Traffic Trace Info
DumpFile: 201303221400.dump
FileSize: 2355.16MB
Id: 201303221400
StartTime: Fri Mar 22 14:00:00 2013
EndTime: Fri Mar 22 14:15:01 2013
TotalTime: 900.79 seconds
TotalCapSize: 1848.17MB CapLen: 96 bytes
# of packets: 33225413 (22328.84MB)
AvgRate: 207.94Mbps stddev:80.21M
IP flow (unique src/dst pair) Information
# of flows: 2654910 (avg. 12.51 pkts/flow)
Top 10 big flow size (bytes/total in %):
25.1% 11.4% 2.3% 1.8% 1.6% 1.5% 1.4% 1.0% 1.0% 0.8%
IP address Information
# of IPv4 addresses: 1844869
Top 10 bandwidth usage (bytes/total in %):
31.2% 27.1% 13.2% 12.3% 8.3% 5.2% 3.0% 2.5% 2.0% 1.9%
# of IPv6 addresses: 9801
Top 10 bandwidth usage (bytes/total in %):
7.9% 6.4% 6.2% 5.6% 5.5% 4.9% 3.1% 2.6% 2.5% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201303221400.pktlen.png)
detailed numbers
[ 32- 63]: 9624405
[ 64- 127]: 6442464
[ 128- 255]: 797658
[ 256- 511]: 975919
[ 512- 1023]: 806636
[ 1024- 2047]: 14578331
Protocol Breakdown
![[protocol breakdown chart]](201303221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33225413 (100.00%) 23413488954 (100.00%) 704.69
ip 31577699 ( 95.04%) 22117561249 ( 94.47%) 700.42
tcp 26101788 ( 78.56%) 20902549824 ( 89.28%) 800.81
http(s) 9289490 ( 27.96%) 11154277140 ( 47.64%) 1200.74
http(c) 8696760 ( 26.18%) 2872706922 ( 12.27%) 330.32
squid 26453 ( 0.08%) 15274314 ( 0.07%) 577.41
smtp 60935 ( 0.18%) 19181500 ( 0.08%) 314.79
nntp 7 ( 0.00%) 420 ( 0.00%) 60.00
ftp 43727 ( 0.13%) 18455722 ( 0.08%) 422.07
pop3 10737 ( 0.03%) 11909439 ( 0.05%) 1109.20
imap 4575 ( 0.01%) 1152355 ( 0.00%) 251.88
telnet 1774 ( 0.01%) 119389 ( 0.00%) 67.30
ssh 272521 ( 0.82%) 135368660 ( 0.58%) 496.73
dns 2402 ( 0.01%) 314680 ( 0.00%) 131.01
bgp 553 ( 0.00%) 138990 ( 0.00%) 251.34
napster 49 ( 0.00%) 4775 ( 0.00%) 97.45
realaud 15 ( 0.00%) 1631 ( 0.00%) 108.73
rtsp 3 ( 0.00%) 180 ( 0.00%) 60.00
icecast 613 ( 0.00%) 91325 ( 0.00%) 148.98
hotline 7 ( 0.00%) 784 ( 0.00%) 112.00
other 7691167 ( 23.15%) 6673551598 ( 28.50%) 867.69
udp 2180207 ( 6.56%) 769256514 ( 3.29%) 352.84
dns 869691 ( 2.62%) 324240259 ( 1.38%) 372.82
realaud 2 ( 0.00%) 229 ( 0.00%) 114.50
halflif 76 ( 0.00%) 12887 ( 0.00%) 169.57
starcra 8 ( 0.00%) 987 ( 0.00%) 123.38
everque 28 ( 0.00%) 5651 ( 0.00%) 201.82
unreal 43 ( 0.00%) 3929 ( 0.00%) 91.37
quake 30 ( 0.00%) 2629 ( 0.00%) 87.63
cuseeme 1 ( 0.00%) 114 ( 0.00%) 114.00
other 1309307 ( 3.94%) 443794337 ( 1.90%) 338.95
icmp 2651306 ( 7.98%) 216283248 ( 0.92%) 81.58
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 69690 ( 0.21%) 20334856 ( 0.09%) 291.79
ip6 524839 ( 1.58%) 200498270 ( 0.86%) 382.02
other 49684 ( 0.15%) 8619267 ( 0.04%) 173.48
frag 105845 ( 0.32%) 143697969 ( 0.61%) 1357.63
ip6 1647714 ( 4.96%) 1295927705 ( 5.53%) 786.50
tcp6 1382798 ( 4.16%) 1161430889 ( 4.96%) 839.91
http(s) 971935 ( 2.93%) 1025370567 ( 4.38%) 1054.98
http(c) 274416 ( 0.83%) 34036420 ( 0.15%) 124.03
smtp 118 ( 0.00%) 36958 ( 0.00%) 313.20
ftp 781 ( 0.00%) 69279 ( 0.00%) 88.71
ssh 2 ( 0.00%) 160 ( 0.00%) 80.00
dns 981 ( 0.00%) 617174 ( 0.00%) 629.13
bgp 149 ( 0.00%) 39707 ( 0.00%) 266.49
other 134416 ( 0.40%) 101260624 ( 0.43%) 753.34
udp6 184049 ( 0.55%) 85882767 ( 0.37%) 466.63
dns 71822 ( 0.22%) 23649541 ( 0.10%) 329.28
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
starcra 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 3 ( 0.00%) 295 ( 0.00%) 98.33
other 112221 ( 0.34%) 62232613 ( 0.27%) 554.55
icmp6 21999 ( 0.07%) 2566538 ( 0.01%) 116.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 58838 ( 0.18%) 46043431 ( 0.20%) 782.55
tcpdump file: 201303221400.dump.gz (717.02 MB)