Traffic Trace Info
DumpFile: 201304111400.dump
FileSize: 3028.14MB
Id: 201304111400
StartTime: Thu Apr 11 14:00:01 2013
EndTime: Thu Apr 11 14:15:00 2013
TotalTime: 899.13 seconds
TotalCapSize: -1700.03MB CapLen: 96 bytes
# of packets: 41429258 (32194.79MB)
AvgRate: 300.47Mbps stddev:49.08M
IP flow (unique src/dst pair) Information
# of flows: 1003253 (avg. 41.29 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.4% 6.2% 2.9% 2.0% 1.4% 1.4% 1.2% 1.2% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 544675
Top 10 bandwidth usage (bytes/total in %):
14.6% 8.3% 7.6% 7.3% 6.8% 4.4% 4.2% 3.3% 3.2% 3.2%
# of IPv6 addresses: 12051
Top 10 bandwidth usage (bytes/total in %):
16.4% 16.4% 6.7% 6.7% 4.2% 4.1% 4.0% 3.7% 3.7% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201304111400.pktlen.png)
detailed numbers
[ 32- 63]: 7710112
[ 64- 127]: 7930385
[ 128- 255]: 931283
[ 256- 511]: 1086367
[ 512- 1023]: 4622262
[ 1024- 2047]: 19148849
Protocol Breakdown
![[protocol breakdown chart]](201304111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41429258 (100.00%) 33758686945 (100.00%) 814.85
ip 38454244 ( 92.82%) 31207534246 ( 92.44%) 811.55
tcp 33271275 ( 80.31%) 28420119231 ( 84.19%) 854.19
http(s) 19102075 ( 46.11%) 23947918964 ( 70.94%) 1253.68
http(c) 11952783 ( 28.85%) 3478675446 ( 10.30%) 291.03
squid 28424 ( 0.07%) 19940079 ( 0.06%) 701.52
smtp 96832 ( 0.23%) 33929142 ( 0.10%) 350.39
nntp 7 ( 0.00%) 420 ( 0.00%) 60.00
ftp 24031 ( 0.06%) 4150400 ( 0.01%) 172.71
pop3 3436 ( 0.01%) 1452688 ( 0.00%) 422.78
imap 4457 ( 0.01%) 2958515 ( 0.01%) 663.79
telnet 40052 ( 0.10%) 2951581 ( 0.01%) 73.69
ssh 119133 ( 0.29%) 21954514 ( 0.07%) 184.29
dns 3226 ( 0.01%) 351398 ( 0.00%) 108.93
bgp 576 ( 0.00%) 143553 ( 0.00%) 249.22
napster 20 ( 0.00%) 2259 ( 0.00%) 112.95
realaud 191 ( 0.00%) 21001 ( 0.00%) 109.95
rtsp 56718 ( 0.14%) 84094682 ( 0.25%) 1482.68
icecast 24534 ( 0.06%) 7079575 ( 0.02%) 288.56
hotline 26 ( 0.00%) 1934 ( 0.00%) 74.38
other 1814682 ( 4.38%) 814488760 ( 2.41%) 448.83
udp 3280035 ( 7.92%) 1678227297 ( 4.97%) 511.65
dns 758379 ( 1.83%) 196414594 ( 0.58%) 258.99
rip 16 ( 0.00%) 1056 ( 0.00%) 66.00
realaud 16 ( 0.00%) 1249 ( 0.00%) 78.06
halflif 341 ( 0.00%) 64736 ( 0.00%) 189.84
starcra 34 ( 0.00%) 7915 ( 0.00%) 232.79
everque 416 ( 0.00%) 172344 ( 0.00%) 414.29
unreal 24 ( 0.00%) 3466 ( 0.00%) 144.42
quake 18 ( 0.00%) 2022 ( 0.00%) 112.33
cuseeme 4 ( 0.00%) 353 ( 0.00%) 88.25
other 2505764 ( 6.05%) 1480576174 ( 4.39%) 590.87
icmp 619400 ( 1.50%) 89987540 ( 0.27%) 145.28
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 44370 ( 0.11%) 12585852 ( 0.04%) 283.66
ip6 1198103 ( 2.89%) 1000082759 ( 2.96%) 834.72
other 40877 ( 0.10%) 6512407 ( 0.02%) 159.32
frag 61384 ( 0.15%) 65342048 ( 0.19%) 1064.48
ip6 2975014 ( 7.18%) 2551152699 ( 7.56%) 857.53
tcp6 2789702 ( 6.73%) 2430225323 ( 7.20%) 871.14
http(s) 1866968 ( 4.51%) 2147491734 ( 6.36%) 1150.26
http(c) 610601 ( 1.47%) 55925727 ( 0.17%) 91.59
smtp 115 ( 0.00%) 70577 ( 0.00%) 613.71
ftp 1096 ( 0.00%) 106176 ( 0.00%) 96.88
pop3 3 ( 0.00%) 254 ( 0.00%) 84.67
ssh 47 ( 0.00%) 28171 ( 0.00%) 599.38
dns 154 ( 0.00%) 53174 ( 0.00%) 345.29
bgp 93 ( 0.00%) 19994 ( 0.00%) 214.99
other 310625 ( 0.75%) 226529516 ( 0.67%) 729.27
udp6 81225 ( 0.20%) 23217790 ( 0.07%) 285.85
dns 75982 ( 0.18%) 22608394 ( 0.07%) 297.55
halflif 1 ( 0.00%) 116 ( 0.00%) 116.00
quake 8 ( 0.00%) 743 ( 0.00%) 92.88
cuseeme 2 ( 0.00%) 214 ( 0.00%) 107.00
other 5232 ( 0.01%) 608323 ( 0.00%) 116.27
icmp6 24809 ( 0.06%) 2751243 ( 0.01%) 110.90
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 79248 ( 0.19%) 94954263 ( 0.28%) 1198.19
tcpdump file: 201304111400.dump.gz (899.81 MB)