Traffic Trace Info
DumpFile: 201303181400.dump
FileSize: 1860.83MB
Id: 201303181400
StartTime: Mon Mar 18 14:00:00 2013
EndTime: Mon Mar 18 14:15:01 2013
TotalTime: 900.44 seconds
TotalCapSize: 1470.91MB CapLen: 96 bytes
# of packets: 25553089 (20731.33MB)
AvgRate: 193.15Mbps stddev:42.64M
IP flow (unique src/dst pair) Information
# of flows: 1900982 (avg. 13.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.9% 5.1% 4.5% 3.2% 2.5% 2.4% 2.0% 1.7% 1.5% 1.4%
IP address Information
# of IPv4 addresses: 1442745
Top 10 bandwidth usage (bytes/total in %):
11.6% 9.9% 9.9% 8.2% 5.9% 5.3% 4.7% 4.1% 3.9% 3.5%
# of IPv6 addresses: 10276
Top 10 bandwidth usage (bytes/total in %):
42.9% 31.7% 4.9% 3.1% 3.1% 3.1% 3.1% 2.9% 2.7% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201303181400.pktlen.png)
detailed numbers
[ 32- 63]: 3849244
[ 64- 127]: 5464640
[ 128- 255]: 825913
[ 256- 511]: 661669
[ 512- 1023]: 1286812
[ 1024- 2047]: 13464811
Protocol Breakdown
![[protocol breakdown chart]](201303181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25553089 (100.00%) 21738370383 (100.00%) 850.71
ip 22302047 ( 87.28%) 18268812445 ( 84.04%) 819.15
tcp 16741606 ( 65.52%) 16342636114 ( 75.18%) 976.17
http(s) 10789585 ( 42.22%) 13663588016 ( 62.85%) 1266.37
http(c) 3810275 ( 14.91%) 1292177582 ( 5.94%) 339.13
squid 83020 ( 0.32%) 22505024 ( 0.10%) 271.08
smtp 53966 ( 0.21%) 16756346 ( 0.08%) 310.50
ftp 35814 ( 0.14%) 25240000 ( 0.12%) 704.75
pop3 6455 ( 0.03%) 2740374 ( 0.01%) 424.54
imap 3267 ( 0.01%) 339954 ( 0.00%) 104.06
telnet 4513 ( 0.02%) 1784417 ( 0.01%) 395.39
ssh 216023 ( 0.85%) 133025947 ( 0.61%) 615.80
dns 1938 ( 0.01%) 305185 ( 0.00%) 157.47
bgp 538 ( 0.00%) 134760 ( 0.00%) 250.48
napster 11 ( 0.00%) 1041 ( 0.00%) 94.64
realaud 8 ( 0.00%) 509 ( 0.00%) 63.62
icecast 1925 ( 0.01%) 135950 ( 0.00%) 70.62
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 1734267 ( 6.79%) 1183900949 ( 5.45%) 682.65
udp 3153894 ( 12.34%) 1571857505 ( 7.23%) 498.39
dns 1044714 ( 4.09%) 286605279 ( 1.32%) 274.34
rip 8 ( 0.00%) 544 ( 0.00%) 68.00
realaud 52 ( 0.00%) 3559 ( 0.00%) 68.44
halflif 12 ( 0.00%) 1195 ( 0.00%) 99.58
starcra 17 ( 0.00%) 1731 ( 0.00%) 101.82
everque 98 ( 0.00%) 17596 ( 0.00%) 179.55
unreal 22 ( 0.00%) 2036 ( 0.00%) 92.55
quake 41 ( 0.00%) 3590 ( 0.00%) 87.56
cuseeme 1 ( 0.00%) 68 ( 0.00%) 68.00
other 2108187 ( 8.25%) 1284326259 ( 5.91%) 609.21
icmp 1499470 ( 5.87%) 129883180 ( 0.60%) 86.62
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 74302 ( 0.29%) 21310304 ( 0.10%) 286.81
ip6 766878 ( 3.00%) 189776032 ( 0.87%) 247.47
other 65712 ( 0.26%) 13330040 ( 0.06%) 202.86
frag 64113 ( 0.25%) 86962423 ( 0.40%) 1356.39
ip6 3251042 ( 12.72%) 3469557938 ( 15.96%) 1067.21
tcp6 2755965 ( 10.79%) 2973468949 ( 13.68%) 1078.92
http(s) 1497323 ( 5.86%) 1707938806 ( 7.86%) 1140.66
http(c) 346486 ( 1.36%) 36553178 ( 0.17%) 105.50
smtp 712 ( 0.00%) 199808 ( 0.00%) 280.63
ftp 5551 ( 0.02%) 595607 ( 0.00%) 107.30
ssh 130 ( 0.00%) 24765 ( 0.00%) 190.50
dns 565 ( 0.00%) 359414 ( 0.00%) 636.13
bgp 90 ( 0.00%) 21607 ( 0.00%) 240.08
other 905108 ( 3.54%) 1227775764 ( 5.65%) 1356.50
udp6 307595 ( 1.20%) 287251233 ( 1.32%) 933.86
dns 81765 ( 0.32%) 27536476 ( 0.13%) 336.78
other 225830 ( 0.88%) 259714757 ( 1.19%) 1150.05
icmp6 16036 ( 0.06%) 2019526 ( 0.01%) 125.94
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 171416 ( 0.67%) 206814150 ( 0.95%) 1206.50
tcpdump file: 201303181400.dump.gz (556.90 MB)