Traffic Trace Info
DumpFile: 201303251400.dump
FileSize: 1792.87MB
Id: 201303251400
StartTime: Mon Mar 25 14:00:01 2013
EndTime: Mon Mar 25 14:15:00 2013
TotalTime: 899.39 seconds
TotalCapSize: 1406.52MB CapLen: 96 bytes
# of packets: 25319338 (16721.24MB)
AvgRate: 155.90Mbps stddev:36.68M
IP flow (unique src/dst pair) Information
# of flows: 1837751 (avg. 13.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 4.5% 3.3% 2.1% 2.1% 2.0% 1.8% 1.5% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 1427998
Top 10 bandwidth usage (bytes/total in %):
11.1% 11.1% 8.7% 6.4% 6.2% 5.5% 5.2% 4.2% 3.9% 2.4%
# of IPv6 addresses: 16546
Top 10 bandwidth usage (bytes/total in %):
17.2% 15.0% 14.7% 7.6% 5.6% 4.7% 4.7% 4.6% 4.3% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201303251400.pktlen.png)
detailed numbers
[ 32- 63]: 6974193
[ 64- 127]: 5270498
[ 128- 255]: 639433
[ 256- 511]: 610374
[ 512- 1023]: 871377
[ 1024- 2047]: 10953463
Protocol Breakdown
![[protocol breakdown chart]](201303251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25319338 (100.00%) 17533487150 (100.00%) 692.49
ip 22905136 ( 90.46%) 15221338661 ( 86.81%) 664.54
tcp 16945267 ( 66.93%) 13077930921 ( 74.59%) 771.77
http(s) 9033938 ( 35.68%) 11676378860 ( 66.59%) 1292.50
http(c) 6675948 ( 26.37%) 871901224 ( 4.97%) 130.60
squid 25212 ( 0.10%) 5489153 ( 0.03%) 217.72
smtp 80672 ( 0.32%) 38995318 ( 0.22%) 483.38
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 38447 ( 0.15%) 18258714 ( 0.10%) 474.91
pop3 7051 ( 0.03%) 4061860 ( 0.02%) 576.07
imap 4571 ( 0.02%) 1018020 ( 0.01%) 222.71
telnet 1570 ( 0.01%) 103211 ( 0.00%) 65.74
ssh 143988 ( 0.57%) 17557792 ( 0.10%) 121.94
dns 4435 ( 0.02%) 2615362 ( 0.01%) 589.71
bgp 539 ( 0.00%) 131855 ( 0.00%) 244.63
napster 2 ( 0.00%) 120 ( 0.00%) 60.00
rtsp 4 ( 0.00%) 246 ( 0.00%) 61.50
icecast 2089 ( 0.01%) 1292370 ( 0.01%) 618.65
other 926800 ( 3.66%) 440126756 ( 2.51%) 474.89
udp 3097862 ( 12.24%) 1747225494 ( 9.97%) 564.01
dns 1041039 ( 4.11%) 469881239 ( 2.68%) 451.36
realaud 5 ( 0.00%) 506 ( 0.00%) 101.20
halflif 31 ( 0.00%) 2566 ( 0.00%) 82.77
starcra 38 ( 0.00%) 4186 ( 0.00%) 110.16
everque 114 ( 0.00%) 15771 ( 0.00%) 138.34
unreal 19 ( 0.00%) 2950 ( 0.00%) 155.26
quake 33 ( 0.00%) 3111 ( 0.00%) 94.27
cuseeme 2 ( 0.00%) 170 ( 0.00%) 85.00
other 2055985 ( 8.12%) 1276632464 ( 7.28%) 620.93
icmp 2310188 ( 9.12%) 202687085 ( 1.16%) 87.74
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 26725 ( 0.11%) 8483066 ( 0.05%) 317.42
ip6 474312 ( 1.87%) 176382815 ( 1.01%) 371.87
other 50597 ( 0.20%) 8610010 ( 0.05%) 170.17
frag 261539 ( 1.03%) 337677951 ( 1.93%) 1291.12
ip6 2414202 ( 9.54%) 2312148489 ( 13.19%) 957.73
tcp6 1579517 ( 6.24%) 1454782729 ( 8.30%) 921.03
http(s) 949801 ( 3.75%) 1013440403 ( 5.78%) 1067.00
http(c) 273243 ( 1.08%) 35799939 ( 0.20%) 131.02
smtp 3845 ( 0.02%) 513625 ( 0.00%) 133.58
ftp 90 ( 0.00%) 8011 ( 0.00%) 89.01
pop3 77 ( 0.00%) 6762 ( 0.00%) 87.82
ssh 2 ( 0.00%) 160 ( 0.00%) 80.00
dns 1123 ( 0.00%) 755372 ( 0.00%) 672.64
bgp 98 ( 0.00%) 21113 ( 0.00%) 215.44
other 351238 ( 1.39%) 404237344 ( 2.31%) 1150.89
udp6 114570 ( 0.45%) 29904478 ( 0.17%) 261.01
dns 85435 ( 0.34%) 26849032 ( 0.15%) 314.26
starcra 1 ( 0.00%) 93 ( 0.00%) 93.00
other 29134 ( 0.12%) 3055353 ( 0.02%) 104.87
icmp6 37359 ( 0.15%) 3578367 ( 0.02%) 95.78
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 682725 ( 2.70%) 823878699 ( 4.70%) 1206.75
tcpdump file: 201303251400.dump.gz (554.12 MB)