Traffic Trace Info
DumpFile: 201303311400.dump
FileSize: 3462.61MB
Id: 201303311400
StartTime: Sun Mar 31 14:00:01 2013
EndTime: Sun Mar 31 14:15:00 2013
TotalTime: 899.30 seconds
TotalCapSize: -1415.87MB CapLen: 96 bytes
# of packets: 51279877 (31710.39MB)
AvgRate: 295.88Mbps stddev:88.09M
IP flow (unique src/dst pair) Information
# of flows: 11324914 (avg. 4.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
18.0% 12.8% 5.3% 4.3% 2.7% 2.5% 2.2% 2.0% 1.8% 1.4%
IP address Information
# of IPv4 addresses: 8654656
Top 10 bandwidth usage (bytes/total in %):
44.8% 18.9% 13.7% 13.4% 7.2% 5.6% 4.5% 2.8% 2.8% 2.8%
# of IPv6 addresses: 8509
Top 10 bandwidth usage (bytes/total in %):
10.7% 10.6% 6.6% 6.6% 6.6% 6.1% 5.0% 5.0% 4.8% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201303311400.pktlen.png)
detailed numbers
[ 32- 63]: 20446777
[ 64- 127]: 7896943
[ 128- 255]: 486880
[ 256- 511]: 1156834
[ 512- 1023]: 906398
[ 1024- 2047]: 20386045
Protocol Breakdown
![[protocol breakdown chart]](201303311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 51279877 (100.00%) 33250759059 (100.00%) 648.42
ip 50319589 ( 98.13%) 32397726968 ( 97.43%) 643.84
tcp 31386526 ( 61.21%) 30177812670 ( 90.76%) 961.49
http(s) 17527882 ( 34.18%) 24804445544 ( 74.60%) 1415.14
http(c) 9878376 ( 19.26%) 2023116211 ( 6.08%) 204.80
squid 61037 ( 0.12%) 11379990 ( 0.03%) 186.44
smtp 554748 ( 1.08%) 761159938 ( 2.29%) 1372.08
ftp 9239 ( 0.02%) 666012 ( 0.00%) 72.09
pop3 1455 ( 0.00%) 267334 ( 0.00%) 183.73
imap 1660 ( 0.00%) 172016 ( 0.00%) 103.62
telnet 39418 ( 0.08%) 2888024 ( 0.01%) 73.27
ssh 502956 ( 0.98%) 483000769 ( 1.45%) 960.32
dns 3695 ( 0.01%) 363971 ( 0.00%) 98.50
bgp 501 ( 0.00%) 92252 ( 0.00%) 184.14
napster 26 ( 0.00%) 2181 ( 0.00%) 83.88
realaud 10 ( 0.00%) 1330 ( 0.00%) 133.00
rtsp 6 ( 0.00%) 360 ( 0.00%) 60.00
icecast 11298 ( 0.02%) 9682981 ( 0.03%) 857.05
hotline 45 ( 0.00%) 4698 ( 0.00%) 104.40
other 2794168 ( 5.45%) 2080568699 ( 6.26%) 744.61
udp 2520672 ( 4.92%) 1040577744 ( 3.13%) 412.82
dns 980199 ( 1.91%) 384594623 ( 1.16%) 392.36
realaud 40 ( 0.00%) 3730 ( 0.00%) 93.25
halflif 5 ( 0.00%) 413 ( 0.00%) 82.60
starcra 25 ( 0.00%) 2369 ( 0.00%) 94.76
everque 78 ( 0.00%) 9040 ( 0.00%) 115.90
unreal 48 ( 0.00%) 25990 ( 0.00%) 541.46
quake 278 ( 0.00%) 20990 ( 0.00%) 75.50
cuseeme 3 ( 0.00%) 567 ( 0.00%) 189.00
other 1539886 ( 3.00%) 655837212 ( 1.97%) 425.90
icmp 15957431 ( 31.12%) 1036494360 ( 3.12%) 64.95
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 49099 ( 0.10%) 44447154 ( 0.13%) 905.26
ip6 356714 ( 0.70%) 91377324 ( 0.27%) 256.16
other 48962 ( 0.10%) 6998446 ( 0.02%) 142.94
frag 239658 ( 0.47%) 260715619 ( 0.78%) 1087.87
ip6 960288 ( 1.87%) 853032091 ( 2.57%) 888.31
tcp6 802798 ( 1.57%) 740121914 ( 2.23%) 921.93
http(s) 583685 ( 1.14%) 618367165 ( 1.86%) 1059.42
http(c) 126140 ( 0.25%) 15654057 ( 0.05%) 124.10
smtp 82 ( 0.00%) 24729 ( 0.00%) 301.57
ftp 43 ( 0.00%) 3757 ( 0.00%) 87.37
ssh 2 ( 0.00%) 160 ( 0.00%) 80.00
dns 260 ( 0.00%) 61952 ( 0.00%) 238.28
bgp 89 ( 0.00%) 16963 ( 0.00%) 190.60
other 92497 ( 0.18%) 105993131 ( 0.32%) 1145.91
udp6 51521 ( 0.10%) 18356854 ( 0.06%) 356.30
dns 46660 ( 0.09%) 15711755 ( 0.05%) 336.73
realaud 1 ( 0.00%) 105 ( 0.00%) 105.00
other 4860 ( 0.01%) 2644994 ( 0.01%) 544.24
icmp6 29796 ( 0.06%) 3374036 ( 0.01%) 113.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 76143 ( 0.15%) 91175207 ( 0.27%) 1197.42
tcpdump file: 201303311400.dump.gz (1037.47 MB)