Traffic Trace Info
DumpFile: 201304071400.dump
FileSize: 2308.84MB
Id: 201304071400
StartTime: Sun Apr 7 14:00:00 2013
EndTime: Sun Apr 7 14:15:01 2013
TotalTime: 900.40 seconds
TotalCapSize: 1777.04MB CapLen: 96 bytes
# of packets: 34851042 (16486.39MB)
AvgRate: 153.59Mbps stddev:29.10M
IP flow (unique src/dst pair) Information
# of flows: 11068078 (avg. 3.15 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.3% 9.8% 4.5% 3.7% 2.2% 2.0% 1.6% 1.4% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 8533967
Top 10 bandwidth usage (bytes/total in %):
14.9% 12.5% 12.0% 10.2% 10.1% 9.1% 5.3% 4.7% 4.6% 3.9%
# of IPv6 addresses: 9995
Top 10 bandwidth usage (bytes/total in %):
15.7% 14.5% 7.8% 7.5% 7.1% 3.0% 3.0% 2.4% 2.2% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201304071400.pktlen.png)
detailed numbers
[ 32- 63]: 16716973
[ 64- 127]: 6161770
[ 128- 255]: 566717
[ 256- 511]: 591249
[ 512- 1023]: 610374
[ 1024- 2047]: 10203959
Protocol Breakdown
![[protocol breakdown chart]](201304071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34851042 (100.00%) 17287232109 (100.00%) 496.03
ip 33987496 ( 97.52%) 16632248663 ( 96.21%) 489.36
tcp 15830582 ( 45.42%) 14033848336 ( 81.18%) 886.50
http(s) 7286799 ( 20.91%) 9573092931 ( 55.38%) 1313.76
http(c) 5032352 ( 14.44%) 1196175266 ( 6.92%) 237.70
squid 15758 ( 0.05%) 4435790 ( 0.03%) 281.49
smtp 64183 ( 0.18%) 11244771 ( 0.07%) 175.20
ftp 6947 ( 0.02%) 2944984 ( 0.02%) 423.92
pop3 12925 ( 0.04%) 1755335 ( 0.01%) 135.81
imap 2459 ( 0.01%) 750275 ( 0.00%) 305.11
telnet 11894 ( 0.03%) 866413 ( 0.01%) 72.84
ssh 355010 ( 1.02%) 392462196 ( 2.27%) 1105.50
dns 5226 ( 0.01%) 2422261 ( 0.01%) 463.50
bgp 515 ( 0.00%) 101767 ( 0.00%) 197.61
napster 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 53 ( 0.00%) 25843 ( 0.00%) 487.60
icecast 865 ( 0.00%) 71560 ( 0.00%) 82.73
hotline 2 ( 0.00%) 474 ( 0.00%) 237.00
other 3035593 ( 8.71%) 2847498410 ( 16.47%) 938.04
udp 2519775 ( 7.23%) 1258805135 ( 7.28%) 499.57
dns 726247 ( 2.08%) 238131654 ( 1.38%) 327.89
realaud 11 ( 0.00%) 1465 ( 0.00%) 133.18
halflif 24788 ( 0.07%) 26739847 ( 0.15%) 1078.74
starcra 16 ( 0.00%) 2187 ( 0.00%) 136.69
everque 63 ( 0.00%) 9249 ( 0.00%) 146.81
unreal 11 ( 0.00%) 2146 ( 0.00%) 195.09
quake 15 ( 0.00%) 1588 ( 0.00%) 105.87
cuseeme 3 ( 0.00%) 492 ( 0.00%) 164.00
other 1768533 ( 5.07%) 993869414 ( 5.75%) 561.97
icmp 14990088 ( 43.01%) 971357025 ( 5.62%) 64.80
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 95570 ( 0.27%) 103283264 ( 0.60%) 1080.71
ip6 511067 ( 1.47%) 258266743 ( 1.49%) 505.35
other 40229 ( 0.12%) 6668890 ( 0.04%) 165.77
frag 150817 ( 0.43%) 183276136 ( 1.06%) 1215.22
ip6 863546 ( 2.48%) 654983446 ( 3.79%) 758.48
tcp6 767910 ( 2.20%) 628303493 ( 3.63%) 818.20
http(s) 502648 ( 1.44%) 505997849 ( 2.93%) 1006.66
http(c) 166691 ( 0.48%) 16665341 ( 0.10%) 99.98
smtp 197 ( 0.00%) 38958 ( 0.00%) 197.76
ftp 25 ( 0.00%) 2209 ( 0.00%) 88.36
dns 442 ( 0.00%) 98708 ( 0.00%) 223.32
bgp 89 ( 0.00%) 18787 ( 0.00%) 211.09
other 97818 ( 0.28%) 105481641 ( 0.61%) 1078.35
udp6 59706 ( 0.17%) 19567351 ( 0.11%) 327.73
dns 49995 ( 0.14%) 15320453 ( 0.09%) 306.44
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 1 ( 0.00%) 119 ( 0.00%) 119.00
cuseeme 1 ( 0.00%) 106 ( 0.00%) 106.00
other 9708 ( 0.03%) 4246566 ( 0.02%) 437.43
icmp6 32182 ( 0.09%) 3301856 ( 0.02%) 102.60
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3718 ( 0.01%) 3806666 ( 0.02%) 1023.85
tcpdump file: 201304071400.dump.gz (757.15 MB)