Traffic Trace Info
DumpFile: 201303021400.dump
FileSize: 1353.01MB
Id: 201303021400
StartTime: Sat Mar 2 14:00:00 2013
EndTime: Sat Mar 2 14:15:01 2013
TotalTime: 900.93 seconds
TotalCapSize: 1052.03MB CapLen: 96 bytes
# of packets: 19724882 (13013.20MB)
AvgRate: 121.17Mbps stddev:22.38M
IP flow (unique src/dst pair) Information
# of flows: 4002149 (avg. 4.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.5% 5.1% 3.4% 2.5% 2.2% 1.3% 1.1% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 2525441
Top 10 bandwidth usage (bytes/total in %):
11.4% 8.5% 6.4% 6.2% 6.2% 6.2% 5.8% 3.8% 3.8% 3.4%
# of IPv6 addresses: 12147
Top 10 bandwidth usage (bytes/total in %):
23.6% 14.9% 8.8% 7.4% 6.0% 6.0% 5.6% 3.4% 3.0% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201303021400.pktlen.png)
detailed numbers
[ 32- 63]: 5627291
[ 64- 127]: 4168396
[ 128- 255]: 601325
[ 256- 511]: 368772
[ 512- 1023]: 405444
[ 1024- 2047]: 8553654
Protocol Breakdown
![[protocol breakdown chart]](201303021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19724882 (100.00%) 13645325646 (100.00%) 691.78
ip 18197144 ( 92.25%) 12193984796 ( 89.36%) 670.10
tcp 11120595 ( 56.38%) 10276366489 ( 75.31%) 924.08
http(s) 6147834 ( 31.17%) 7825333429 ( 57.35%) 1272.86
http(c) 2943106 ( 14.92%) 1042122888 ( 7.64%) 354.09
squid 16504 ( 0.08%) 5069126 ( 0.04%) 307.15
smtp 31954 ( 0.16%) 7054686 ( 0.05%) 220.78
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 46583 ( 0.24%) 28034894 ( 0.21%) 601.83
pop3 3121 ( 0.02%) 1033549 ( 0.01%) 331.16
imap 3308 ( 0.02%) 355807 ( 0.00%) 107.56
telnet 4395 ( 0.02%) 1800147 ( 0.01%) 409.59
ssh 60295 ( 0.31%) 30221269 ( 0.22%) 501.22
dns 1640 ( 0.01%) 128878 ( 0.00%) 78.58
bgp 576 ( 0.00%) 151696 ( 0.00%) 263.36
napster 6 ( 0.00%) 743 ( 0.00%) 123.83
realaud 5 ( 0.00%) 680 ( 0.00%) 136.00
icecast 8286 ( 0.04%) 7695004 ( 0.06%) 928.68
other 1852976 ( 9.39%) 1327363319 ( 9.73%) 716.34
udp 2831648 ( 14.36%) 1490208584 ( 10.92%) 526.27
dns 751302 ( 3.81%) 133279668 ( 0.98%) 177.40
realaud 7 ( 0.00%) 1215 ( 0.00%) 173.57
halflif 33 ( 0.00%) 3257 ( 0.00%) 98.70
starcra 43 ( 0.00%) 2886 ( 0.00%) 67.12
everque 119 ( 0.00%) 11813 ( 0.00%) 99.27
unreal 16 ( 0.00%) 1762 ( 0.00%) 110.12
quake 29 ( 0.00%) 2125 ( 0.00%) 73.28
cuseeme 17 ( 0.00%) 1261 ( 0.00%) 74.18
other 2079956 ( 10.54%) 1356845128 ( 9.94%) 652.34
icmp 3886381 ( 19.70%) 273097345 ( 2.00%) 70.27
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 8237 ( 0.04%) 4191750 ( 0.03%) 508.89
ip6 304248 ( 1.54%) 143463935 ( 1.05%) 471.54
other 45850 ( 0.23%) 6637423 ( 0.05%) 144.76
frag 20351 ( 0.10%) 27911519 ( 0.20%) 1371.51
ip6 1527738 ( 7.75%) 1451340850 ( 10.64%) 949.99
tcp6 790492 ( 4.01%) 649988093 ( 4.76%) 822.26
http(s) 584722 ( 2.96%) 618125543 ( 4.53%) 1057.13
http(c) 184035 ( 0.93%) 21802427 ( 0.16%) 118.47
smtp 39 ( 0.00%) 17388 ( 0.00%) 445.85
ftp 111 ( 0.00%) 10041 ( 0.00%) 90.46
dns 1678 ( 0.01%) 1500702 ( 0.01%) 894.34
bgp 88 ( 0.00%) 21366 ( 0.00%) 242.80
other 19819 ( 0.10%) 8510626 ( 0.06%) 429.42
udp6 71803 ( 0.36%) 27675755 ( 0.20%) 385.44
dns 47398 ( 0.24%) 15085602 ( 0.11%) 318.28
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 24403 ( 0.12%) 12589940 ( 0.09%) 515.92
icmp6 32500 ( 0.16%) 4301778 ( 0.03%) 132.36
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 632912 ( 3.21%) 769371008 ( 5.64%) 1215.61
tcpdump file: 201303021400.dump.gz (438.67 MB)