Traffic Trace Info
DumpFile: 201304081400.dump
FileSize: 3564.55MB
Id: 201304081400
StartTime: Mon Apr 8 14:00:00 2013
EndTime: Mon Apr 8 14:15:01 2013
TotalTime: 900.60 seconds
TotalCapSize: -1321.84MB CapLen: 96 bytes
# of packets: 51798164 (32227.31MB)
AvgRate: 300.24Mbps stddev:55.94M
IP flow (unique src/dst pair) Information
# of flows: 11294753 (avg. 4.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
16.2% 3.8% 3.5% 2.3% 1.7% 1.5% 1.4% 1.1% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 8658972
Top 10 bandwidth usage (bytes/total in %):
26.0% 16.9% 7.0% 5.4% 5.0% 4.2% 4.0% 2.8% 2.8% 2.5%
# of IPv6 addresses: 11620
Top 10 bandwidth usage (bytes/total in %):
23.6% 23.5% 5.2% 4.3% 4.0% 3.0% 2.5% 2.2% 1.7% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201304081400.pktlen.png)
detailed numbers
[ 32- 63]: 19268770
[ 64- 127]: 8260110
[ 128- 255]: 1190684
[ 256- 511]: 1326061
[ 512- 1023]: 965498
[ 1024- 2047]: 20787041
Protocol Breakdown
![[protocol breakdown chart]](201304081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 51798164 (100.00%) 33792779566 (100.00%) 652.39
ip 50045490 ( 96.62%) 32273087965 ( 95.50%) 644.88
tcp 31613593 ( 61.03%) 30021481828 ( 88.84%) 949.64
http(s) 13122106 ( 25.33%) 16942843647 ( 50.14%) 1291.17
http(c) 10471439 ( 20.22%) 4322049021 ( 12.79%) 412.75
squid 77335 ( 0.15%) 39484605 ( 0.12%) 510.57
smtp 105129 ( 0.20%) 35678359 ( 0.11%) 339.38
ftp 13435 ( 0.03%) 876051 ( 0.00%) 65.21
pop3 4356 ( 0.01%) 1179201 ( 0.00%) 270.71
imap 2627 ( 0.01%) 439197 ( 0.00%) 167.19
telnet 1582 ( 0.00%) 104790 ( 0.00%) 66.24
ssh 129866 ( 0.25%) 11713451 ( 0.03%) 90.20
dns 5451 ( 0.01%) 2471353 ( 0.01%) 453.38
bgp 671 ( 0.00%) 247383 ( 0.00%) 368.68
napster 4 ( 0.00%) 240 ( 0.00%) 60.00
realaud 200 ( 0.00%) 23449 ( 0.00%) 117.25
rtsp 91 ( 0.00%) 124940 ( 0.00%) 1372.97
icecast 12607 ( 0.02%) 5576381 ( 0.02%) 442.32
hotline 7 ( 0.00%) 798 ( 0.00%) 114.00
other 7666679 ( 14.80%) 8658668306 ( 25.62%) 1129.39
udp 2296286 ( 4.43%) 1016835481 ( 3.01%) 442.82
dns 722905 ( 1.40%) 234078206 ( 0.69%) 323.80
realaud 16 ( 0.00%) 1812 ( 0.00%) 113.25
halflif 206 ( 0.00%) 40917 ( 0.00%) 198.63
starcra 46 ( 0.00%) 6528 ( 0.00%) 141.91
everque 3092 ( 0.01%) 2928830 ( 0.01%) 947.23
unreal 68 ( 0.00%) 6669 ( 0.00%) 98.07
quake 18 ( 0.00%) 2164 ( 0.00%) 120.22
cuseeme 3 ( 0.00%) 227 ( 0.00%) 75.67
other 1569769 ( 3.03%) 779685750 ( 2.31%) 496.69
icmp 15524100 ( 29.97%) 1017767212 ( 3.01%) 65.56
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 39062 ( 0.08%) 27932596 ( 0.08%) 715.08
ip6 530685 ( 1.02%) 181584695 ( 0.54%) 342.17
other 41579 ( 0.08%) 7466883 ( 0.02%) 179.58
frag 102579 ( 0.20%) 120315359 ( 0.36%) 1172.90
ip6 1752674 ( 3.38%) 1519691601 ( 4.50%) 867.07
tcp6 1626485 ( 3.14%) 1476880558 ( 4.37%) 908.02
http(s) 1348078 ( 2.60%) 1402476582 ( 4.15%) 1040.35
http(c) 192194 ( 0.37%) 19711588 ( 0.06%) 102.56
squid 2859 ( 0.01%) 620570 ( 0.00%) 217.06
smtp 165 ( 0.00%) 74898 ( 0.00%) 453.93
ftp 295 ( 0.00%) 27284 ( 0.00%) 92.49
ssh 131 ( 0.00%) 26162 ( 0.00%) 199.71
dns 263 ( 0.00%) 89153 ( 0.00%) 338.98
bgp 102 ( 0.00%) 29501 ( 0.00%) 289.23
other 82398 ( 0.16%) 53824820 ( 0.16%) 653.23
udp6 87155 ( 0.17%) 30982869 ( 0.09%) 355.49
dns 81091 ( 0.16%) 24946536 ( 0.07%) 307.64
realaud 1 ( 0.00%) 109 ( 0.00%) 109.00
quake 2 ( 0.00%) 204 ( 0.00%) 102.00
other 6061 ( 0.01%) 6036020 ( 0.02%) 995.88
icmp6 31187 ( 0.06%) 3574170 ( 0.01%) 114.60
ip6 25 ( 0.00%) 3268 ( 0.00%) 130.72
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 7792 ( 0.02%) 8246656 ( 0.02%) 1058.35
tcpdump file: 201304081400.dump.gz (1150.07 MB)