Traffic Trace Info
DumpFile: 201303051400.dump
FileSize: 1898.69MB
Id: 201303051400
StartTime: Tue Mar 5 14:00:01 2013
EndTime: Tue Mar 5 14:15:00 2013
TotalTime: 899.40 seconds
TotalCapSize: 1486.14MB CapLen: 96 bytes
# of packets: 27036714 (20953.68MB)
AvgRate: 195.45Mbps stddev:63.55M
IP flow (unique src/dst pair) Information
# of flows: 1861221 (avg. 14.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.4% 5.5% 4.5% 4.5% 3.8% 3.6% 1.9% 1.6% 1.6% 1.4%
IP address Information
# of IPv4 addresses: 1378614
Top 10 bandwidth usage (bytes/total in %):
22.6% 10.2% 8.0% 5.9% 4.9% 4.9% 4.9% 4.7% 4.3% 4.1%
# of IPv6 addresses: 12266
Top 10 bandwidth usage (bytes/total in %):
9.8% 7.6% 4.9% 4.8% 4.6% 4.5% 4.4% 4.4% 4.2% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201303051400.pktlen.png)
detailed numbers
[ 32- 63]: 4727776
[ 64- 127]: 5749527
[ 128- 255]: 794811
[ 256- 511]: 775872
[ 512- 1023]: 1441096
[ 1024- 2047]: 13547632
Protocol Breakdown
![[protocol breakdown chart]](201303051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27036714 (100.00%) 21971520788 (100.00%) 812.65
ip 25451901 ( 94.14%) 20613782268 ( 93.82%) 809.91
tcp 19248336 ( 71.19%) 17790384879 ( 80.97%) 924.26
http(s) 10367254 ( 38.35%) 13101666366 ( 59.63%) 1263.75
http(c) 5829940 ( 21.56%) 2406291386 ( 10.95%) 412.75
squid 43716 ( 0.16%) 22645458 ( 0.10%) 518.01
smtp 37002 ( 0.14%) 11424495 ( 0.05%) 308.75
ftp 36254 ( 0.13%) 26224097 ( 0.12%) 723.34
pop3 5025 ( 0.02%) 2078127 ( 0.01%) 413.56
imap 17659 ( 0.07%) 13091496 ( 0.06%) 741.35
telnet 17333 ( 0.06%) 2725876 ( 0.01%) 157.27
ssh 128874 ( 0.48%) 116782000 ( 0.53%) 906.17
dns 7408 ( 0.03%) 2231418 ( 0.01%) 301.22
bgp 984 ( 0.00%) 136625 ( 0.00%) 138.85
napster 1 ( 0.00%) 66 ( 0.00%) 66.00
rtsp 17401 ( 0.06%) 18026484 ( 0.08%) 1035.95
icecast 1353 ( 0.01%) 150818 ( 0.00%) 111.47
hotline 58 ( 0.00%) 7017 ( 0.00%) 120.98
other 2738074 ( 10.13%) 2066903150 ( 9.41%) 754.87
udp 3941679 ( 14.58%) 2198112598 ( 10.00%) 557.66
dns 900186 ( 3.33%) 279908171 ( 1.27%) 310.94
rip 1 ( 0.00%) 145 ( 0.00%) 145.00
realaud 7 ( 0.00%) 621 ( 0.00%) 88.71
halflif 307 ( 0.00%) 26014 ( 0.00%) 84.74
starcra 36 ( 0.00%) 3262 ( 0.00%) 90.61
everque 54 ( 0.00%) 7248 ( 0.00%) 134.22
unreal 3 ( 0.00%) 286 ( 0.00%) 95.33
quake 66 ( 0.00%) 6551 ( 0.00%) 99.26
cuseeme 2 ( 0.00%) 473 ( 0.00%) 236.50
other 3040885 ( 11.25%) 1918060519 ( 8.73%) 630.76
icmp 1694828 ( 6.27%) 359559322 ( 1.64%) 212.15
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 39179 ( 0.14%) 16383726 ( 0.07%) 418.18
ip6 478632 ( 1.77%) 241742190 ( 1.10%) 505.07
other 49062 ( 0.18%) 7580283 ( 0.03%) 154.50
frag 82923 ( 0.31%) 110944073 ( 0.50%) 1337.92
ip6 1584813 ( 5.86%) 1357738520 ( 6.18%) 856.72
tcp6 1119150 ( 4.14%) 954408903 ( 4.34%) 852.80
http(s) 816105 ( 3.02%) 882034503 ( 4.01%) 1080.79
http(c) 247485 ( 0.92%) 29918077 ( 0.14%) 120.89
squid 4434 ( 0.02%) 3869428 ( 0.02%) 872.67
smtp 214 ( 0.00%) 93344 ( 0.00%) 436.19
ftp 779 ( 0.00%) 69111 ( 0.00%) 88.72
imap 277 ( 0.00%) 36648 ( 0.00%) 132.30
ssh 2880 ( 0.01%) 529272 ( 0.00%) 183.78
dns 499 ( 0.00%) 299714 ( 0.00%) 600.63
bgp 91 ( 0.00%) 23962 ( 0.00%) 263.32
other 46386 ( 0.17%) 37534844 ( 0.17%) 809.18
udp6 271713 ( 1.00%) 197591645 ( 0.90%) 727.21
dns 67409 ( 0.25%) 20724707 ( 0.09%) 307.45
other 204304 ( 0.76%) 176866938 ( 0.80%) 865.70
icmp6 23553 ( 0.09%) 2458441 ( 0.01%) 104.38
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 170366 ( 0.63%) 203275315 ( 0.93%) 1193.17
tcpdump file: 201303051400.dump.gz (583.89 MB)