
realaud 1 ( 0.00%) 112 ( 0.00%) 112.00
halflif 2 ( 0.00%) 209 ( 0.00%) 104.50
other 72736 ( 0.29%) 71345584 ( 0.43%) 980.88
icmp6 25020 ( 0.10%) 2649522 ( 0.02%) 105.90
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 312391 ( 1.24%) 369961579 ( 2.24%) 1184.29
tcpdump file: 201302251400.dump.gz (566.56 MB)