Traffic Trace Info
DumpFile: 201303121400.dump
FileSize: 2059.81MB
Id: 201303121400
StartTime: Tue Mar 12 14:00:01 2013
EndTime: Tue Mar 12 14:15:01 2013
TotalTime: 899.85 seconds
TotalCapSize: 1625.07MB CapLen: 96 bytes
# of packets: 28491064 (21112.42MB)
AvgRate: 196.83Mbps stddev:32.29M
IP flow (unique src/dst pair) Information
# of flows: 2360949 (avg. 12.07 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 3.9% 3.1% 2.9% 2.4% 2.0% 1.9% 1.8% 1.6% 1.6%
IP address Information
# of IPv4 addresses: 1711333
Top 10 bandwidth usage (bytes/total in %):
13.6% 12.8% 6.0% 6.0% 5.8% 4.3% 3.6% 3.4% 3.3% 3.2%
# of IPv6 addresses: 12693
Top 10 bandwidth usage (bytes/total in %):
31.6% 31.6% 12.6% 9.0% 9.0% 5.7% 5.3% 2.1% 2.1% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201303121400.pktlen.png)
detailed numbers
[ 32- 63]: 6839682
[ 64- 127]: 5600796
[ 128- 255]: 762991
[ 256- 511]: 767551
[ 512- 1023]: 636801
[ 1024- 2047]: 13883243
Protocol Breakdown
![[protocol breakdown chart]](201303121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28491064 (100.00%) 22137975456 (100.00%) 777.01
ip 26214951 ( 92.01%) 19939965907 ( 90.07%) 760.63
tcp 21017012 ( 73.77%) 18292494438 ( 82.63%) 870.37
http(s) 10967823 ( 38.50%) 13608130077 ( 61.47%) 1240.73
http(c) 7326429 ( 25.71%) 2745821620 ( 12.40%) 374.78
squid 25685 ( 0.09%) 11658875 ( 0.05%) 453.92
smtp 117355 ( 0.41%) 15489730 ( 0.07%) 131.99
ftp 31559 ( 0.11%) 26265407 ( 0.12%) 832.26
pop3 8380 ( 0.03%) 6769702 ( 0.03%) 807.84
imap 2937 ( 0.01%) 314601 ( 0.00%) 107.12
telnet 3084 ( 0.01%) 1677778 ( 0.01%) 544.03
ssh 361909 ( 1.27%) 275229993 ( 1.24%) 760.50
dns 20481 ( 0.07%) 1498493 ( 0.01%) 73.17
bgp 550 ( 0.00%) 143490 ( 0.00%) 260.89
napster 30 ( 0.00%) 2423 ( 0.00%) 80.77
realaud 43 ( 0.00%) 8171 ( 0.00%) 190.02
rtsp 47 ( 0.00%) 4380 ( 0.00%) 93.19
icecast 22504 ( 0.08%) 15506234 ( 0.07%) 689.04
hotline 6 ( 0.00%) 752 ( 0.00%) 125.33
other 2128190 ( 7.47%) 1583972712 ( 7.16%) 744.28
udp 2018766 ( 7.09%) 995150001 ( 4.50%) 492.95
dns 754135 ( 2.65%) 238768130 ( 1.08%) 316.61
realaud 24 ( 0.00%) 1826 ( 0.00%) 76.08
halflif 12 ( 0.00%) 1119 ( 0.00%) 93.25
starcra 73 ( 0.00%) 13308 ( 0.00%) 182.30
everque 92 ( 0.00%) 19213 ( 0.00%) 208.84
unreal 16 ( 0.00%) 1861 ( 0.00%) 116.31
quake 12 ( 0.00%) 1599 ( 0.00%) 133.25
cuseeme 5 ( 0.00%) 465 ( 0.00%) 93.00
other 1263617 ( 4.44%) 755423491 ( 3.41%) 597.83
icmp 2537978 ( 8.91%) 204896437 ( 0.93%) 80.73
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 18873 ( 0.07%) 6711238 ( 0.03%) 355.60
ip6 578835 ( 2.03%) 434020071 ( 1.96%) 749.82
other 43302 ( 0.15%) 6674452 ( 0.03%) 154.14
frag 74371 ( 0.26%) 100392339 ( 0.45%) 1349.89
ip6 2276113 ( 7.99%) 2198009549 ( 9.93%) 965.69
tcp6 1835994 ( 6.44%) 1813440283 ( 8.19%) 987.72
http(s) 953288 ( 3.35%) 1062558034 ( 4.80%) 1114.62
http(c) 379521 ( 1.33%) 42761173 ( 0.19%) 112.67
smtp 193 ( 0.00%) 122447 ( 0.00%) 634.44
ftp 90 ( 0.00%) 8023 ( 0.00%) 89.14
imap 77 ( 0.00%) 9137 ( 0.00%) 118.66
ssh 283 ( 0.00%) 34802 ( 0.00%) 122.98
dns 900 ( 0.00%) 646550 ( 0.00%) 718.39
bgp 94 ( 0.00%) 28814 ( 0.00%) 306.53
other 501548 ( 1.76%) 707271303 ( 3.19%) 1410.18
udp6 162898 ( 0.57%) 78328567 ( 0.35%) 480.84
dns 80899 ( 0.28%) 26106306 ( 0.12%) 322.70
cuseeme 1 ( 0.00%) 514 ( 0.00%) 514.00
other 81998 ( 0.29%) 52221747 ( 0.24%) 636.87
icmp6 25183 ( 0.09%) 2604394 ( 0.01%) 103.42
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 252007 ( 0.88%) 303632089 ( 1.37%) 1204.86
tcpdump file: 201303121400.dump.gz (641.29 MB)