Traffic Trace Info
DumpFile: 201304091400.dump
FileSize: 3698.47MB
Id: 201304091400
StartTime: Tue Apr 9 14:00:01 2013
EndTime: Tue Apr 9 14:15:00 2013
TotalTime: 899.47 seconds
TotalCapSize: -1222.84MB CapLen: 96 bytes
# of packets: 54086714 (30769.11MB)
AvgRate: 286.88Mbps stddev:51.41M
IP flow (unique src/dst pair) Information
# of flows: 11237546 (avg. 4.81 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 3.6% 2.5% 2.4% 2.2% 1.8% 1.4% 1.4% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 8601527
Top 10 bandwidth usage (bytes/total in %):
10.4% 8.8% 7.4% 6.2% 4.2% 4.0% 4.0% 3.9% 3.7% 3.7%
# of IPv6 addresses: 11961
Top 10 bandwidth usage (bytes/total in %):
11.1% 8.4% 7.6% 7.6% 5.7% 5.7% 4.4% 4.3% 4.3% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201304091400.pktlen.png)
detailed numbers
[ 32- 63]: 22566487
[ 64- 127]: 8725463
[ 128- 255]: 874949
[ 256- 511]: 1205113
[ 512- 1023]: 1396632
[ 1024- 2047]: 19318070
Protocol Breakdown
![[protocol breakdown chart]](201304091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 54086714 (100.00%) 32263747194 (100.00%) 596.52
ip 51494286 ( 95.21%) 29938622392 ( 92.79%) 581.40
tcp 29909659 ( 55.30%) 27586047370 ( 85.50%) 922.31
http(s) 17263967 ( 31.92%) 22801301434 ( 70.67%) 1320.75
http(c) 9915951 ( 18.33%) 3076261120 ( 9.53%) 310.23
squid 29670 ( 0.05%) 22480783 ( 0.07%) 757.69
smtp 62391 ( 0.12%) 14063564 ( 0.04%) 225.41
ftp 20262 ( 0.04%) 3808673 ( 0.01%) 187.97
pop3 26977 ( 0.05%) 3028243 ( 0.01%) 112.25
imap 5953 ( 0.01%) 5172761 ( 0.02%) 868.93
telnet 1400 ( 0.00%) 94331 ( 0.00%) 67.38
ssh 96765 ( 0.18%) 9798282 ( 0.03%) 101.26
dns 8502 ( 0.02%) 664297 ( 0.00%) 78.13
bgp 556 ( 0.00%) 142231 ( 0.00%) 255.81
napster 35 ( 0.00%) 3960 ( 0.00%) 113.14
realaud 24 ( 0.00%) 2410 ( 0.00%) 100.42
rtsp 5287 ( 0.01%) 7612845 ( 0.02%) 1439.92
icecast 11742 ( 0.02%) 6235681 ( 0.02%) 531.06
hotline 10 ( 0.00%) 1366 ( 0.00%) 136.60
other 2460167 ( 4.55%) 1635375389 ( 5.07%) 664.74
udp 1954631 ( 3.61%) 793469940 ( 2.46%) 405.94
dns 831283 ( 1.54%) 274443147 ( 0.85%) 330.14
rip 1 ( 0.00%) 90 ( 0.00%) 90.00
realaud 13 ( 0.00%) 1266 ( 0.00%) 97.38
halflif 282 ( 0.00%) 56997 ( 0.00%) 202.12
starcra 23 ( 0.00%) 4018 ( 0.00%) 174.70
everque 109 ( 0.00%) 16581 ( 0.00%) 152.12
unreal 30 ( 0.00%) 4895 ( 0.00%) 163.17
quake 21 ( 0.00%) 3112 ( 0.00%) 148.19
cuseeme 5 ( 0.00%) 450 ( 0.00%) 90.00
other 1122740 ( 2.08%) 518871812 ( 1.61%) 462.15
icmp 18853116 ( 34.86%) 1178765182 ( 3.65%) 62.52
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 67793 ( 0.13%) 46021294 ( 0.14%) 678.85
ip6 667363 ( 1.23%) 328002084 ( 1.02%) 491.49
other 41539 ( 0.08%) 6297252 ( 0.02%) 151.60
frag 178201 ( 0.33%) 218336280 ( 0.68%) 1225.22
ip6 2592428 ( 4.79%) 2325124802 ( 7.21%) 896.89
tcp6 2467524 ( 4.56%) 2292142070 ( 7.10%) 928.92
http(s) 1793386 ( 3.32%) 2021549159 ( 6.27%) 1127.22
http(c) 423294 ( 0.78%) 41628069 ( 0.13%) 98.34
smtp 2150 ( 0.00%) 276066 ( 0.00%) 128.40
ftp 1857 ( 0.00%) 199605 ( 0.00%) 107.49
dns 801 ( 0.00%) 146364 ( 0.00%) 182.73
bgp 94 ( 0.00%) 20009 ( 0.00%) 212.86
hotline 6 ( 0.00%) 606 ( 0.00%) 101.00
other 245936 ( 0.45%) 228322192 ( 0.71%) 928.38
udp6 89474 ( 0.17%) 27280726 ( 0.08%) 304.90
dns 84069 ( 0.16%) 25566762 ( 0.08%) 304.12
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 5403 ( 0.01%) 1713753 ( 0.01%) 317.19
icmp6 33318 ( 0.06%) 3748056 ( 0.01%) 112.49
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2082 ( 0.00%) 1949870 ( 0.01%) 936.54
tcpdump file: 201304091400.dump.gz (1171.16 MB)