Traffic Trace Info
DumpFile: 201304041400.dump
FileSize: 2664.77MB
Id: 201304041400
StartTime: Thu Apr 4 14:00:01 2013
EndTime: Thu Apr 4 14:15:01 2013
TotalTime: 900.14 seconds
TotalCapSize: -2033.73MB CapLen: 96 bytes
# of packets: 39485189 (17891.52MB)
AvgRate: 166.76Mbps stddev:30.97M
IP flow (unique src/dst pair) Information
# of flows: 11340737 (avg. 3.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 3.6% 2.2% 1.8% 1.5% 1.2% 1.1% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 8608137
Top 10 bandwidth usage (bytes/total in %):
10.2% 6.3% 6.3% 6.2% 5.1% 3.9% 3.9% 3.3% 2.5% 2.4%
# of IPv6 addresses: 10152
Top 10 bandwidth usage (bytes/total in %):
14.2% 5.3% 4.9% 4.6% 4.6% 4.2% 4.1% 3.3% 3.3% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201304041400.pktlen.png)
detailed numbers
[ 32- 63]: 18072871
[ 64- 127]: 7897244
[ 128- 255]: 774009
[ 256- 511]: 1034159
[ 512- 1023]: 852891
[ 1024- 2047]: 10854015
Protocol Breakdown
![[protocol breakdown chart]](201304041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39485189 (100.00%) 18760614715 (100.00%) 475.13
ip 37991710 ( 96.22%) 17447780564 ( 93.00%) 459.25
tcp 20050340 ( 50.78%) 15556060732 ( 82.92%) 775.85
http(s) 9822000 ( 24.88%) 12294904997 ( 65.54%) 1251.77
http(c) 8331912 ( 21.10%) 2304782004 ( 12.29%) 276.62
squid 45322 ( 0.11%) 27856781 ( 0.15%) 614.64
smtp 136047 ( 0.34%) 18779714 ( 0.10%) 138.04
nntp 4 ( 0.00%) 240 ( 0.00%) 60.00
ftp 41953 ( 0.11%) 26655687 ( 0.14%) 635.37
pop3 3958 ( 0.01%) 1346500 ( 0.01%) 340.20
imap 4368 ( 0.01%) 1518285 ( 0.01%) 347.59
telnet 2837 ( 0.01%) 200413 ( 0.00%) 70.64
ssh 185872 ( 0.47%) 19352369 ( 0.10%) 104.12
dns 2325 ( 0.01%) 314052 ( 0.00%) 135.08
bgp 516 ( 0.00%) 110908 ( 0.00%) 214.94
napster 38 ( 0.00%) 4413 ( 0.00%) 116.13
realaud 165 ( 0.00%) 23688 ( 0.00%) 143.56
rtsp 8 ( 0.00%) 494 ( 0.00%) 61.75
icecast 14954 ( 0.04%) 13501169 ( 0.07%) 902.85
hotline 3 ( 0.00%) 194 ( 0.00%) 64.67
other 1457964 ( 3.69%) 846703184 ( 4.51%) 580.74
udp 1821416 ( 4.61%) 675608189 ( 3.60%) 370.92
dns 893855 ( 2.26%) 343318299 ( 1.83%) 384.09
rip 10 ( 0.00%) 660 ( 0.00%) 66.00
realaud 17 ( 0.00%) 1987 ( 0.00%) 116.88
halflif 791 ( 0.00%) 162405 ( 0.00%) 205.32
starcra 34 ( 0.00%) 5675 ( 0.00%) 166.91
everque 128 ( 0.00%) 19897 ( 0.00%) 155.45
unreal 97 ( 0.00%) 12535 ( 0.00%) 129.23
quake 12 ( 0.00%) 2060 ( 0.00%) 171.67
cuseeme 10 ( 0.00%) 792 ( 0.00%) 79.20
other 926292 ( 2.35%) 331953696 ( 1.77%) 358.37
icmp 15484571 ( 39.22%) 1002606018 ( 5.34%) 64.75
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 43094 ( 0.11%) 15379568 ( 0.08%) 356.88
ip6 543976 ( 1.38%) 190482509 ( 1.02%) 350.17
other 48129 ( 0.12%) 7624388 ( 0.04%) 158.42
frag 213891 ( 0.54%) 227075851 ( 1.21%) 1061.64
ip6 1493479 ( 3.78%) 1312834151 ( 7.00%) 879.04
tcp6 1398975 ( 3.54%) 1285897976 ( 6.85%) 919.17
http(s) 1144324 ( 2.90%) 1202077577 ( 6.41%) 1050.47
http(c) 176414 ( 0.45%) 22452623 ( 0.12%) 127.27
smtp 1111 ( 0.00%) 674191 ( 0.00%) 606.83
ftp 28 ( 0.00%) 2431 ( 0.00%) 86.82
ssh 1 ( 0.00%) 86 ( 0.00%) 86.00
dns 465 ( 0.00%) 284970 ( 0.00%) 612.84
bgp 94 ( 0.00%) 22233 ( 0.00%) 236.52
other 76538 ( 0.19%) 60383865 ( 0.32%) 788.94
udp6 71549 ( 0.18%) 22496909 ( 0.12%) 314.43
dns 70291 ( 0.18%) 22361695 ( 0.12%) 318.13
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
cuseeme 1 ( 0.00%) 111 ( 0.00%) 111.00
other 1256 ( 0.00%) 134996 ( 0.00%) 107.48
icmp6 20957 ( 0.05%) 2418121 ( 0.01%) 115.38
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1968 ( 0.00%) 2017065 ( 0.01%) 1024.93
tcpdump file: 201304041400.dump.gz (900.56 MB)