Traffic Trace Info
DumpFile: 201303211400.dump
FileSize: 1758.68MB
Id: 201303211400
StartTime: Thu Mar 21 14:00:00 2013
EndTime: Thu Mar 21 14:15:01 2013
TotalTime: 900.58 seconds
TotalCapSize: 1385.84MB CapLen: 96 bytes
# of packets: 24434259 (17201.56MB)
AvgRate: 160.23Mbps stddev:38.81M
IP flow (unique src/dst pair) Information
# of flows: 2752673 (avg. 8.88 pkts/flow)
Top 10 big flow size (bytes/total in %):
16.6% 3.3% 3.2% 3.1% 2.9% 2.6% 2.2% 2.0% 1.7% 1.6%
IP address Information
# of IPv4 addresses: 2006142
Top 10 bandwidth usage (bytes/total in %):
17.8% 17.8% 7.4% 6.7% 4.9% 3.6% 3.5% 3.5% 3.4% 3.4%
# of IPv6 addresses: 9300
Top 10 bandwidth usage (bytes/total in %):
8.4% 7.5% 7.2% 7.1% 4.5% 3.0% 3.0% 2.7% 2.3% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201303211400.pktlen.png)
detailed numbers
[ 32- 63]: 5710910
[ 64- 127]: 5149185
[ 128- 255]: 703267
[ 256- 511]: 563529
[ 512- 1023]: 1332941
[ 1024- 2047]: 10974427
Protocol Breakdown
![[protocol breakdown chart]](201303211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24434259 (100.00%) 18037145628 (100.00%) 738.19
ip 22800766 ( 93.31%) 16825339115 ( 93.28%) 737.93
tcp 16386325 ( 67.06%) 14741479463 ( 81.73%) 899.62
http(s) 8749151 ( 35.81%) 10630183562 ( 58.93%) 1215.00
http(c) 5630397 ( 23.04%) 2818887393 ( 15.63%) 500.66
squid 19725 ( 0.08%) 7640108 ( 0.04%) 387.33
smtp 61597 ( 0.25%) 20322587 ( 0.11%) 329.93
nntp 9 ( 0.00%) 540 ( 0.00%) 60.00
ftp 28853 ( 0.12%) 17321036 ( 0.10%) 600.32
pop3 5263 ( 0.02%) 2816163 ( 0.02%) 535.09
imap 2931 ( 0.01%) 334525 ( 0.00%) 114.13
telnet 3987 ( 0.02%) 1754429 ( 0.01%) 440.04
ssh 492705 ( 2.02%) 333451210 ( 1.85%) 676.78
dns 1748 ( 0.01%) 267440 ( 0.00%) 153.00
bgp 752 ( 0.00%) 138989 ( 0.00%) 184.83
napster 36 ( 0.00%) 2485 ( 0.00%) 69.03
realaud 11 ( 0.00%) 660 ( 0.00%) 60.00
rtsp 19472 ( 0.08%) 10765769 ( 0.06%) 552.88
icecast 53623 ( 0.22%) 51627652 ( 0.29%) 962.79
hotline 16 ( 0.00%) 1822 ( 0.00%) 113.88
other 1315977 ( 5.39%) 845958773 ( 4.69%) 642.84
udp 2597271 ( 10.63%) 1259794347 ( 6.98%) 485.05
dns 988701 ( 4.05%) 414924119 ( 2.30%) 419.67
rip 24 ( 0.00%) 1584 ( 0.00%) 66.00
realaud 12 ( 0.00%) 2188 ( 0.00%) 182.33
halflif 32 ( 0.00%) 3328 ( 0.00%) 104.00
starcra 10 ( 0.00%) 2061 ( 0.00%) 206.10
everque 86 ( 0.00%) 14359 ( 0.00%) 166.97
unreal 36 ( 0.00%) 4431 ( 0.00%) 123.08
quake 28 ( 0.00%) 2330 ( 0.00%) 83.21
cuseeme 18 ( 0.00%) 1362 ( 0.00%) 75.67
other 1607257 ( 6.58%) 843519405 ( 4.68%) 524.82
icmp 3076550 ( 12.59%) 242913594 ( 1.35%) 78.96
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 23888 ( 0.10%) 8147864 ( 0.05%) 341.09
ip6 669607 ( 2.74%) 565456589 ( 3.13%) 844.46
other 46941 ( 0.19%) 7528098 ( 0.04%) 160.37
frag 136781 ( 0.56%) 184935850 ( 1.03%) 1352.06
ip6 1633493 ( 6.69%) 1211806513 ( 6.72%) 741.85
tcp6 1496077 ( 6.12%) 1131129422 ( 6.27%) 756.06
http(s) 963637 ( 3.94%) 1040402436 ( 5.77%) 1079.66
http(c) 463138 ( 1.90%) 47411211 ( 0.26%) 102.37
squid 11 ( 0.00%) 2222 ( 0.00%) 202.00
smtp 436 ( 0.00%) 195189 ( 0.00%) 447.68
ftp 128 ( 0.00%) 11872 ( 0.00%) 92.75
ssh 2 ( 0.00%) 160 ( 0.00%) 80.00
dns 590 ( 0.00%) 183761 ( 0.00%) 311.46
bgp 100 ( 0.00%) 29589 ( 0.00%) 295.89
other 68035 ( 0.28%) 42892982 ( 0.24%) 630.45
udp6 107358 ( 0.44%) 62988200 ( 0.35%) 586.71
dns 73747 ( 0.30%) 26290143 ( 0.15%) 356.49
everque 1 ( 0.00%) 113 ( 0.00%) 113.00
unreal 1 ( 0.00%) 118 ( 0.00%) 118.00
quake 1 ( 0.00%) 109 ( 0.00%) 109.00
cuseeme 1 ( 0.00%) 107 ( 0.00%) 107.00
other 33607 ( 0.14%) 36697610 ( 0.20%) 1091.96
icmp6 14812 ( 0.06%) 1741928 ( 0.01%) 117.60
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 15215 ( 0.06%) 15942747 ( 0.09%) 1047.83
tcpdump file: 201303211400.dump.gz (538.12 MB)