Traffic Trace Info
DumpFile: 201303041400.dump
FileSize: 1978.82MB
Id: 201303041400
StartTime: Mon Mar 4 14:00:01 2013
EndTime: Mon Mar 4 14:15:00 2013
TotalTime: 899.48 seconds
TotalCapSize: 1559.65MB CapLen: 96 bytes
# of packets: 27470154 (22171.84MB)
AvgRate: 206.81Mbps stddev:31.71M
IP flow (unique src/dst pair) Information
# of flows: 1968909 (avg. 13.95 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.5% 6.1% 5.5% 4.2% 3.4% 2.6% 2.3% 1.7% 1.5% 1.5%
IP address Information
# of IPv4 addresses: 1438945
Top 10 bandwidth usage (bytes/total in %):
12.9% 10.0% 9.7% 7.0% 7.0% 6.7% 5.0% 4.8% 4.8% 3.9%
# of IPv6 addresses: 12112
Top 10 bandwidth usage (bytes/total in %):
51.6% 43.2% 5.4% 5.1% 3.8% 2.2% 2.2% 2.0% 1.9% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201303041400.pktlen.png)
detailed numbers
[ 32- 63]: 5113749
[ 64- 127]: 5077954
[ 128- 255]: 674030
[ 256- 511]: 958959
[ 512- 1023]: 1319881
[ 1024- 2047]: 14325581
Protocol Breakdown
![[protocol breakdown chart]](201303041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27470154 (100.00%) 23248861722 (100.00%) 846.33
ip 24700469 ( 89.92%) 20306930670 ( 87.35%) 822.13
tcp 19302835 ( 70.27%) 18580999273 ( 79.92%) 962.60
http(s) 10196227 ( 37.12%) 12745952504 ( 54.82%) 1250.07
http(c) 5244287 ( 19.09%) 2150141660 ( 9.25%) 410.00
squid 30244 ( 0.11%) 10262696 ( 0.04%) 339.33
smtp 76165 ( 0.28%) 54044712 ( 0.23%) 709.57
ftp 37546 ( 0.14%) 29306966 ( 0.13%) 780.56
pop3 7611 ( 0.03%) 5297746 ( 0.02%) 696.06
imap 3498 ( 0.01%) 361414 ( 0.00%) 103.32
telnet 4596 ( 0.02%) 1820906 ( 0.01%) 396.19
ssh 929436 ( 3.38%) 1014800047 ( 4.36%) 1091.84
dns 5062 ( 0.02%) 2104631 ( 0.01%) 415.77
bgp 504 ( 0.00%) 99177 ( 0.00%) 196.78
napster 13 ( 0.00%) 1530 ( 0.00%) 117.69
realaud 5 ( 0.00%) 673 ( 0.00%) 134.60
rtsp 88504 ( 0.32%) 91454983 ( 0.39%) 1033.34
icecast 310 ( 0.00%) 37300 ( 0.00%) 120.32
hotline 103 ( 0.00%) 6386 ( 0.00%) 62.00
other 2678724 ( 9.75%) 2475305942 ( 10.65%) 924.06
udp 2503019 ( 9.11%) 1205025065 ( 5.18%) 481.43
dns 746261 ( 2.72%) 188462202 ( 0.81%) 252.54
realaud 3 ( 0.00%) 265 ( 0.00%) 88.33
halflif 21 ( 0.00%) 2628 ( 0.00%) 125.14
starcra 25 ( 0.00%) 5224 ( 0.00%) 208.96
everque 107 ( 0.00%) 21505 ( 0.00%) 200.98
unreal 19 ( 0.00%) 4566 ( 0.00%) 240.32
quake 15 ( 0.00%) 1643 ( 0.00%) 109.53
cuseeme 10 ( 0.00%) 719 ( 0.00%) 71.90
other 1756391 ( 6.39%) 1016412097 ( 4.37%) 578.69
icmp 1942123 ( 7.07%) 247571560 ( 1.06%) 127.47
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 29620 ( 0.11%) 14589848 ( 0.06%) 492.57
ip6 874592 ( 3.18%) 250947907 ( 1.08%) 286.93
other 48095 ( 0.18%) 7777747 ( 0.03%) 161.72
frag 27744 ( 0.10%) 31136033 ( 0.13%) 1122.26
ip6 2769685 ( 10.08%) 2941931052 ( 12.65%) 1062.19
tcp6 2188194 ( 7.97%) 2385130936 ( 10.26%) 1090.00
http(s) 854746 ( 3.11%) 885929972 ( 3.81%) 1036.48
http(c) 267872 ( 0.98%) 32542710 ( 0.14%) 121.49
smtp 1820 ( 0.01%) 241678 ( 0.00%) 132.79
ftp 91 ( 0.00%) 8133 ( 0.00%) 89.37
ssh 182 ( 0.00%) 24227 ( 0.00%) 133.12
dns 2973 ( 0.01%) 2691215 ( 0.01%) 905.22
bgp 103 ( 0.00%) 28277 ( 0.00%) 274.53
other 1060407 ( 3.86%) 1463664724 ( 6.30%) 1380.29
udp6 175295 ( 0.64%) 105625172 ( 0.45%) 602.56
dns 65932 ( 0.24%) 20794825 ( 0.09%) 315.40
halflif 3 ( 0.00%) 830 ( 0.00%) 276.67
other 109360 ( 0.40%) 84829517 ( 0.36%) 775.69
icmp6 32619 ( 0.12%) 3401259 ( 0.01%) 104.27
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 373546 ( 1.36%) 447769469 ( 1.93%) 1198.70
tcpdump file: 201303041400.dump.gz (597.61 MB)