Traffic Trace Info
DumpFile: 201304011400.dump
FileSize: 3295.98MB
Id: 201304011400
StartTime: Mon Apr 1 14:00:01 2013
EndTime: Mon Apr 1 14:15:01 2013
TotalTime: 900.05 seconds
TotalCapSize: -1538.90MB CapLen: 96 bytes
# of packets: 48422229 (26182.97MB)
AvgRate: 244.05Mbps stddev:34.15M
IP flow (unique src/dst pair) Information
# of flows: 11213690 (avg. 4.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.8% 5.7% 4.1% 3.3% 3.0% 1.7% 1.7% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 8559498
Top 10 bandwidth usage (bytes/total in %):
29.0% 14.2% 13.3% 8.4% 6.4% 4.5% 3.5% 3.3% 2.9% 2.1%
# of IPv6 addresses: 11069
Top 10 bandwidth usage (bytes/total in %):
44.8% 41.4% 7.7% 2.6% 2.6% 2.5% 2.4% 2.3% 2.3% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201304011400.pktlen.png)
detailed numbers
[ 32- 63]: 20567960
[ 64- 127]: 8344182
[ 128- 255]: 718053
[ 256- 511]: 1049512
[ 512- 1023]: 1339067
[ 1024- 2047]: 16403455
Protocol Breakdown
![[protocol breakdown chart]](201304011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 48422229 (100.00%) 27454836275 (100.00%) 566.99
ip 45954892 ( 94.90%) 25259882916 ( 92.01%) 549.67
tcp 26881506 ( 55.51%) 22700416876 ( 82.68%) 844.46
http(s) 14406446 ( 29.75%) 19225013462 ( 70.02%) 1334.47
http(c) 10235194 ( 21.14%) 2042047395 ( 7.44%) 199.51
squid 67186 ( 0.14%) 29770506 ( 0.11%) 443.11
smtp 370018 ( 0.76%) 465222524 ( 1.69%) 1257.30
nntp 3 ( 0.00%) 184 ( 0.00%) 61.33
ftp 43155 ( 0.09%) 29192177 ( 0.11%) 676.45
pop3 7595 ( 0.02%) 5455391 ( 0.02%) 718.29
imap 4467 ( 0.01%) 3169556 ( 0.01%) 709.55
telnet 8760 ( 0.02%) 632053 ( 0.00%) 72.15
ssh 135111 ( 0.28%) 30279388 ( 0.11%) 224.11
dns 4139 ( 0.01%) 478881 ( 0.00%) 115.70
bgp 504 ( 0.00%) 93085 ( 0.00%) 184.69
napster 24 ( 0.00%) 2678 ( 0.00%) 111.58
realaud 16 ( 0.00%) 2653 ( 0.00%) 165.81
rtsp 6079 ( 0.01%) 5983705 ( 0.02%) 984.32
icecast 36294 ( 0.07%) 27656863 ( 0.10%) 762.02
hotline 21 ( 0.00%) 2014 ( 0.00%) 95.90
other 1556494 ( 3.21%) 835414361 ( 3.04%) 536.73
udp 2291056 ( 4.73%) 1057814968 ( 3.85%) 461.72
dns 1181349 ( 2.44%) 511386441 ( 1.86%) 432.88
rip 4 ( 0.00%) 258 ( 0.00%) 64.50
realaud 29 ( 0.00%) 2791 ( 0.00%) 96.24
halflif 19 ( 0.00%) 1974 ( 0.00%) 103.89
starcra 36 ( 0.00%) 4408 ( 0.00%) 122.44
everque 405 ( 0.00%) 50909 ( 0.00%) 125.70
unreal 6 ( 0.00%) 972 ( 0.00%) 162.00
quake 15 ( 0.00%) 1969 ( 0.00%) 131.27
other 1108952 ( 2.29%) 546242663 ( 1.99%) 492.58
icmp 15732722 ( 32.49%) 1006802896 ( 3.67%) 63.99
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 27506 ( 0.06%) 9259884 ( 0.03%) 336.65
ip6 977057 ( 2.02%) 478612332 ( 1.74%) 489.85
other 44861 ( 0.09%) 6956800 ( 0.03%) 155.07
frag 320670 ( 0.66%) 328037161 ( 1.19%) 1022.97
ip6 2467337 ( 5.10%) 2194953359 ( 7.99%) 889.60
tcp6 2289765 ( 4.73%) 2081441902 ( 7.58%) 909.02
http(s) 1027271 ( 2.12%) 1043258971 ( 3.80%) 1015.56
http(c) 357488 ( 0.74%) 37876668 ( 0.14%) 105.95
smtp 463 ( 0.00%) 127957 ( 0.00%) 276.37
ftp 32 ( 0.00%) 2835 ( 0.00%) 88.59
imap 6 ( 0.00%) 508 ( 0.00%) 84.67
ssh 2 ( 0.00%) 160 ( 0.00%) 80.00
dns 410 ( 0.00%) 132917 ( 0.00%) 324.19
bgp 96 ( 0.00%) 18452 ( 0.00%) 192.21
other 903997 ( 1.87%) 1000023434 ( 3.64%) 1106.22
udp6 90694 ( 0.19%) 47513996 ( 0.17%) 523.89
dns 67597 ( 0.14%) 22586210 ( 0.08%) 334.13
other 23097 ( 0.05%) 24927786 ( 0.09%) 1079.27
icmp6 35171 ( 0.07%) 3948431 ( 0.01%) 112.26
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 51676 ( 0.11%) 62044814 ( 0.23%) 1200.65
tcpdump file: 201304011400.dump.gz (1055.68 MB)