Traffic Trace Info
DumpFile: 201303071400.dump
FileSize: 2061.78MB
Id: 201303071400
StartTime: Thu Mar 7 14:00:00 2013
EndTime: Thu Mar 7 14:15:00 2013
TotalTime: 900.37 seconds
TotalCapSize: 1612.54MB CapLen: 96 bytes
# of packets: 29440918 (24931.50MB)
AvgRate: 232.31Mbps stddev:50.98M
IP flow (unique src/dst pair) Information
# of flows: 1904494 (avg. 15.46 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.9% 13.3% 3.9% 3.7% 2.8% 1.7% 1.6% 1.4% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 1437142
Top 10 bandwidth usage (bytes/total in %):
38.2% 15.1% 14.4% 6.2% 4.2% 4.2% 4.0% 3.5% 3.0% 3.0%
# of IPv6 addresses: 11357
Top 10 bandwidth usage (bytes/total in %):
11.1% 11.1% 9.8% 7.4% 5.0% 4.6% 3.9% 3.9% 3.3% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201303071400.pktlen.png)
detailed numbers
[ 32- 63]: 5453473
[ 64- 127]: 4771540
[ 128- 255]: 815830
[ 256- 511]: 654628
[ 512- 1023]: 1306587
[ 1024- 2047]: 16438860
Protocol Breakdown
![[protocol breakdown chart]](201303071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29440918 (100.00%) 26142577703 (100.00%) 887.97
ip 27441067 ( 93.21%) 24360420477 ( 93.18%) 887.74
tcp 21954977 ( 74.57%) 22040395304 ( 84.31%) 1003.89
http(s) 14457939 ( 49.11%) 19535790852 ( 74.73%) 1351.22
http(c) 5873715 ( 19.95%) 1476024870 ( 5.65%) 251.29
squid 165557 ( 0.56%) 24969251 ( 0.10%) 150.82
smtp 65490 ( 0.22%) 38449255 ( 0.15%) 587.10
nntp 6 ( 0.00%) 360 ( 0.00%) 60.00
ftp 51833 ( 0.18%) 29474587 ( 0.11%) 568.65
pop3 7917 ( 0.03%) 6404793 ( 0.02%) 808.99
imap 3568 ( 0.01%) 695731 ( 0.00%) 194.99
telnet 3673 ( 0.01%) 1748505 ( 0.01%) 476.04
ssh 16053 ( 0.05%) 3669867 ( 0.01%) 228.61
dns 5097 ( 0.02%) 2109510 ( 0.01%) 413.87
bgp 540 ( 0.00%) 118213 ( 0.00%) 218.91
napster 248 ( 0.00%) 60722 ( 0.00%) 244.85
realaud 7 ( 0.00%) 420 ( 0.00%) 60.00
rtsp 6 ( 0.00%) 360 ( 0.00%) 60.00
icecast 49561 ( 0.17%) 46054169 ( 0.18%) 929.24
hotline 7 ( 0.00%) 786 ( 0.00%) 112.29
other 1253688 ( 4.26%) 874818733 ( 3.35%) 697.80
udp 3379349 ( 11.48%) 1911119917 ( 7.31%) 565.53
dns 743976 ( 2.53%) 231768253 ( 0.89%) 311.53
rip 18 ( 0.00%) 1188 ( 0.00%) 66.00
realaud 18 ( 0.00%) 2008 ( 0.00%) 111.56
halflif 25 ( 0.00%) 3104 ( 0.00%) 124.16
starcra 45 ( 0.00%) 5795 ( 0.00%) 128.78
everque 127 ( 0.00%) 19568 ( 0.00%) 154.08
unreal 5 ( 0.00%) 1049 ( 0.00%) 209.80
quake 119 ( 0.00%) 112425 ( 0.00%) 944.75
cuseeme 5 ( 0.00%) 609 ( 0.00%) 121.80
other 2634502 ( 8.95%) 1679071643 ( 6.42%) 637.34
icmp 1522192 ( 5.17%) 144836030 ( 0.55%) 95.15
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 36746 ( 0.12%) 14125168 ( 0.05%) 384.40
ip6 501332 ( 1.70%) 241919987 ( 0.93%) 482.55
other 46287 ( 0.16%) 8004911 ( 0.03%) 172.94
frag 54867 ( 0.19%) 59405432 ( 0.23%) 1082.72
ip6 1999849 ( 6.79%) 1782157106 ( 6.82%) 891.15
tcp6 1375969 ( 4.67%) 1181147536 ( 4.52%) 858.41
http(s) 865212 ( 2.94%) 827776238 ( 3.17%) 956.73
http(c) 335307 ( 1.14%) 221110092 ( 0.85%) 659.43
smtp 1027 ( 0.00%) 445028 ( 0.00%) 433.33
ftp 114 ( 0.00%) 10277 ( 0.00%) 90.15
dns 418 ( 0.00%) 109519 ( 0.00%) 262.01
bgp 95 ( 0.00%) 22000 ( 0.00%) 231.58
other 173796 ( 0.59%) 131674382 ( 0.50%) 757.64
udp6 291082 ( 0.99%) 240523846 ( 0.92%) 826.31
dns 72976 ( 0.25%) 24597860 ( 0.09%) 337.07
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 1 ( 0.00%) 98 ( 0.00%) 98.00
other 218103 ( 0.74%) 215925676 ( 0.83%) 990.02
icmp6 24898 ( 0.08%) 2538969 ( 0.01%) 101.97
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 307870 ( 1.05%) 357942675 ( 1.37%) 1162.64
tcpdump file: 201303071400.dump.gz (624.36 MB)