Traffic Trace Info
DumpFile: 201304051400.dump
FileSize: 3706.64MB
Id: 201304051400
StartTime: Fri Apr 5 14:00:01 2013
EndTime: Fri Apr 5 14:15:00 2013
TotalTime: 899.65 seconds
TotalCapSize: -1223.85MB CapLen: 96 bytes
# of packets: 54688461 (31560.23MB)
AvgRate: 294.26Mbps stddev:52.84M
IP flow (unique src/dst pair) Information
# of flows: 11452388 (avg. 4.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.9% 2.9% 2.6% 2.2% 2.1% 1.9% 1.9% 1.7% 1.6% 1.5%
IP address Information
# of IPv4 addresses: 8668979
Top 10 bandwidth usage (bytes/total in %):
24.5% 18.0% 12.8% 6.3% 3.1% 3.0% 2.8% 2.7% 2.5% 2.4%
# of IPv6 addresses: 10642
Top 10 bandwidth usage (bytes/total in %):
11.0% 10.9% 7.4% 7.3% 5.9% 5.6% 5.1% 4.3% 4.2% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201304051400.pktlen.png)
detailed numbers
[ 32- 63]: 22590301
[ 64- 127]: 8219639
[ 128- 255]: 821604
[ 256- 511]: 1440805
[ 512- 1023]: 1753459
[ 1024- 2047]: 19862653
Protocol Breakdown
![[protocol breakdown chart]](201304051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 54688461 (100.00%) 33093303324 (100.00%) 605.12
ip 53092357 ( 97.08%) 31571921530 ( 95.40%) 594.66
tcp 35184600 ( 64.34%) 29818478455 ( 90.10%) 847.49
http(s) 20320356 ( 37.16%) 26175379323 ( 79.10%) 1288.14
http(c) 13121402 ( 23.99%) 2521698094 ( 7.62%) 192.18
squid 29114 ( 0.05%) 14205219 ( 0.04%) 487.92
smtp 69801 ( 0.13%) 15646845 ( 0.05%) 224.16
ftp 53668 ( 0.10%) 5849535 ( 0.02%) 108.99
pop3 4450 ( 0.01%) 1861816 ( 0.01%) 418.39
imap 3420 ( 0.01%) 1060845 ( 0.00%) 310.19
telnet 2011 ( 0.00%) 136753 ( 0.00%) 68.00
ssh 144712 ( 0.26%) 14009204 ( 0.04%) 96.81
dns 3040 ( 0.01%) 417703 ( 0.00%) 137.40
bgp 527 ( 0.00%) 107065 ( 0.00%) 203.16
napster 98 ( 0.00%) 10370 ( 0.00%) 105.82
realaud 12 ( 0.00%) 1497 ( 0.00%) 124.75
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 11862 ( 0.02%) 7930859 ( 0.02%) 668.59
hotline 48 ( 0.00%) 9770 ( 0.00%) 203.54
other 1420076 ( 2.60%) 1060153377 ( 3.20%) 746.55
udp 1754071 ( 3.21%) 614994750 ( 1.86%) 350.61
dns 914850 ( 1.67%) 275348340 ( 0.83%) 300.98
realaud 6 ( 0.00%) 741 ( 0.00%) 123.50
halflif 15 ( 0.00%) 1578 ( 0.00%) 105.20
starcra 14 ( 0.00%) 2397 ( 0.00%) 171.21
everque 129 ( 0.00%) 22188 ( 0.00%) 172.00
unreal 25 ( 0.00%) 3816 ( 0.00%) 152.64
quake 3 ( 0.00%) 469 ( 0.00%) 156.33
other 838037 ( 1.53%) 338294357 ( 1.02%) 403.67
icmp 15652345 ( 28.62%) 998498678 ( 3.02%) 63.79
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 49858 ( 0.09%) 31770868 ( 0.10%) 637.23
ip6 407280 ( 0.74%) 101657205 ( 0.31%) 249.60
other 44018 ( 0.08%) 6502304 ( 0.02%) 147.72
frag 128664 ( 0.24%) 152522839 ( 0.46%) 1185.44
ip6 1596104 ( 2.92%) 1521381794 ( 4.60%) 953.18
tcp6 1443658 ( 2.64%) 1423061228 ( 4.30%) 985.73
http(s) 1175707 ( 2.15%) 1353752227 ( 4.09%) 1151.44
http(c) 202584 ( 0.37%) 24312402 ( 0.07%) 120.01
smtp 208 ( 0.00%) 72754 ( 0.00%) 349.78
ftp 1148 ( 0.00%) 111166 ( 0.00%) 96.83
ssh 2 ( 0.00%) 160 ( 0.00%) 80.00
dns 241 ( 0.00%) 88516 ( 0.00%) 367.29
bgp 96 ( 0.00%) 22961 ( 0.00%) 239.18
other 63672 ( 0.12%) 44701042 ( 0.14%) 702.05
udp6 102077 ( 0.19%) 63583632 ( 0.19%) 622.90
dns 66295 ( 0.12%) 21640062 ( 0.07%) 326.42
realaud 1 ( 0.00%) 113 ( 0.00%) 113.00
everque 1 ( 0.00%) 101 ( 0.00%) 101.00
other 35780 ( 0.07%) 41943356 ( 0.13%) 1172.26
icmp6 23154 ( 0.04%) 2537574 ( 0.01%) 109.60
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 27184 ( 0.05%) 32195144 ( 0.10%) 1184.34
tcpdump file: 201304051400.dump.gz (1201.19 MB)