Traffic Trace Info
DumpFile: 201302281400.dump
FileSize: 1869.33MB
Id: 201302281400
StartTime: Thu Feb 28 14:00:01 2013
EndTime: Thu Feb 28 14:15:00 2013
TotalTime: 899.34 seconds
TotalCapSize: 1478.98MB CapLen: 96 bytes
# of packets: 25581540 (18538.97MB)
AvgRate: 172.90Mbps stddev:43.36M
IP flow (unique src/dst pair) Information
# of flows: 1614133 (avg. 15.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.5% 7.7% 4.4% 3.3% 2.5% 2.2% 2.0% 1.8% 1.8% 1.3%
IP address Information
# of IPv4 addresses: 1271139
Top 10 bandwidth usage (bytes/total in %):
13.7% 12.9% 12.3% 9.0% 9.0% 8.0% 5.7% 5.3% 5.2% 4.3%
# of IPv6 addresses: 10120
Top 10 bandwidth usage (bytes/total in %):
21.8% 19.8% 15.6% 7.8% 7.5% 7.1% 6.4% 4.9% 4.7% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201302281400.pktlen.png)
detailed numbers
[ 32- 63]: 4202064
[ 64- 127]: 6952821
[ 128- 255]: 730229
[ 256- 511]: 916766
[ 512- 1023]: 599658
[ 1024- 2047]: 12180002
Protocol Breakdown
![[protocol breakdown chart]](201302281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25581540 (100.00%) 19439513809 (100.00%) 759.90
ip 22933057 ( 89.65%) 16927026545 ( 87.08%) 738.11
tcp 19049521 ( 74.47%) 15967385320 ( 82.14%) 838.20
http(s) 10424345 ( 40.75%) 12535489015 ( 64.48%) 1202.52
http(c) 6424842 ( 25.12%) 1890815006 ( 9.73%) 294.30
squid 35659 ( 0.14%) 6119053 ( 0.03%) 171.60
smtp 60016 ( 0.23%) 22654638 ( 0.12%) 377.48
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 10894 ( 0.04%) 783198 ( 0.00%) 71.89
pop3 30687 ( 0.12%) 28104060 ( 0.14%) 915.83
imap 3378 ( 0.01%) 608253 ( 0.00%) 180.06
telnet 3385 ( 0.01%) 1749054 ( 0.01%) 516.71
ssh 153297 ( 0.60%) 25061425 ( 0.13%) 163.48
dns 5721 ( 0.02%) 416104 ( 0.00%) 72.73
bgp 518 ( 0.00%) 111904 ( 0.00%) 216.03
napster 14 ( 0.00%) 1265 ( 0.00%) 90.36
realaud 11 ( 0.00%) 1090 ( 0.00%) 99.09
icecast 13746 ( 0.05%) 8529541 ( 0.04%) 620.51
hotline 18 ( 0.00%) 2372 ( 0.00%) 131.78
other 1882989 ( 7.36%) 1446939282 ( 7.44%) 768.43
udp 1926442 ( 7.53%) 677383852 ( 3.48%) 351.62
dns 950913 ( 3.72%) 292573516 ( 1.51%) 307.68
realaud 10 ( 0.00%) 1085 ( 0.00%) 108.50
halflif 10 ( 0.00%) 1267 ( 0.00%) 126.70
starcra 9 ( 0.00%) 1793 ( 0.00%) 199.22
everque 105 ( 0.00%) 20191 ( 0.00%) 192.30
unreal 9 ( 0.00%) 1775 ( 0.00%) 197.22
quake 26 ( 0.00%) 2726 ( 0.00%) 104.85
cuseeme 3 ( 0.00%) 260 ( 0.00%) 86.67
other 974215 ( 3.81%) 383992382 ( 1.98%) 394.16
icmp 1457945 ( 5.70%) 143303449 ( 0.74%) 98.29
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 17884 ( 0.07%) 5726968 ( 0.03%) 320.23
ip6 436733 ( 1.71%) 124822074 ( 0.64%) 285.81
other 44348 ( 0.17%) 8385722 ( 0.04%) 189.09
frag 42708 ( 0.17%) 53413192 ( 0.27%) 1250.66
ip6 2648483 ( 10.35%) 2512487264 ( 12.92%) 948.65
tcp6 1643923 ( 6.43%) 1476521975 ( 7.60%) 898.17
http(s) 802414 ( 3.14%) 852321738 ( 4.38%) 1062.20
http(c) 169239 ( 0.66%) 19142502 ( 0.10%) 113.11
smtp 274 ( 0.00%) 137506 ( 0.00%) 501.85
ftp 390 ( 0.00%) 34619 ( 0.00%) 88.77
dns 1338 ( 0.01%) 1212391 ( 0.01%) 906.12
bgp 88 ( 0.00%) 25298 ( 0.00%) 287.48
other 670180 ( 2.62%) 603647921 ( 3.11%) 900.73
udp6 250735 ( 0.98%) 218839494 ( 1.13%) 872.79
dns 66636 ( 0.26%) 21057180 ( 0.11%) 316.00
halflif 1 ( 0.00%) 101 ( 0.00%) 101.00
unreal 1 ( 0.00%) 119 ( 0.00%) 119.00
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 184096 ( 0.72%) 197781990 ( 1.02%) 1074.34
icmp6 23484 ( 0.09%) 2560842 ( 0.01%) 109.05
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 730311 ( 2.85%) 814560873 ( 4.19%) 1115.36
tcpdump file: 201302281400.dump.gz (579.59 MB)