Traffic Trace Info
DumpFile: 201303151400.dump
FileSize: 1892.52MB
Id: 201303151400
StartTime: Fri Mar 15 14:00:01 2013
EndTime: Fri Mar 15 14:15:00 2013
TotalTime: 899.85 seconds
TotalCapSize: 1487.53MB CapLen: 96 bytes
# of packets: 26540824 (18767.54MB)
AvgRate: 174.95Mbps stddev:44.19M
IP flow (unique src/dst pair) Information
# of flows: 1921509 (avg. 13.81 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 3.6% 2.3% 2.3% 1.9% 1.8% 1.4% 1.3% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 1475125
Top 10 bandwidth usage (bytes/total in %):
20.2% 9.7% 6.6% 5.1% 4.0% 2.8% 2.8% 2.8% 2.7% 2.3%
# of IPv6 addresses: 10592
Top 10 bandwidth usage (bytes/total in %):
27.7% 27.6% 25.3% 25.3% 7.6% 5.9% 3.3% 3.1% 1.9% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201303151400.pktlen.png)
detailed numbers
[ 32- 63]: 5243104
[ 64- 127]: 6343194
[ 128- 255]: 1274308
[ 256- 511]: 702362
[ 512- 1023]: 701980
[ 1024- 2047]: 12275876
Protocol Breakdown
![[protocol breakdown chart]](201303151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26540824 (100.00%) 19679189856 (100.00%) 741.47
ip 23665294 ( 89.17%) 16909823914 ( 85.93%) 714.54
tcp 17675636 ( 66.60%) 14854776663 ( 75.48%) 840.41
http(s) 9358561 ( 35.26%) 11563846769 ( 58.76%) 1235.64
http(c) 5288235 ( 19.92%) 1902090073 ( 9.67%) 359.68
squid 44135 ( 0.17%) 9836911 ( 0.05%) 222.88
smtp 67921 ( 0.26%) 27545327 ( 0.14%) 405.55
ftp 35807 ( 0.13%) 29294550 ( 0.15%) 818.12
pop3 5157 ( 0.02%) 2095494 ( 0.01%) 406.34
imap 7483 ( 0.03%) 5523630 ( 0.03%) 738.16
telnet 3101 ( 0.01%) 1680248 ( 0.01%) 541.84
ssh 1105906 ( 4.17%) 145375042 ( 0.74%) 131.45
dns 1457 ( 0.01%) 228645 ( 0.00%) 156.93
bgp 647 ( 0.00%) 223835 ( 0.00%) 345.96
napster 36 ( 0.00%) 4701 ( 0.00%) 130.58
realaud 24 ( 0.00%) 2769 ( 0.00%) 115.38
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 644 ( 0.00%) 73925 ( 0.00%) 114.79
hotline 12 ( 0.00%) 1102 ( 0.00%) 91.83
other 1756508 ( 6.62%) 1166953522 ( 5.93%) 664.36
udp 3316765 ( 12.50%) 1722985943 ( 8.76%) 519.48
dns 895059 ( 3.37%) 357281670 ( 1.82%) 399.17
rip 9 ( 0.00%) 709 ( 0.00%) 78.78
realaud 10 ( 0.00%) 1639 ( 0.00%) 163.90
halflif 22 ( 0.00%) 3652 ( 0.00%) 166.00
starcra 27 ( 0.00%) 3235 ( 0.00%) 119.81
everque 98 ( 0.00%) 20868 ( 0.00%) 212.94
unreal 97 ( 0.00%) 46083 ( 0.00%) 475.08
quake 32 ( 0.00%) 3854 ( 0.00%) 120.44
cuseeme 2 ( 0.00%) 170 ( 0.00%) 85.00
other 2419820 ( 9.12%) 1365438998 ( 6.94%) 564.27
icmp 2285955 ( 8.61%) 191370574 ( 0.97%) 83.72
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 26504 ( 0.10%) 8947204 ( 0.05%) 337.58
ip6 315023 ( 1.19%) 125058942 ( 0.64%) 396.98
other 45226 ( 0.17%) 6665318 ( 0.03%) 147.38
frag 137425 ( 0.52%) 184071262 ( 0.94%) 1339.43
ip6 2875530 ( 10.83%) 2769365942 ( 14.07%) 963.08
tcp6 2630475 ( 9.91%) 2571324394 ( 13.07%) 977.51
http(s) 1838908 ( 6.93%) 1813667023 ( 9.22%) 986.27
http(c) 273137 ( 1.03%) 32038670 ( 0.16%) 117.30
smtp 205 ( 0.00%) 79177 ( 0.00%) 386.23
ftp 780 ( 0.00%) 69197 ( 0.00%) 88.71
ssh 118 ( 0.00%) 13848 ( 0.00%) 117.36
dns 378 ( 0.00%) 94461 ( 0.00%) 249.90
bgp 97 ( 0.00%) 31769 ( 0.00%) 327.52
other 516852 ( 1.95%) 725330249 ( 3.69%) 1403.36
udp6 97921 ( 0.37%) 40305716 ( 0.20%) 411.61
dns 77105 ( 0.29%) 26940241 ( 0.14%) 349.40
realaud 2 ( 0.00%) 199 ( 0.00%) 99.50
halflif 2 ( 0.00%) 208 ( 0.00%) 104.00
unreal 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 1 ( 0.00%) 114 ( 0.00%) 114.00
other 20810 ( 0.08%) 13364848 ( 0.07%) 642.23
icmp6 18436 ( 0.07%) 2166837 ( 0.01%) 117.53
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 128668 ( 0.48%) 155564915 ( 0.79%) 1209.04
tcpdump file: 201303151400.dump.gz (601.35 MB)