Traffic Trace Info
DumpFile: 201303241400.dump
FileSize: 1553.08MB
Id: 201303241400
StartTime: Sun Mar 24 14:00:01 2013
EndTime: Sun Mar 24 14:15:00 2013
TotalTime: 899.14 seconds
TotalCapSize: 1215.83MB CapLen: 96 bytes
# of packets: 22101523 (13980.86MB)
AvgRate: 130.43Mbps stddev:56.12M
IP flow (unique src/dst pair) Information
# of flows: 2000459 (avg. 11.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
20.3% 6.9% 5.1% 2.8% 2.1% 1.7% 1.4% 1.4% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 1442648
Top 10 bandwidth usage (bytes/total in %):
34.9% 22.5% 7.5% 7.4% 5.9% 5.8% 5.6% 4.7% 3.7% 3.6%
# of IPv6 addresses: 11857
Top 10 bandwidth usage (bytes/total in %):
14.7% 7.0% 6.8% 6.7% 6.7% 4.4% 4.4% 3.6% 3.4% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201303241400.pktlen.png)
detailed numbers
[ 32- 63]: 6740960
[ 64- 127]: 4817299
[ 128- 255]: 527043
[ 256- 511]: 495177
[ 512- 1023]: 560004
[ 1024- 2047]: 8961040
Protocol Breakdown
![[protocol breakdown chart]](201303241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22101523 (100.00%) 14659997689 (100.00%) 663.30
ip 20754513 ( 93.91%) 13595170707 ( 92.74%) 655.05
tcp 15925137 ( 72.05%) 12264201453 ( 83.66%) 770.12
http(s) 7664877 ( 34.68%) 10088080621 ( 68.81%) 1316.14
http(c) 5721892 ( 25.89%) 838101262 ( 5.72%) 146.47
squid 200384 ( 0.91%) 184355239 ( 1.26%) 920.01
smtp 46306 ( 0.21%) 10556581 ( 0.07%) 227.97
nntp 6 ( 0.00%) 360 ( 0.00%) 60.00
ftp 35826 ( 0.16%) 17552962 ( 0.12%) 489.95
pop3 1905 ( 0.01%) 316229 ( 0.00%) 166.00
imap 1854 ( 0.01%) 189071 ( 0.00%) 101.98
telnet 3249 ( 0.01%) 227041 ( 0.00%) 69.88
ssh 319377 ( 1.45%) 38754263 ( 0.26%) 121.34
dns 1530 ( 0.01%) 461974 ( 0.00%) 301.94
bgp 464 ( 0.00%) 110173 ( 0.00%) 237.44
napster 21 ( 0.00%) 1449 ( 0.00%) 69.00
realaud 19 ( 0.00%) 1924 ( 0.00%) 101.26
rtsp 38 ( 0.00%) 2348 ( 0.00%) 61.79
icecast 8127 ( 0.04%) 5963160 ( 0.04%) 733.75
hotline 7 ( 0.00%) 434 ( 0.00%) 62.00
other 1919255 ( 8.68%) 1079526362 ( 7.36%) 562.47
udp 2313557 ( 10.47%) 1030990206 ( 7.03%) 445.63
dns 1012650 ( 4.58%) 425500341 ( 2.90%) 420.19
realaud 34 ( 0.00%) 2764 ( 0.00%) 81.29
halflif 1195 ( 0.01%) 1588041 ( 0.01%) 1328.90
starcra 12 ( 0.00%) 764 ( 0.00%) 63.67
everque 30 ( 0.00%) 5479 ( 0.00%) 182.63
unreal 42 ( 0.00%) 7728 ( 0.00%) 184.00
quake 23 ( 0.00%) 2074 ( 0.00%) 90.17
cuseeme 17 ( 0.00%) 1237 ( 0.00%) 72.76
other 1298933 ( 5.88%) 603357361 ( 4.12%) 464.50
icmp 2150222 ( 9.73%) 183884508 ( 1.25%) 85.52
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 18211 ( 0.08%) 6491454 ( 0.04%) 356.46
ip6 291631 ( 1.32%) 101387131 ( 0.69%) 347.66
other 55571 ( 0.25%) 8196795 ( 0.06%) 147.50
frag 291209 ( 1.32%) 349347154 ( 2.38%) 1199.64
ip6 1347010 ( 6.09%) 1064826982 ( 7.26%) 790.51
tcp6 1042460 ( 4.72%) 954830984 ( 6.51%) 915.94
http(s) 697566 ( 3.16%) 791702245 ( 5.40%) 1134.95
http(c) 217916 ( 0.99%) 25879837 ( 0.18%) 118.76
smtp 43 ( 0.00%) 4690 ( 0.00%) 109.07
ftp 179 ( 0.00%) 16265 ( 0.00%) 90.87
ssh 1 ( 0.00%) 86 ( 0.00%) 86.00
dns 586 ( 0.00%) 333348 ( 0.00%) 568.85
bgp 93 ( 0.00%) 25502 ( 0.00%) 274.22
other 126076 ( 0.57%) 136869011 ( 0.93%) 1085.61
udp6 219457 ( 0.99%) 38840343 ( 0.26%) 176.98
dns 54442 ( 0.25%) 19483348 ( 0.13%) 357.87
halflif 1 ( 0.00%) 118 ( 0.00%) 118.00
everque 2 ( 0.00%) 202 ( 0.00%) 101.00
other 165012 ( 0.75%) 19356675 ( 0.13%) 117.30
icmp6 27980 ( 0.13%) 2842083 ( 0.02%) 101.58
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 57082 ( 0.26%) 68309356 ( 0.47%) 1196.69
tcpdump file: 201303241400.dump.gz (475.74 MB)