Traffic Trace Info
DumpFile: 201303281400.dump
FileSize: 2695.73MB
Id: 201303281400
StartTime: Thu Mar 28 14:00:00 2013
EndTime: Thu Mar 28 14:15:01 2013
TotalTime: 900.60 seconds
TotalCapSize: -2015.45MB CapLen: 96 bytes
# of packets: 40315721 (19004.53MB)
AvgRate: 177.04Mbps stddev:66.06M
IP flow (unique src/dst pair) Information
# of flows: 11193477 (avg. 3.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
19.7% 4.9% 4.0% 2.3% 1.3% 1.3% 1.2% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 8557930
Top 10 bandwidth usage (bytes/total in %):
25.0% 22.0% 8.2% 5.4% 5.4% 4.9% 4.5% 4.5% 3.0% 2.5%
# of IPv6 addresses: 10233
Top 10 bandwidth usage (bytes/total in %):
15.4% 14.9% 13.4% 13.4% 7.6% 6.1% 3.7% 3.6% 3.4% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201303281400.pktlen.png)
detailed numbers
[ 32- 63]: 19136930
[ 64- 127]: 6974894
[ 128- 255]: 685226
[ 256- 511]: 591270
[ 512- 1023]: 1296787
[ 1024- 2047]: 11630614
Protocol Breakdown
![[protocol breakdown chart]](201303281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40315721 (100.00%) 19927695459 (100.00%) 494.29
ip 38306348 ( 95.02%) 18194708518 ( 91.30%) 474.98
tcp 18927481 ( 46.95%) 15161994315 ( 76.09%) 801.06
http(s) 10298106 ( 25.54%) 13241324147 ( 66.45%) 1285.80
http(c) 6595733 ( 16.36%) 664628862 ( 3.34%) 100.77
squid 91517 ( 0.23%) 61325275 ( 0.31%) 670.10
smtp 65903 ( 0.16%) 25184568 ( 0.13%) 382.15
nntp 6 ( 0.00%) 360 ( 0.00%) 60.00
ftp 34615 ( 0.09%) 18468254 ( 0.09%) 533.53
pop3 4581 ( 0.01%) 2690490 ( 0.01%) 587.31
imap 3345 ( 0.01%) 303300 ( 0.00%) 90.67
telnet 2717 ( 0.01%) 175547 ( 0.00%) 64.61
ssh 245621 ( 0.61%) 31849139 ( 0.16%) 129.67
dns 3863 ( 0.01%) 499620 ( 0.00%) 129.33
bgp 529 ( 0.00%) 112272 ( 0.00%) 212.23
napster 27 ( 0.00%) 2488 ( 0.00%) 92.15
realaud 14 ( 0.00%) 1437 ( 0.00%) 102.64
rtsp 47 ( 0.00%) 2988 ( 0.00%) 63.57
icecast 7000 ( 0.02%) 5832647 ( 0.03%) 833.24
hotline 10 ( 0.00%) 1350 ( 0.00%) 135.00
other 1573811 ( 3.90%) 1109589411 ( 5.57%) 705.03
udp 2889536 ( 7.17%) 1205829603 ( 6.05%) 417.31
dns 1102901 ( 2.74%) 385091203 ( 1.93%) 349.16
rip 16 ( 0.00%) 1056 ( 0.00%) 66.00
realaud 6 ( 0.00%) 412 ( 0.00%) 68.67
halflif 2046 ( 0.01%) 592149 ( 0.00%) 289.42
starcra 24 ( 0.00%) 5004 ( 0.00%) 208.50
everque 62 ( 0.00%) 9718 ( 0.00%) 156.74
unreal 36 ( 0.00%) 4070 ( 0.00%) 113.06
quake 20 ( 0.00%) 2354 ( 0.00%) 117.70
cuseeme 1 ( 0.00%) 92 ( 0.00%) 92.00
other 1784080 ( 4.43%) 819727639 ( 4.11%) 459.47
icmp 15479001 ( 38.39%) 993197043 ( 4.98%) 64.16
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 24959 ( 0.06%) 8178430 ( 0.04%) 327.67
ip6 932542 ( 2.31%) 818052351 ( 4.11%) 877.23
other 52644 ( 0.13%) 7437506 ( 0.04%) 141.28
frag 138329 ( 0.34%) 159550904 ( 0.80%) 1153.42
ip6 2009373 ( 4.98%) 1732986941 ( 8.70%) 862.45
tcp6 1870408 ( 4.64%) 1662336751 ( 8.34%) 888.76
http(s) 1137152 ( 2.82%) 1233752173 ( 6.19%) 1084.95
http(c) 200564 ( 0.50%) 24626705 ( 0.12%) 122.79
smtp 2415 ( 0.01%) 2036155 ( 0.01%) 843.13
ftp 164 ( 0.00%) 18468 ( 0.00%) 112.61
ssh 121366 ( 0.30%) 9827629 ( 0.05%) 80.98
dns 333 ( 0.00%) 105233 ( 0.00%) 316.02
bgp 99 ( 0.00%) 30349 ( 0.00%) 306.56
other 408315 ( 1.01%) 391940039 ( 1.97%) 959.90
udp6 101814 ( 0.25%) 50508762 ( 0.25%) 496.09
dns 73035 ( 0.18%) 25610065 ( 0.13%) 350.65
other 28779 ( 0.07%) 24898697 ( 0.12%) 865.17
icmp6 20544 ( 0.05%) 2350558 ( 0.01%) 114.42
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 16577 ( 0.04%) 17786790 ( 0.09%) 1072.98
tcpdump file: 201303281400.dump.gz (870.75 MB)