Traffic Trace Info
DumpFile: 201303061400.dump
FileSize: 1814.70MB
Id: 201303061400
StartTime: Wed Mar 6 14:00:01 2013
EndTime: Wed Mar 6 14:15:00 2013
TotalTime: 899.34 seconds
TotalCapSize: 1426.23MB CapLen: 96 bytes
# of packets: 25457929 (20110.09MB)
AvgRate: 187.60Mbps stddev:42.61M
IP flow (unique src/dst pair) Information
# of flows: 1738231 (avg. 14.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.9% 9.8% 6.3% 3.7% 1.7% 1.7% 1.6% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 1338955
Top 10 bandwidth usage (bytes/total in %):
29.7% 15.1% 10.8% 7.0% 6.9% 5.5% 4.1% 4.1% 4.1% 2.9%
# of IPv6 addresses: 12390
Top 10 bandwidth usage (bytes/total in %):
9.7% 9.7% 7.6% 5.3% 4.8% 3.9% 2.8% 2.7% 2.3% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201303061400.pktlen.png)
detailed numbers
[ 32- 63]: 4892426
[ 64- 127]: 5154268
[ 128- 255]: 704311
[ 256- 511]: 740969
[ 512- 1023]: 881860
[ 1024- 2047]: 13084095
Protocol Breakdown
![[protocol breakdown chart]](201303061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25457929 (100.00%) 21086952869 (100.00%) 828.31
ip 23577646 ( 92.61%) 19470089626 ( 92.33%) 825.79
tcp 19736087 ( 77.52%) 18431853215 ( 87.41%) 933.92
http(s) 11752617 ( 46.16%) 15180928031 ( 71.99%) 1291.71
http(c) 5873073 ( 23.07%) 1943668065 ( 9.22%) 330.95
squid 24080 ( 0.09%) 10235975 ( 0.05%) 425.08
smtp 52656 ( 0.21%) 23472283 ( 0.11%) 445.77
ftp 35609 ( 0.14%) 26290055 ( 0.12%) 738.30
pop3 9628 ( 0.04%) 8719424 ( 0.04%) 905.63
imap 4197 ( 0.02%) 544805 ( 0.00%) 129.81
telnet 4050 ( 0.02%) 1787748 ( 0.01%) 441.42
ssh 44332 ( 0.17%) 8479724 ( 0.04%) 191.28
dns 2023 ( 0.01%) 202243 ( 0.00%) 99.97
bgp 584 ( 0.00%) 171483 ( 0.00%) 293.64
napster 1 ( 0.00%) 60 ( 0.00%) 60.00
rtsp 88243 ( 0.35%) 91050538 ( 0.43%) 1031.82
icecast 42293 ( 0.17%) 37689026 ( 0.18%) 891.14
hotline 30 ( 0.00%) 4044 ( 0.00%) 134.80
other 1802671 ( 7.08%) 1098609711 ( 5.21%) 609.43
udp 1768238 ( 6.95%) 670085121 ( 3.18%) 378.96
dns 670388 ( 2.63%) 169375363 ( 0.80%) 252.65
rip 15 ( 0.00%) 1050 ( 0.00%) 70.00
realaud 4 ( 0.00%) 406 ( 0.00%) 101.50
halflif 32 ( 0.00%) 2918 ( 0.00%) 91.19
starcra 37 ( 0.00%) 3354 ( 0.00%) 90.65
everque 267 ( 0.00%) 39148 ( 0.00%) 146.62
unreal 13 ( 0.00%) 2141 ( 0.00%) 164.69
quake 25 ( 0.00%) 2351 ( 0.00%) 94.04
cuseeme 2 ( 0.00%) 473 ( 0.00%) 236.50
other 1097135 ( 4.31%) 500454050 ( 2.37%) 456.15
icmp 1511221 ( 5.94%) 144073080 ( 0.68%) 95.34
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 89987 ( 0.35%) 38452518 ( 0.18%) 427.31
ip6 424161 ( 1.67%) 178400247 ( 0.85%) 420.60
other 47767 ( 0.19%) 7206175 ( 0.03%) 150.86
frag 8374 ( 0.03%) 10005126 ( 0.05%) 1194.78
ip6 1880283 ( 7.39%) 1616863243 ( 7.67%) 859.90
tcp6 1432142 ( 5.63%) 1217311114 ( 5.77%) 849.99
http(s) 921083 ( 3.62%) 992514800 ( 4.71%) 1077.55
http(c) 301798 ( 1.19%) 36116920 ( 0.17%) 119.67
smtp 179 ( 0.00%) 110301 ( 0.00%) 616.21
ftp 89 ( 0.00%) 7913 ( 0.00%) 88.91
imap 3035 ( 0.01%) 2799076 ( 0.01%) 922.27
ssh 108 ( 0.00%) 14228 ( 0.00%) 131.74
dns 459 ( 0.00%) 271770 ( 0.00%) 592.09
bgp 89 ( 0.00%) 24637 ( 0.00%) 276.82
napster 3 ( 0.00%) 254 ( 0.00%) 84.67
hotline 3 ( 0.00%) 254 ( 0.00%) 84.67
other 205296 ( 0.81%) 185450961 ( 0.88%) 903.33
udp6 288152 ( 1.13%) 233131885 ( 1.11%) 809.06
dns 65833 ( 0.26%) 20174021 ( 0.10%) 306.44
everque 1 ( 0.00%) 112 ( 0.00%) 112.00
cuseeme 1 ( 0.00%) 106 ( 0.00%) 106.00
other 222317 ( 0.87%) 212957646 ( 1.01%) 957.90
icmp6 22832 ( 0.09%) 3276117 ( 0.02%) 143.49
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 137127 ( 0.54%) 163140047 ( 0.77%) 1189.70
tcpdump file: 201303061400.dump.gz (569.95 MB)