Traffic Trace Info
DumpFile: 201303171400.dump
FileSize: 1430.90MB
Id: 201303171400
StartTime: Sun Mar 17 14:00:01 2013
EndTime: Sun Mar 17 14:15:00 2013
TotalTime: 899.82 seconds
TotalCapSize: 1134.15MB CapLen: 96 bytes
# of packets: 19447176 (14719.83MB)
AvgRate: 137.24Mbps stddev:18.47M
IP flow (unique src/dst pair) Information
# of flows: 1922342 (avg. 10.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.0% 6.3% 6.2% 3.6% 3.0% 2.3% 2.3% 1.9% 1.6% 1.5%
IP address Information
# of IPv4 addresses: 1408833
Top 10 bandwidth usage (bytes/total in %):
16.2% 11.8% 7.8% 7.8% 7.7% 5.3% 4.6% 4.3% 4.2% 4.0%
# of IPv6 addresses: 9344
Top 10 bandwidth usage (bytes/total in %):
36.2% 36.2% 6.6% 6.6% 4.7% 4.6% 4.1% 3.7% 3.2% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201303171400.pktlen.png)
detailed numbers
[ 32- 63]: 3312184
[ 64- 127]: 4797537
[ 128- 255]: 465023
[ 256- 511]: 634133
[ 512- 1023]: 552835
[ 1024- 2047]: 9685464
Protocol Breakdown
![[protocol breakdown chart]](201303171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19447176 (100.00%) 15434856195 (100.00%) 793.68
ip 16677826 ( 85.76%) 12442408130 ( 80.61%) 746.04
tcp 12866251 ( 66.16%) 11397207965 ( 73.84%) 885.82
http(s) 6131799 ( 31.53%) 7357663539 ( 47.67%) 1199.92
http(c) 4306652 ( 22.15%) 2151084458 ( 13.94%) 499.48
squid 79355 ( 0.41%) 10890805 ( 0.07%) 137.24
smtp 46201 ( 0.24%) 12683228 ( 0.08%) 274.52
nntp 3 ( 0.00%) 186 ( 0.00%) 62.00
ftp 12177 ( 0.06%) 4706978 ( 0.03%) 386.55
pop3 2011 ( 0.01%) 459139 ( 0.00%) 228.31
imap 3133 ( 0.02%) 323405 ( 0.00%) 103.23
telnet 36669 ( 0.19%) 4106093 ( 0.03%) 111.98
ssh 839744 ( 4.32%) 985539557 ( 6.39%) 1173.62
dns 5867 ( 0.03%) 540379 ( 0.00%) 92.10
bgp 517 ( 0.00%) 100652 ( 0.00%) 194.68
napster 12 ( 0.00%) 1095 ( 0.00%) 91.25
realaud 8 ( 0.00%) 571 ( 0.00%) 71.38
rtsp 97 ( 0.00%) 6014 ( 0.00%) 62.00
icecast 355 ( 0.00%) 46885 ( 0.00%) 132.07
hotline 6 ( 0.00%) 414 ( 0.00%) 69.00
other 1401645 ( 7.21%) 869054567 ( 5.63%) 620.02
udp 1817385 ( 9.35%) 709133592 ( 4.59%) 390.19
dns 598831 ( 3.08%) 140459188 ( 0.91%) 234.56
realaud 13 ( 0.00%) 859 ( 0.00%) 66.08
halflif 29 ( 0.00%) 2303 ( 0.00%) 79.41
starcra 24 ( 0.00%) 1677 ( 0.00%) 69.88
everque 49 ( 0.00%) 8177 ( 0.00%) 166.88
unreal 21 ( 0.00%) 3002 ( 0.00%) 142.95
quake 92 ( 0.00%) 6760 ( 0.00%) 73.48
cuseeme 2 ( 0.00%) 138 ( 0.00%) 69.00
other 1218116 ( 6.26%) 568470623 ( 3.68%) 466.68
icmp 1588995 ( 8.17%) 150816446 ( 0.98%) 94.91
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 19305 ( 0.10%) 7004818 ( 0.05%) 362.85
ip6 339340 ( 1.74%) 171711247 ( 1.11%) 506.02
other 46366 ( 0.24%) 6514902 ( 0.04%) 140.51
frag 23537 ( 0.12%) 31754747 ( 0.21%) 1349.14
ip6 2769350 ( 14.24%) 2992448065 ( 19.39%) 1080.56
tcp6 2110080 ( 10.85%) 2305334738 ( 14.94%) 1092.53
http(s) 807331 ( 4.15%) 841876905 ( 5.45%) 1042.79
http(c) 255652 ( 1.31%) 28927263 ( 0.19%) 113.15
smtp 231 ( 0.00%) 67381 ( 0.00%) 291.69
ftp 91 ( 0.00%) 8085 ( 0.00%) 88.85
pop3 33 ( 0.00%) 3213 ( 0.00%) 97.36
ssh 2 ( 0.00%) 160 ( 0.00%) 80.00
dns 240 ( 0.00%) 49041 ( 0.00%) 204.34
bgp 92 ( 0.00%) 25081 ( 0.00%) 272.62
other 1046408 ( 5.38%) 1434377609 ( 9.29%) 1370.76
udp6 171501 ( 0.88%) 114254615 ( 0.74%) 666.20
dns 53731 ( 0.28%) 19833418 ( 0.13%) 369.12
realaud 1 ( 0.00%) 133 ( 0.00%) 133.00
quake 4 ( 0.00%) 384 ( 0.00%) 96.00
other 117765 ( 0.61%) 94420680 ( 0.61%) 801.77
icmp6 17622 ( 0.09%) 1925977 ( 0.01%) 109.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 470117 ( 2.42%) 570928655 ( 3.70%) 1214.44
tcpdump file: 201303171400.dump.gz (428.33 MB)