Traffic Trace Info
DumpFile: 201303191400.dump
FileSize: 1465.72MB
Id: 201303191400
StartTime: Tue Mar 19 14:00:00 2013
EndTime: Tue Mar 19 14:15:00 2013
TotalTime: 899.86 seconds
TotalCapSize: 1154.74MB CapLen: 96 bytes
# of packets: 20380179 (12346.37MB)
AvgRate: 115.08Mbps stddev:22.23M
IP flow (unique src/dst pair) Information
# of flows: 3358519 (avg. 6.07 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 3.1% 2.4% 1.9% 1.9% 1.6% 1.4% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 2460787
Top 10 bandwidth usage (bytes/total in %):
10.6% 6.1% 4.9% 4.9% 4.3% 3.9% 3.7% 3.6% 2.8% 2.8%
# of IPv6 addresses: 10225
Top 10 bandwidth usage (bytes/total in %):
7.4% 7.2% 5.3% 5.3% 4.4% 4.1% 4.0% 3.3% 3.1% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201303191400.pktlen.png)
detailed numbers
[ 32- 63]: 4764936
[ 64- 127]: 5757715
[ 128- 255]: 792755
[ 256- 511]: 555910
[ 512- 1023]: 697595
[ 1024- 2047]: 7811268
Protocol Breakdown
![[protocol breakdown chart]](201303191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20380179 (100.00%) 12946112320 (100.00%) 635.23
ip 18445268 ( 90.51%) 11168316840 ( 86.27%) 605.48
tcp 13024357 ( 63.91%) 10075076367 ( 77.82%) 773.56
http(s) 5988080 ( 29.38%) 6889394956 ( 53.22%) 1150.52
http(c) 4125135 ( 20.24%) 1441131015 ( 11.13%) 349.35
squid 33356 ( 0.16%) 12374756 ( 0.10%) 370.99
smtp 77580 ( 0.38%) 32014476 ( 0.25%) 412.66
ftp 23006 ( 0.11%) 3617648 ( 0.03%) 157.25
pop3 37780 ( 0.19%) 33484999 ( 0.26%) 886.32
imap 4720 ( 0.02%) 948037 ( 0.01%) 200.86
telnet 199984 ( 0.98%) 16233622 ( 0.13%) 81.17
ssh 461700 ( 2.27%) 91045854 ( 0.70%) 197.20
dns 3638 ( 0.02%) 2133971 ( 0.02%) 586.58
bgp 565 ( 0.00%) 149555 ( 0.00%) 264.70
napster 10 ( 0.00%) 1318 ( 0.00%) 131.80
realaud 7 ( 0.00%) 795 ( 0.00%) 113.57
icecast 89022 ( 0.44%) 76373595 ( 0.59%) 857.92
other 1979774 ( 9.71%) 1476171770 ( 11.40%) 745.63
udp 1911771 ( 9.38%) 677762684 ( 5.24%) 354.52
dns 1037617 ( 5.09%) 369436995 ( 2.85%) 356.04
rip 6 ( 0.00%) 382 ( 0.00%) 63.67
realaud 22 ( 0.00%) 2150 ( 0.00%) 97.73
halflif 29 ( 0.00%) 3943 ( 0.00%) 135.97
starcra 55 ( 0.00%) 8824 ( 0.00%) 160.44
everque 116 ( 0.00%) 17959 ( 0.00%) 154.82
unreal 22 ( 0.00%) 2307 ( 0.00%) 104.86
quake 12 ( 0.00%) 1278 ( 0.00%) 106.50
cuseeme 4 ( 0.00%) 362 ( 0.00%) 90.50
other 873211 ( 4.28%) 307533834 ( 2.38%) 352.19
icmp 2898808 ( 14.22%) 229072221 ( 1.77%) 79.02
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 45832 ( 0.22%) 11976448 ( 0.09%) 261.31
ip6 508480 ( 2.49%) 164598955 ( 1.27%) 323.71
other 55836 ( 0.27%) 9811005 ( 0.08%) 175.71
frag 135784 ( 0.67%) 159504781 ( 1.23%) 1174.69
ip6 1934911 ( 9.49%) 1777795480 ( 13.73%) 918.80
tcp6 1546894 ( 7.59%) 1427256251 ( 11.02%) 922.66
http(s) 1104401 ( 5.42%) 1132816706 ( 8.75%) 1025.73
http(c) 154043 ( 0.76%) 21819921 ( 0.17%) 141.65
squid 7 ( 0.00%) 910 ( 0.00%) 130.00
smtp 115 ( 0.00%) 28637 ( 0.00%) 249.02
ftp 111 ( 0.00%) 9565 ( 0.00%) 86.17
ssh 2 ( 0.00%) 160 ( 0.00%) 80.00
dns 315 ( 0.00%) 113411 ( 0.00%) 360.03
bgp 95 ( 0.00%) 33718 ( 0.00%) 354.93
other 287805 ( 1.41%) 272433223 ( 2.10%) 946.59
udp6 175001 ( 0.86%) 119475678 ( 0.92%) 682.71
dns 80154 ( 0.39%) 27334751 ( 0.21%) 341.03
other 94847 ( 0.47%) 92140927 ( 0.71%) 971.47
icmp6 20380 ( 0.10%) 2440899 ( 0.02%) 119.77
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 192605 ( 0.95%) 228618436 ( 1.77%) 1186.98
tcpdump file: 201303191400.dump.gz (484.36 MB)