Traffic Trace Info
DumpFile: 201303031400.dump
FileSize: 1272.64MB
Id: 201303031400
StartTime: Sun Mar 3 14:00:01 2013
EndTime: Sun Mar 3 14:15:01 2013
TotalTime: 899.91 seconds
TotalCapSize: 991.15MB CapLen: 96 bytes
# of packets: 18447210 (10885.96MB)
AvgRate: 101.44Mbps stddev:24.08M
IP flow (unique src/dst pair) Information
# of flows: 3851116 (avg. 4.79 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.5% 2.6% 2.4% 2.2% 1.8% 1.8% 1.8% 1.6% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 2561531
Top 10 bandwidth usage (bytes/total in %):
13.9% 11.3% 7.5% 7.5% 6.3% 3.9% 3.1% 3.0% 2.8% 2.6%
# of IPv6 addresses: 8592
Top 10 bandwidth usage (bytes/total in %):
21.5% 18.3% 11.2% 8.5% 8.1% 4.5% 2.9% 2.9% 2.5% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201303031400.pktlen.png)
detailed numbers
[ 32- 63]: 5601023
[ 64- 127]: 4207963
[ 128- 255]: 497877
[ 256- 511]: 592635
[ 512- 1023]: 597130
[ 1024- 2047]: 6950582
Protocol Breakdown
![[protocol breakdown chart]](201303031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 18447210 (100.00%) 11414752499 (100.00%) 618.78
ip 16848785 ( 91.34%) 9902966039 ( 86.76%) 587.76
tcp 10339228 ( 56.05%) 8318696790 ( 72.88%) 804.58
http(s) 4580492 ( 24.83%) 5297453428 ( 46.41%) 1156.52
http(c) 3712199 ( 20.12%) 1228222970 ( 10.76%) 330.86
squid 28925 ( 0.16%) 17369250 ( 0.15%) 600.49
smtp 29527 ( 0.16%) 8912670 ( 0.08%) 301.85
ftp 38862 ( 0.21%) 29363571 ( 0.26%) 755.59
pop3 2372 ( 0.01%) 602630 ( 0.01%) 254.06
imap 3597 ( 0.02%) 442866 ( 0.00%) 123.12
telnet 3258 ( 0.02%) 1734431 ( 0.02%) 532.36
ssh 66545 ( 0.36%) 18463932 ( 0.16%) 277.47
dns 4239 ( 0.02%) 2174113 ( 0.02%) 512.88
bgp 666 ( 0.00%) 256479 ( 0.00%) 385.10
napster 10 ( 0.00%) 1273 ( 0.00%) 127.30
realaud 22 ( 0.00%) 2964 ( 0.00%) 134.73
rtsp 9 ( 0.00%) 556 ( 0.00%) 61.78
icecast 19854 ( 0.11%) 14855157 ( 0.13%) 748.22
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 1848650 ( 10.02%) 1698840440 ( 14.88%) 918.96
udp 2178253 ( 11.81%) 1009656723 ( 8.85%) 463.52
dns 406860 ( 2.21%) 88065995 ( 0.77%) 216.45
realaud 14 ( 0.00%) 961 ( 0.00%) 68.64
halflif 16 ( 0.00%) 1786 ( 0.00%) 111.62
starcra 20 ( 0.00%) 1673 ( 0.00%) 83.65
everque 746 ( 0.00%) 868844 ( 0.01%) 1164.67
unreal 9 ( 0.00%) 2402 ( 0.00%) 266.89
quake 16 ( 0.00%) 1162 ( 0.00%) 72.62
cuseeme 15 ( 0.00%) 1050 ( 0.00%) 70.00
other 1769944 ( 9.59%) 920009708 ( 8.06%) 519.80
icmp 3856474 ( 20.91%) 302993552 ( 2.65%) 78.57
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 7506 ( 0.04%) 3976176 ( 0.03%) 529.73
ip6 419630 ( 2.27%) 259631776 ( 2.27%) 618.72
other 47509 ( 0.26%) 7991752 ( 0.07%) 168.22
frag 7726 ( 0.04%) 10042732 ( 0.09%) 1299.86
ip6 1598425 ( 8.66%) 1511786460 ( 13.24%) 945.80
tcp6 986778 ( 5.35%) 849595256 ( 7.44%) 860.98
http(s) 532541 ( 2.89%) 534011329 ( 4.68%) 1002.76
http(c) 168593 ( 0.91%) 22539755 ( 0.20%) 133.69
smtp 85 ( 0.00%) 30351 ( 0.00%) 357.07
ftp 144 ( 0.00%) 13622 ( 0.00%) 94.60
dns 4959 ( 0.03%) 4758271 ( 0.04%) 959.52
bgp 139 ( 0.00%) 55654 ( 0.00%) 400.39
napster 13 ( 0.00%) 1748 ( 0.00%) 134.46
other 280304 ( 1.52%) 288184526 ( 2.52%) 1028.11
udp6 62320 ( 0.34%) 22678249 ( 0.20%) 363.90
dns 46438 ( 0.25%) 14546329 ( 0.13%) 313.24
halflif 1 ( 0.00%) 101 ( 0.00%) 101.00
quake 1 ( 0.00%) 105 ( 0.00%) 105.00
other 15880 ( 0.09%) 8131714 ( 0.07%) 512.07
icmp6 23166 ( 0.13%) 2651758 ( 0.02%) 114.47
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 526131 ( 2.85%) 636857117 ( 5.58%) 1210.45
tcpdump file: 201303031400.dump.gz (414.75 MB)