Traffic Trace Info
DumpFile: 201303161400.dump
FileSize: 1610.55MB
Id: 201303161400
StartTime: Sat Mar 16 14:00:01 2013
EndTime: Sat Mar 16 14:15:01 2013
TotalTime: 899.79 seconds
TotalCapSize: 1268.33MB CapLen: 96 bytes
# of packets: 22427581 (16113.92MB)
AvgRate: 150.18Mbps stddev:24.82M
IP flow (unique src/dst pair) Information
# of flows: 2040157 (avg. 10.99 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 6.4% 4.0% 1.9% 1.9% 1.6% 1.4% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 1511763
Top 10 bandwidth usage (bytes/total in %):
21.7% 13.5% 7.9% 6.3% 4.8% 4.0% 3.0% 2.3% 2.3% 2.3%
# of IPv6 addresses: 12222
Top 10 bandwidth usage (bytes/total in %):
37.1% 37.1% 14.0% 5.6% 4.0% 2.9% 2.8% 2.6% 2.6% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201303161400.pktlen.png)
detailed numbers
[ 32- 63]: 4588483
[ 64- 127]: 5529684
[ 128- 255]: 624765
[ 256- 511]: 435561
[ 512- 1023]: 566956
[ 1024- 2047]: 10682132
Protocol Breakdown
![[protocol breakdown chart]](201303161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22427581 (100.00%) 16896675000 (100.00%) 753.39
ip 19647356 ( 87.60%) 13970153674 ( 82.68%) 711.04
tcp 14920719 ( 66.53%) 12704094029 ( 75.19%) 851.44
http(s) 7975483 ( 35.56%) 10157593624 ( 60.12%) 1273.60
http(c) 3786474 ( 16.88%) 660987250 ( 3.91%) 174.57
squid 88489 ( 0.39%) 14102125 ( 0.08%) 159.37
smtp 69169 ( 0.31%) 30535088 ( 0.18%) 441.46
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 35722 ( 0.16%) 28848047 ( 0.17%) 807.57
pop3 4225 ( 0.02%) 1840417 ( 0.01%) 435.60
imap 2784 ( 0.01%) 579976 ( 0.00%) 208.32
telnet 47154 ( 0.21%) 4885913 ( 0.03%) 103.62
ssh 654936 ( 2.92%) 98712834 ( 0.58%) 150.72
dns 1080 ( 0.00%) 220710 ( 0.00%) 204.36
bgp 551 ( 0.00%) 145236 ( 0.00%) 263.59
napster 39 ( 0.00%) 4081 ( 0.00%) 104.64
realaud 135 ( 0.00%) 46720 ( 0.00%) 346.07
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 451 ( 0.00%) 74667 ( 0.00%) 165.56
hotline 11 ( 0.00%) 1389 ( 0.00%) 126.27
other 2254009 ( 10.05%) 1705515518 ( 10.09%) 756.66
udp 2001966 ( 8.93%) 819677315 ( 4.85%) 409.44
dns 722779 ( 3.22%) 222012772 ( 1.31%) 307.17
realaud 4 ( 0.00%) 680 ( 0.00%) 170.00
halflif 13 ( 0.00%) 1361 ( 0.00%) 104.69
starcra 17 ( 0.00%) 1787 ( 0.00%) 105.12
everque 93 ( 0.00%) 15484 ( 0.00%) 166.49
unreal 18 ( 0.00%) 2275 ( 0.00%) 126.39
quake 143 ( 0.00%) 11404 ( 0.00%) 79.75
cuseeme 1 ( 0.00%) 81 ( 0.00%) 81.00
other 1278406 ( 5.70%) 597040004 ( 3.53%) 467.02
icmp 2222434 ( 9.91%) 174348658 ( 1.03%) 78.45
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 27124 ( 0.12%) 8223936 ( 0.05%) 303.20
ip6 428856 ( 1.91%) 256877726 ( 1.52%) 598.98
other 46073 ( 0.21%) 6912850 ( 0.04%) 150.04
frag 65555 ( 0.29%) 88888678 ( 0.53%) 1355.94
ip6 2780225 ( 12.40%) 2926521326 ( 17.32%) 1052.62
tcp6 1816550 ( 8.10%) 2037422104 ( 12.06%) 1121.59
http(s) 847680 ( 3.78%) 920564130 ( 5.45%) 1085.98
http(c) 207238 ( 0.92%) 25713651 ( 0.15%) 124.08
smtp 225 ( 0.00%) 63601 ( 0.00%) 282.67
ftp 91 ( 0.00%) 8085 ( 0.00%) 88.85
ssh 186 ( 0.00%) 23730 ( 0.00%) 127.58
dns 385 ( 0.00%) 156109 ( 0.00%) 405.48
bgp 96 ( 0.00%) 31270 ( 0.00%) 325.73
other 760649 ( 3.39%) 1090861528 ( 6.46%) 1434.12
udp6 342196 ( 1.53%) 279452333 ( 1.65%) 816.64
dns 59710 ( 0.27%) 21494362 ( 0.13%) 359.98
other 282486 ( 1.26%) 257957971 ( 1.53%) 913.17
icmp6 21626 ( 0.10%) 2363818 ( 0.01%) 109.30
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 599823 ( 2.67%) 607278991 ( 3.59%) 1012.43
tcpdump file: 201303161400.dump.gz (501.76 MB)