Traffic Trace Info
DumpFile: 201303271400.dump
FileSize: 2824.17MB
Id: 201303271400
StartTime: Wed Mar 27 14:00:00 2013
EndTime: Wed Mar 27 14:15:00 2013
TotalTime: 899.60 seconds
TotalCapSize: -1917.78MB CapLen: 96 bytes
# of packets: 42332293 (20602.01MB)
AvgRate: 192.12Mbps stddev:27.81M
IP flow (unique src/dst pair) Information
# of flows: 12341894 (avg. 3.43 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 3.3% 2.7% 2.4% 2.3% 1.9% 1.8% 1.7% 1.6% 1.3%
IP address Information
# of IPv4 addresses: 9588168
Top 10 bandwidth usage (bytes/total in %):
9.6% 9.5% 5.3% 4.7% 4.1% 4.1% 4.0% 3.9% 3.8% 3.6%
# of IPv6 addresses: 10486
Top 10 bandwidth usage (bytes/total in %):
18.9% 18.5% 7.8% 6.8% 6.6% 5.3% 4.6% 3.0% 2.5% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201303271400.pktlen.png)
detailed numbers
[ 32- 63]: 19291540
[ 64- 127]: 7559298
[ 128- 255]: 761903
[ 256- 511]: 686471
[ 512- 1023]: 1011871
[ 1024- 2047]: 13021210
Protocol Breakdown
![[protocol breakdown chart]](201303271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42332293 (100.00%) 21602773642 (100.00%) 510.31
ip 38894887 ( 91.88%) 18876970117 ( 87.38%) 485.33
tcp 17363192 ( 41.02%) 15227081697 ( 70.49%) 876.97
http(s) 10251162 ( 24.22%) 13165940027 ( 60.95%) 1284.34
http(c) 5659651 ( 13.37%) 1313133731 ( 6.08%) 232.02
squid 57377 ( 0.14%) 27070104 ( 0.13%) 471.79
smtp 53803 ( 0.13%) 13433713 ( 0.06%) 249.68
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 34102 ( 0.08%) 18194996 ( 0.08%) 533.55
pop3 17557 ( 0.04%) 19772141 ( 0.09%) 1126.17
imap 1638 ( 0.00%) 161396 ( 0.00%) 98.53
telnet 1932 ( 0.00%) 126699 ( 0.00%) 65.58
ssh 186477 ( 0.44%) 15966926 ( 0.07%) 85.62
dns 2101 ( 0.00%) 427036 ( 0.00%) 203.25
bgp 540 ( 0.00%) 125538 ( 0.00%) 232.48
napster 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 5 ( 0.00%) 671 ( 0.00%) 134.20
rtsp 4 ( 0.00%) 240 ( 0.00%) 60.00
icecast 6878 ( 0.02%) 5796917 ( 0.03%) 842.82
hotline 2 ( 0.00%) 120 ( 0.00%) 60.00
other 1089961 ( 2.57%) 646931322 ( 2.99%) 593.54
udp 3633824 ( 8.58%) 2019128084 ( 9.35%) 555.65
dns 856923 ( 2.02%) 354849150 ( 1.64%) 414.10
realaud 9 ( 0.00%) 899 ( 0.00%) 99.89
halflif 57 ( 0.00%) 7585 ( 0.00%) 133.07
starcra 12 ( 0.00%) 1002 ( 0.00%) 83.50
everque 59 ( 0.00%) 9248 ( 0.00%) 156.75
unreal 14 ( 0.00%) 1501 ( 0.00%) 107.21
quake 33 ( 0.00%) 2816 ( 0.00%) 85.33
cuseeme 1 ( 0.00%) 143 ( 0.00%) 143.00
other 2776123 ( 6.56%) 1663525228 ( 7.70%) 599.23
icmp 17025483 ( 40.22%) 1078346089 ( 4.99%) 63.34
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 31675 ( 0.07%) 10369298 ( 0.05%) 327.37
ip6 788963 ( 1.86%) 534153020 ( 2.47%) 677.03
other 51565 ( 0.12%) 7872659 ( 0.04%) 152.67
frag 171061 ( 0.40%) 195545927 ( 0.91%) 1143.14
ip6 3437406 ( 8.12%) 2725803525 ( 12.62%) 792.98
tcp6 2769286 ( 6.54%) 2034638434 ( 9.42%) 734.72
http(s) 1269888 ( 3.00%) 1363719906 ( 6.31%) 1073.89
http(c) 907299 ( 2.14%) 88118122 ( 0.41%) 97.12
squid 1 ( 0.00%) 94 ( 0.00%) 94.00
smtp 909 ( 0.00%) 317529 ( 0.00%) 349.32
ftp 781 ( 0.00%) 69259 ( 0.00%) 88.68
pop3 2 ( 0.00%) 196 ( 0.00%) 98.00
ssh 1 ( 0.00%) 86 ( 0.00%) 86.00
dns 498 ( 0.00%) 129931 ( 0.00%) 260.91
bgp 91 ( 0.00%) 22867 ( 0.00%) 251.29
other 589816 ( 1.39%) 582260444 ( 2.70%) 987.19
udp6 244932 ( 0.58%) 213863306 ( 0.99%) 873.15
dns 75067 ( 0.18%) 25581191 ( 0.12%) 340.78
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 1 ( 0.00%) 113 ( 0.00%) 113.00
other 169863 ( 0.40%) 188281895 ( 0.87%) 1108.43
icmp6 27520 ( 0.07%) 3422926 ( 0.02%) 124.38
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 395637 ( 0.93%) 473874643 ( 2.19%) 1197.75
tcpdump file: 201303271400.dump.gz (921.85 MB)