Traffic Trace Info
DumpFile: 201303231400.dump
FileSize: 1468.00MB
Id: 201303231400
StartTime: Sat Mar 23 14:00:00 2013
EndTime: Sat Mar 23 14:15:00 2013
TotalTime: 900.49 seconds
TotalCapSize: 1146.18MB CapLen: 96 bytes
# of packets: 21090493 (15113.94MB)
AvgRate: 140.75Mbps stddev:28.75M
IP flow (unique src/dst pair) Information
# of flows: 1843951 (avg. 11.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.9% 4.8% 3.3% 2.9% 2.2% 2.2% 2.2% 2.1% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 1401529
Top 10 bandwidth usage (bytes/total in %):
17.0% 7.2% 6.6% 6.0% 5.2% 5.2% 4.6% 3.7% 3.4% 3.2%
# of IPv6 addresses: 9091
Top 10 bandwidth usage (bytes/total in %):
14.5% 10.3% 7.0% 6.9% 6.0% 5.2% 4.1% 4.0% 4.0% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201303231400.pktlen.png)
detailed numbers
[ 32- 63]: 5084592
[ 64- 127]: 4276819
[ 128- 255]: 530922
[ 256- 511]: 626439
[ 512- 1023]: 740691
[ 1024- 2047]: 9831030
Protocol Breakdown
![[protocol breakdown chart]](201303231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21090493 (100.00%) 15848114506 (100.00%) 751.43
ip 19757754 ( 93.68%) 14645928698 ( 92.41%) 741.27
tcp 14451813 ( 68.52%) 12786161170 ( 80.68%) 884.74
http(s) 6706412 ( 31.80%) 8232217561 ( 51.94%) 1227.51
http(c) 4314005 ( 20.45%) 1610702359 ( 10.16%) 373.37
squid 429489 ( 2.04%) 402041069 ( 2.54%) 936.09
smtp 98148 ( 0.47%) 66536188 ( 0.42%) 677.92
ftp 23014 ( 0.11%) 17536364 ( 0.11%) 761.99
pop3 2702 ( 0.01%) 844570 ( 0.01%) 312.57
imap 2653 ( 0.01%) 276899 ( 0.00%) 104.37
telnet 17670 ( 0.08%) 1294889 ( 0.01%) 73.28
ssh 123844 ( 0.59%) 13412994 ( 0.08%) 108.31
dns 3469 ( 0.02%) 2296277 ( 0.01%) 661.94
bgp 640 ( 0.00%) 215026 ( 0.00%) 335.98
napster 2 ( 0.00%) 120 ( 0.00%) 60.00
realaud 1 ( 0.00%) 66 ( 0.00%) 66.00
rtsp 36 ( 0.00%) 4140 ( 0.00%) 115.00
icecast 20711 ( 0.10%) 17605579 ( 0.11%) 850.06
hotline 236 ( 0.00%) 14518 ( 0.00%) 61.52
other 2708781 ( 12.84%) 2421162551 ( 15.28%) 893.82
udp 2763748 ( 13.10%) 1459647414 ( 9.21%) 528.14
dns 888883 ( 4.21%) 405873717 ( 2.56%) 456.61
rip 1 ( 0.00%) 70 ( 0.00%) 70.00
realaud 7 ( 0.00%) 465 ( 0.00%) 66.43
halflif 23 ( 0.00%) 2412 ( 0.00%) 104.87
starcra 20 ( 0.00%) 3865 ( 0.00%) 193.25
everque 39 ( 0.00%) 7859 ( 0.00%) 201.51
unreal 56 ( 0.00%) 4478 ( 0.00%) 79.96
quake 16 ( 0.00%) 1356 ( 0.00%) 84.75
cuseeme 33 ( 0.00%) 2293 ( 0.00%) 69.48
other 1874145 ( 8.89%) 1053384414 ( 6.65%) 562.06
icmp 2110208 ( 10.01%) 185012908 ( 1.17%) 87.68
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 18258 ( 0.09%) 6268760 ( 0.04%) 343.34
ip6 361511 ( 1.71%) 200510383 ( 1.27%) 554.65
other 52031 ( 0.25%) 8308793 ( 0.05%) 159.69
frag 178194 ( 0.84%) 237041208 ( 1.50%) 1330.24
ip6 1332739 ( 6.32%) 1202185808 ( 7.59%) 902.04
tcp6 953238 ( 4.52%) 861386243 ( 5.44%) 903.64
http(s) 598441 ( 2.84%) 685815713 ( 4.33%) 1146.00
http(c) 176275 ( 0.84%) 20696151 ( 0.13%) 117.41
smtp 153 ( 0.00%) 87903 ( 0.00%) 574.53
ftp 96 ( 0.00%) 8702 ( 0.00%) 90.65
ssh 1 ( 0.00%) 86 ( 0.00%) 86.00
dns 313 ( 0.00%) 54553 ( 0.00%) 174.29
bgp 93 ( 0.00%) 22371 ( 0.00%) 240.55
other 177866 ( 0.84%) 154700764 ( 0.98%) 869.76
udp6 109674 ( 0.52%) 47332590 ( 0.30%) 431.58
dns 54145 ( 0.26%) 19532132 ( 0.12%) 360.74
realaud 1 ( 0.00%) 106 ( 0.00%) 106.00
everque 1 ( 0.00%) 112 ( 0.00%) 112.00
other 55527 ( 0.26%) 27800240 ( 0.18%) 500.66
icmp6 18211 ( 0.09%) 1985340 ( 0.01%) 109.02
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 251585 ( 1.19%) 291477419 ( 1.84%) 1158.56
tcpdump file: 201303231400.dump.gz (465.01 MB)