Traffic Trace Info
DumpFile: 201303131400.dump
FileSize: 2208.32MB
Id: 201303131400
StartTime: Wed Mar 13 14:00:01 2013
EndTime: Wed Mar 13 14:15:01 2013
TotalTime: 899.81 seconds
TotalCapSize: 1731.88MB CapLen: 96 bytes
# of packets: 31223857 (22161.78MB)
AvgRate: 206.62Mbps stddev:41.52M
IP flow (unique src/dst pair) Information
# of flows: 2546005 (avg. 12.26 pkts/flow)
Top 10 big flow size (bytes/total in %):
21.0% 7.5% 1.7% 1.5% 1.4% 1.3% 1.0% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 1912097
Top 10 bandwidth usage (bytes/total in %):
36.0% 23.2% 8.7% 8.3% 2.2% 1.8% 1.8% 1.8% 1.7% 1.7%
# of IPv6 addresses: 13462
Top 10 bandwidth usage (bytes/total in %):
17.2% 17.2% 10.5% 10.5% 7.7% 6.0% 5.2% 2.8% 2.8% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201303131400.pktlen.png)
detailed numbers
[ 32- 63]: 7397441
[ 64- 127]: 7105361
[ 128- 255]: 582247
[ 256- 511]: 821365
[ 512- 1023]: 1047866
[ 1024- 2047]: 14269577
Protocol Breakdown
![[protocol breakdown chart]](201303131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31223857 (100.00%) 23238307467 (100.00%) 744.25
ip 29222214 ( 93.59%) 21408769276 ( 92.13%) 732.62
tcp 23444623 ( 75.09%) 19829576989 ( 85.33%) 845.80
http(s) 12542555 ( 40.17%) 16637028476 ( 71.59%) 1326.45
http(c) 9226800 ( 29.55%) 2042394024 ( 8.79%) 221.35
squid 107013 ( 0.34%) 102705084 ( 0.44%) 959.74
smtp 91596 ( 0.29%) 34073486 ( 0.15%) 372.00
ftp 32123 ( 0.10%) 28843573 ( 0.12%) 897.91
pop3 8544 ( 0.03%) 4383597 ( 0.02%) 513.06
imap 3493 ( 0.01%) 538075 ( 0.00%) 154.04
telnet 5271 ( 0.02%) 1845015 ( 0.01%) 350.03
ssh 33071 ( 0.11%) 5584378 ( 0.02%) 168.86
dns 1728 ( 0.01%) 435238 ( 0.00%) 251.87
bgp 502 ( 0.00%) 98989 ( 0.00%) 197.19
napster 3 ( 0.00%) 180 ( 0.00%) 60.00
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 14911 ( 0.05%) 15326290 ( 0.07%) 1027.85
hotline 2 ( 0.00%) 152 ( 0.00%) 76.00
other 1377007 ( 4.41%) 956320192 ( 4.12%) 694.49
udp 2377829 ( 7.62%) 1067073294 ( 4.59%) 448.76
dns 709761 ( 2.27%) 260282680 ( 1.12%) 366.72
rip 6 ( 0.00%) 1122 ( 0.00%) 187.00
realaud 6 ( 0.00%) 495 ( 0.00%) 82.50
halflif 216 ( 0.00%) 30375 ( 0.00%) 140.62
starcra 73 ( 0.00%) 12857 ( 0.00%) 176.12
everque 93 ( 0.00%) 21130 ( 0.00%) 227.20
unreal 21 ( 0.00%) 2911 ( 0.00%) 138.62
quake 13 ( 0.00%) 4979 ( 0.00%) 383.00
other 1666928 ( 5.34%) 805929704 ( 3.47%) 483.48
icmp 2786660 ( 8.92%) 239254523 ( 1.03%) 85.86
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 22006 ( 0.07%) 7216764 ( 0.03%) 327.95
ip6 535728 ( 1.72%) 255394238 ( 1.10%) 476.72
other 55184 ( 0.18%) 10234308 ( 0.04%) 185.46
frag 106426 ( 0.34%) 145946564 ( 0.63%) 1371.34
ip6 2001643 ( 6.41%) 1829538191 ( 7.87%) 914.02
tcp6 1678198 ( 5.37%) 1596035607 ( 6.87%) 951.04
http(s) 936736 ( 3.00%) 1027430031 ( 4.42%) 1096.82
http(c) 318661 ( 1.02%) 37458837 ( 0.16%) 117.55
smtp 388 ( 0.00%) 55491 ( 0.00%) 143.02
ftp 140 ( 0.00%) 12390 ( 0.00%) 88.50
ssh 109 ( 0.00%) 14418 ( 0.00%) 132.28
dns 750 ( 0.00%) 554323 ( 0.00%) 739.10
bgp 95 ( 0.00%) 26140 ( 0.00%) 275.16
realaud 3 ( 0.00%) 254 ( 0.00%) 84.67
other 421316 ( 1.35%) 530483723 ( 2.28%) 1259.11
udp6 134436 ( 0.43%) 38411110 ( 0.17%) 285.72
dns 71817 ( 0.23%) 24939304 ( 0.11%) 347.26
realaud 1 ( 0.00%) 101 ( 0.00%) 101.00
halflif 1 ( 0.00%) 102 ( 0.00%) 102.00
unreal 1 ( 0.00%) 102 ( 0.00%) 102.00
quake 2 ( 0.00%) 228 ( 0.00%) 114.00
other 62614 ( 0.20%) 13471273 ( 0.06%) 215.15
icmp6 28283 ( 0.09%) 2820291 ( 0.01%) 99.72
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 160696 ( 0.51%) 192267103 ( 0.83%) 1196.46
tcpdump file: 201303131400.dump.gz (683.29 MB)