Traffic Trace Info
DumpFile: 201303111400.dump
FileSize: 2565.63MB
Id: 201303111400
StartTime: Mon Mar 11 14:00:00 2013
EndTime: Mon Mar 11 14:15:00 2013
TotalTime: 900.11 seconds
TotalCapSize: 2028.29MB CapLen: 96 bytes
# of packets: 35214677 (26785.94MB)
AvgRate: 249.52Mbps stddev:73.20M
IP flow (unique src/dst pair) Information
# of flows: 2583384 (avg. 13.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.0% 10.1% 6.2% 5.0% 3.6% 2.4% 1.9% 1.5% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 1847528
Top 10 bandwidth usage (bytes/total in %):
42.7% 14.5% 11.2% 6.8% 6.8% 5.6% 4.7% 4.0% 2.9% 2.8%
# of IPv6 addresses: 15258
Top 10 bandwidth usage (bytes/total in %):
23.2% 23.2% 11.7% 6.2% 4.3% 3.9% 2.2% 2.0% 1.9% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201303111400.pktlen.png)
detailed numbers
[ 32- 63]: 6781501
[ 64- 127]: 8188676
[ 128- 255]: 841877
[ 256- 511]: 869565
[ 512- 1023]: 824164
[ 1024- 2047]: 17708894
Protocol Breakdown
![[protocol breakdown chart]](201303111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35214677 (100.00%) 28087096649 (100.00%) 797.60
ip 32697427 ( 92.85%) 25768418953 ( 91.74%) 788.09
tcp 27671940 ( 78.58%) 24407031092 ( 86.90%) 882.01
http(s) 14898106 ( 42.31%) 18917087007 ( 67.35%) 1269.76
http(c) 8539753 ( 24.25%) 2185380770 ( 7.78%) 255.91
squid 23276 ( 0.07%) 11853983 ( 0.04%) 509.28
smtp 43658 ( 0.12%) 19105051 ( 0.07%) 437.61
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 51028 ( 0.14%) 30381456 ( 0.11%) 595.39
pop3 14198 ( 0.04%) 10994698 ( 0.04%) 774.38
imap 8125 ( 0.02%) 4751889 ( 0.02%) 584.85
telnet 34938 ( 0.10%) 4034795 ( 0.01%) 115.48
ssh 261190 ( 0.74%) 40558359 ( 0.14%) 155.28
dns 6078 ( 0.02%) 2168045 ( 0.01%) 356.70
bgp 530 ( 0.00%) 95378 ( 0.00%) 179.96
napster 5 ( 0.00%) 666 ( 0.00%) 133.20
realaud 2 ( 0.00%) 124 ( 0.00%) 62.00
rtsp 5686 ( 0.02%) 7636563 ( 0.03%) 1343.05
icecast 6079 ( 0.02%) 3244186 ( 0.01%) 533.67
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 3779286 ( 10.73%) 3169738002 ( 11.29%) 838.71
udp 1953365 ( 5.55%) 757877907 ( 2.70%) 387.99
dns 754087 ( 2.14%) 181478130 ( 0.65%) 240.66
rip 9 ( 0.00%) 630 ( 0.00%) 70.00
realaud 36 ( 0.00%) 3362 ( 0.00%) 93.39
halflif 23 ( 0.00%) 2654 ( 0.00%) 115.39
starcra 28 ( 0.00%) 3530 ( 0.00%) 126.07
everque 95 ( 0.00%) 19504 ( 0.00%) 205.31
unreal 13 ( 0.00%) 2280 ( 0.00%) 175.38
quake 17 ( 0.00%) 3020 ( 0.00%) 177.65
cuseeme 2 ( 0.00%) 177 ( 0.00%) 88.50
other 1198900 ( 3.40%) 576231421 ( 2.05%) 480.63
icmp 2294122 ( 6.51%) 194974916 ( 0.69%) 84.99
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 87944 ( 0.25%) 57640068 ( 0.21%) 655.42
ip6 643615 ( 1.83%) 343528271 ( 1.22%) 533.75
other 46257 ( 0.13%) 7347539 ( 0.03%) 158.84
frag 1498 ( 0.00%) 1908289 ( 0.01%) 1273.89
ip6 2517250 ( 7.15%) 2318677696 ( 8.26%) 921.12
tcp6 1990823 ( 5.65%) 1900808422 ( 6.77%) 954.79
http(s) 1013615 ( 2.88%) 1035221905 ( 3.69%) 1021.32
http(c) 642943 ( 1.83%) 563929046 ( 2.01%) 877.11
squid 49 ( 0.00%) 5243 ( 0.00%) 107.00
smtp 172 ( 0.00%) 83400 ( 0.00%) 484.88
ftp 260 ( 0.00%) 25940 ( 0.00%) 99.77
ssh 447 ( 0.00%) 137974 ( 0.00%) 308.67
dns 255 ( 0.00%) 71214 ( 0.00%) 279.27
bgp 92 ( 0.00%) 23264 ( 0.00%) 252.87
other 332990 ( 0.95%) 301310436 ( 1.07%) 904.86
udp6 340515 ( 0.97%) 232696232 ( 0.83%) 683.37
dns 75770 ( 0.22%) 25120738 ( 0.09%) 331.54
realaud 3 ( 0.00%) 1462 ( 0.00%) 487.33
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
unreal 1 ( 0.00%) 105 ( 0.00%) 105.00
other 264740 ( 0.75%) 207573821 ( 0.74%) 784.07
icmp6 31486 ( 0.09%) 3125662 ( 0.01%) 99.27
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 154396 ( 0.44%) 182043300 ( 0.65%) 1179.07
tcpdump file: 201303111400.dump.gz (793.67 MB)