Traffic Trace Info
DumpFile: 201304101400.dump
FileSize: 2655.20MB
Id: 201304101400
StartTime: Wed Apr 10 14:00:01 2013
EndTime: Wed Apr 10 14:15:01 2013
TotalTime: 899.88 seconds
TotalCapSize: -1998.65MB CapLen: 96 bytes
# of packets: 36559034 (30169.23MB)
AvgRate: 281.28Mbps stddev:48.16M
IP flow (unique src/dst pair) Information
# of flows: 920891 (avg. 39.70 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 3.1% 2.9% 2.0% 1.7% 1.4% 1.1% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 499988
Top 10 bandwidth usage (bytes/total in %):
10.5% 7.4% 7.4% 6.8% 6.1% 4.5% 3.9% 3.2% 2.2% 2.2%
# of IPv6 addresses: 12120
Top 10 bandwidth usage (bytes/total in %):
35.1% 34.7% 8.6% 7.1% 4.8% 3.1% 2.7% 2.2% 2.2% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201304101400.pktlen.png)
detailed numbers
[ 32- 63]: 6393048
[ 64- 127]: 6842885
[ 128- 255]: 941850
[ 256- 511]: 1491990
[ 512- 1023]: 1046855
[ 1024- 2047]: 19842406
Protocol Breakdown
![[protocol breakdown chart]](201304101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36559034 (100.00%) 31634727810 (100.00%) 865.31
ip 33798703 ( 92.45%) 28841562778 ( 91.17%) 853.33
tcp 30775854 ( 84.18%) 27756487462 ( 87.74%) 901.89
http(s) 16456067 ( 45.01%) 21664987478 ( 68.48%) 1316.53
http(c) 9736995 ( 26.63%) 2580037974 ( 8.16%) 264.97
squid 24230 ( 0.07%) 12305595 ( 0.04%) 507.87
smtp 115498 ( 0.32%) 62102864 ( 0.20%) 537.70
ftp 21570 ( 0.06%) 3905353 ( 0.01%) 181.05
pop3 4761 ( 0.01%) 2373754 ( 0.01%) 498.58
imap 5357 ( 0.01%) 2250540 ( 0.01%) 420.11
telnet 1608 ( 0.00%) 106637 ( 0.00%) 66.32
ssh 166485 ( 0.46%) 13449587 ( 0.04%) 80.79
dns 5023 ( 0.01%) 468326 ( 0.00%) 93.24
bgp 644 ( 0.00%) 209584 ( 0.00%) 325.44
napster 76 ( 0.00%) 5107 ( 0.00%) 67.20
realaud 21 ( 0.00%) 3433 ( 0.00%) 163.48
icecast 8927 ( 0.02%) 5938792 ( 0.02%) 665.26
hotline 6 ( 0.00%) 360 ( 0.00%) 60.00
other 4228586 ( 11.57%) 3408342078 ( 10.77%) 806.02
udp 1760991 ( 4.82%) 542669643 ( 1.72%) 308.16
dns 860710 ( 2.35%) 241700498 ( 0.76%) 280.82
realaud 3 ( 0.00%) 542 ( 0.00%) 180.67
halflif 311 ( 0.00%) 65856 ( 0.00%) 211.76
starcra 27 ( 0.00%) 2850 ( 0.00%) 105.56
everque 12312 ( 0.03%) 12325361 ( 0.04%) 1001.09
unreal 43 ( 0.00%) 5175 ( 0.00%) 120.35
quake 8 ( 0.00%) 1028 ( 0.00%) 128.50
cuseeme 2 ( 0.00%) 177 ( 0.00%) 88.50
other 887499 ( 2.43%) 288531469 ( 0.91%) 325.11
icmp 598955 ( 1.64%) 88312196 ( 0.28%) 147.44
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 28270 ( 0.08%) 7224240 ( 0.02%) 255.54
ip6 414822 ( 1.13%) 175054063 ( 0.55%) 422.00
other 219626 ( 0.60%) 271795904 ( 0.86%) 1237.54
frag 54719 ( 0.15%) 59747646 ( 0.19%) 1091.90
ip6 2760331 ( 7.55%) 2793165032 ( 8.83%) 1011.89
tcp6 2567195 ( 7.02%) 2686998940 ( 8.49%) 1046.67
http(s) 1528748 ( 4.18%) 1674527224 ( 5.29%) 1095.36
http(c) 142790 ( 0.39%) 13749366 ( 0.04%) 96.29
smtp 159 ( 0.00%) 58766 ( 0.00%) 369.60
ftp 1442 ( 0.00%) 142837 ( 0.00%) 99.05
pop3 11 ( 0.00%) 912 ( 0.00%) 82.91
ssh 113 ( 0.00%) 20054 ( 0.00%) 177.47
dns 1663 ( 0.00%) 767601 ( 0.00%) 461.58
bgp 94 ( 0.00%) 22069 ( 0.00%) 234.78
other 892175 ( 2.44%) 997710111 ( 3.15%) 1118.29
udp6 87924 ( 0.24%) 26593245 ( 0.08%) 302.46
dns 85327 ( 0.23%) 26207671 ( 0.08%) 307.14
quake 1 ( 0.00%) 105 ( 0.00%) 105.00
other 2596 ( 0.01%) 385469 ( 0.00%) 148.49
icmp6 36000 ( 0.10%) 3942621 ( 0.01%) 109.52
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 69182 ( 0.19%) 75626146 ( 0.24%) 1093.15
tcpdump file: 201304101400.dump.gz (804.85 MB)