Traffic Trace Info
DumpFile: 201303301400.dump
FileSize: 2307.09MB
Id: 201303301400
StartTime: Sat Mar 30 14:00:00 2013
EndTime: Sat Mar 30 14:15:01 2013
TotalTime: 900.41 seconds
TotalCapSize: 1767.17MB CapLen: 96 bytes
# of packets: 35383406 (16568.58MB)
AvgRate: 154.37Mbps stddev:27.85M
IP flow (unique src/dst pair) Information
# of flows: 11247807 (avg. 3.15 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.6% 2.6% 2.2% 1.9% 1.7% 1.6% 1.6% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 8608419
Top 10 bandwidth usage (bytes/total in %):
18.8% 13.2% 5.4% 5.0% 3.8% 3.2% 2.8% 2.7% 2.7% 2.6%
# of IPv6 addresses: 8392
Top 10 bandwidth usage (bytes/total in %):
18.8% 11.2% 10.2% 7.6% 7.3% 5.1% 4.9% 3.8% 2.7% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201303301400.pktlen.png)
detailed numbers
[ 32- 63]: 17354333
[ 64- 127]: 5856802
[ 128- 255]: 564315
[ 256- 511]: 627049
[ 512- 1023]: 657351
[ 1024- 2047]: 10323556
Protocol Breakdown
![[protocol breakdown chart]](201303301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35383406 (100.00%) 17373415515 (100.00%) 491.00
ip 34640794 ( 97.90%) 16746725111 ( 96.39%) 483.44
tcp 15249699 ( 43.10%) 13871905608 ( 79.85%) 909.65
http(s) 8169135 ( 23.09%) 10818969810 ( 62.27%) 1324.37
http(c) 4583087 ( 12.95%) 1039076608 ( 5.98%) 226.72
squid 18853 ( 0.05%) 8173761 ( 0.05%) 433.55
smtp 582046 ( 1.64%) 777434048 ( 4.47%) 1335.69
ftp 24004 ( 0.07%) 17264938 ( 0.10%) 719.25
pop3 1465 ( 0.00%) 313562 ( 0.00%) 214.04
imap 1573 ( 0.00%) 169381 ( 0.00%) 107.68
telnet 1589 ( 0.00%) 106494 ( 0.00%) 67.02
ssh 88056 ( 0.25%) 8641559 ( 0.05%) 98.14
dns 4415 ( 0.01%) 407752 ( 0.00%) 92.36
bgp 494 ( 0.00%) 88412 ( 0.00%) 178.97
napster 13 ( 0.00%) 1531 ( 0.00%) 117.77
realaud 10 ( 0.00%) 1352 ( 0.00%) 135.20
icecast 6001 ( 0.02%) 461519 ( 0.00%) 76.91
hotline 11 ( 0.00%) 2017 ( 0.00%) 183.36
other 1768947 ( 5.00%) 1200792864 ( 6.91%) 678.82
udp 3214148 ( 9.08%) 1761582990 ( 10.14%) 548.07
dns 850694 ( 2.40%) 268351030 ( 1.54%) 315.45
realaud 13 ( 0.00%) 1145 ( 0.00%) 88.08
halflif 28 ( 0.00%) 1953 ( 0.00%) 69.75
starcra 9 ( 0.00%) 1186 ( 0.00%) 131.78
everque 42 ( 0.00%) 6924 ( 0.00%) 164.86
unreal 16 ( 0.00%) 3066 ( 0.00%) 191.62
quake 5 ( 0.00%) 629 ( 0.00%) 125.80
cuseeme 25 ( 0.00%) 1750 ( 0.00%) 70.00
other 2363189 ( 6.68%) 1493134969 ( 8.59%) 631.83
icmp 15847062 ( 44.79%) 1020361551 ( 5.87%) 64.39
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 31540 ( 0.09%) 13131368 ( 0.08%) 416.34
ip6 249591 ( 0.71%) 72522360 ( 0.42%) 290.56
other 48569 ( 0.14%) 7201964 ( 0.04%) 148.28
frag 122908 ( 0.35%) 133277509 ( 0.77%) 1084.37
ip6 742612 ( 2.10%) 626690404 ( 3.61%) 843.90
tcp6 552866 ( 1.56%) 472748108 ( 2.72%) 855.09
http(s) 439454 ( 1.24%) 448082569 ( 2.58%) 1019.63
http(c) 89891 ( 0.25%) 13012038 ( 0.07%) 144.75
squid 144 ( 0.00%) 32368 ( 0.00%) 224.78
smtp 1494 ( 0.00%) 445796 ( 0.00%) 298.39
ftp 111 ( 0.00%) 9960 ( 0.00%) 89.73
ssh 1 ( 0.00%) 86 ( 0.00%) 86.00
dns 222 ( 0.00%) 56871 ( 0.00%) 256.18
bgp 93 ( 0.00%) 18471 ( 0.00%) 198.61
other 21456 ( 0.06%) 11089949 ( 0.06%) 516.87
udp6 62605 ( 0.18%) 22698668 ( 0.13%) 362.57
dns 52000 ( 0.15%) 18660956 ( 0.11%) 358.86
other 10605 ( 0.03%) 4037712 ( 0.02%) 380.74
icmp6 18880 ( 0.05%) 2206001 ( 0.01%) 116.84
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 108230 ( 0.31%) 129033411 ( 0.74%) 1192.21
tcpdump file: 201303301400.dump.gz (759.93 MB)