Traffic Trace Info
DumpFile: 201303141400.dump
FileSize: 2547.09MB
Id: 201303141400
StartTime: Thu Mar 14 14:00:00 2013
EndTime: Thu Mar 14 14:15:00 2013
TotalTime: 899.52 seconds
TotalCapSize: 1987.09MB CapLen: 96 bytes
# of packets: 36699950 (32029.47MB)
AvgRate: 298.68Mbps stddev:44.59M
IP flow (unique src/dst pair) Information
# of flows: 1876240 (avg. 19.56 pkts/flow)
Top 10 big flow size (bytes/total in %):
17.1% 11.7% 6.5% 5.8% 2.8% 1.3% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 1454405
Top 10 bandwidth usage (bytes/total in %):
22.2% 18.5% 18.5% 12.7% 7.2% 7.1% 7.1% 6.4% 5.6% 3.1%
# of IPv6 addresses: 10257
Top 10 bandwidth usage (bytes/total in %):
13.5% 12.1% 12.1% 10.4% 6.9% 4.5% 4.5% 4.3% 4.2% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201303141400.pktlen.png)
detailed numbers
[ 32- 63]: 5932222
[ 64- 127]: 5585409
[ 128- 255]: 900949
[ 256- 511]: 853866
[ 512- 1023]: 2025132
[ 1024- 2047]: 21402372
Protocol Breakdown
![[protocol breakdown chart]](201303141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36699950 (100.00%) 33585334936 (100.00%) 915.13
ip 33790195 ( 92.07%) 31116294848 ( 92.65%) 920.87
tcp 22929443 ( 62.48%) 22935892807 ( 68.29%) 1000.28
http(s) 14930826 ( 40.68%) 20112863874 ( 59.89%) 1347.07
http(c) 5730030 ( 15.61%) 1238495912 ( 3.69%) 216.14
squid 26968 ( 0.07%) 11479013 ( 0.03%) 425.65
smtp 53778 ( 0.15%) 18526764 ( 0.06%) 344.50
nntp 11 ( 0.00%) 660 ( 0.00%) 60.00
ftp 35318 ( 0.10%) 29366433 ( 0.09%) 831.49
pop3 6317 ( 0.02%) 2721719 ( 0.01%) 430.86
imap 3473 ( 0.01%) 755873 ( 0.00%) 217.64
telnet 8193 ( 0.02%) 2046660 ( 0.01%) 249.81
ssh 51989 ( 0.14%) 9159221 ( 0.03%) 176.18
dns 3769 ( 0.01%) 531969 ( 0.00%) 141.14
bgp 565 ( 0.00%) 147193 ( 0.00%) 260.52
napster 17 ( 0.00%) 1028 ( 0.00%) 60.47
realaud 43 ( 0.00%) 4209 ( 0.00%) 97.88
rtsp 12 ( 0.00%) 720 ( 0.00%) 60.00
icecast 12360 ( 0.03%) 11561473 ( 0.03%) 935.39
hotline 2 ( 0.00%) 148 ( 0.00%) 74.00
other 2065664 ( 5.63%) 1498223458 ( 4.46%) 725.30
udp 7488008 ( 20.40%) 6998499844 ( 20.84%) 934.63
dns 762988 ( 2.08%) 273473418 ( 0.81%) 358.42
rip 24 ( 0.00%) 1584 ( 0.00%) 66.00
realaud 12 ( 0.00%) 1725 ( 0.00%) 143.75
halflif 26 ( 0.00%) 3293 ( 0.00%) 126.65
starcra 35 ( 0.00%) 4371 ( 0.00%) 124.89
everque 61 ( 0.00%) 9691 ( 0.00%) 158.87
unreal 10 ( 0.00%) 1049 ( 0.00%) 104.90
quake 8 ( 0.00%) 1064 ( 0.00%) 133.00
cuseeme 2 ( 0.00%) 215 ( 0.00%) 107.50
other 6700985 ( 18.26%) 6722878940 ( 20.02%) 1003.27
icmp 2257861 ( 6.15%) 194543828 ( 0.58%) 86.16
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 23970 ( 0.07%) 8315912 ( 0.02%) 346.93
ip6 1045200 ( 2.85%) 971390013 ( 2.89%) 929.38
other 45529 ( 0.12%) 7633284 ( 0.02%) 167.66
frag 168568 ( 0.46%) 190805945 ( 0.57%) 1131.92
ip6 2909755 ( 7.93%) 2469040088 ( 7.35%) 848.54
tcp6 2347037 ( 6.40%) 1912561791 ( 5.69%) 814.88
http(s) 1116293 ( 3.04%) 1205462668 ( 3.59%) 1079.88
http(c) 671500 ( 1.83%) 67199606 ( 0.20%) 100.07
smtp 189 ( 0.00%) 87180 ( 0.00%) 461.27
ftp 89 ( 0.00%) 7937 ( 0.00%) 89.18
ssh 616 ( 0.00%) 85744 ( 0.00%) 139.19
dns 337 ( 0.00%) 115356 ( 0.00%) 342.30
bgp 121 ( 0.00%) 29248 ( 0.00%) 241.72
other 557892 ( 1.52%) 639574052 ( 1.90%) 1146.41
udp6 187680 ( 0.51%) 132076143 ( 0.39%) 703.73
dns 74986 ( 0.20%) 26325623 ( 0.08%) 351.07
everque 1 ( 0.00%) 98 ( 0.00%) 98.00
other 112693 ( 0.31%) 105750422 ( 0.31%) 938.39
icmp6 24919 ( 0.07%) 2526454 ( 0.01%) 101.39
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 350089 ( 0.95%) 421871620 ( 1.26%) 1205.04
tcpdump file: 201303141400.dump.gz (769.24 MB)