Traffic Trace Info
DumpFile: 201304131400.dump
FileSize: 1793.30MB
Id: 201304131400
StartTime: Sat Apr 13 14:00:01 2013
EndTime: Sat Apr 13 14:15:00 2013
TotalTime: 899.70 seconds
TotalCapSize: 1409.62MB CapLen: 96 bytes
# of packets: 25144538 (20011.35MB)
AvgRate: 186.64Mbps stddev:62.70M
IP flow (unique src/dst pair) Information
# of flows: 782001 (avg. 32.15 pkts/flow)
Top 10 big flow size (bytes/total in %):
24.4% 3.7% 1.5% 1.5% 1.2% 1.2% 1.2% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 454338
Top 10 bandwidth usage (bytes/total in %):
36.7% 26.3% 7.7% 4.0% 3.9% 3.4% 2.2% 2.1% 1.6% 1.6%
# of IPv6 addresses: 8656
Top 10 bandwidth usage (bytes/total in %):
25.2% 9.7% 7.9% 6.5% 6.5% 5.1% 4.7% 4.2% 4.0% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201304131400.pktlen.png)
detailed numbers
[ 32- 63]: 5138705
[ 64- 127]: 4728329
[ 128- 255]: 585324
[ 256- 511]: 741402
[ 512- 1023]: 891086
[ 1024- 2047]: 13059692
Protocol Breakdown
![[protocol breakdown chart]](201304131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25144538 (100.00%) 20983419075 (100.00%) 834.51
ip 23741155 ( 94.42%) 19907753889 ( 94.87%) 838.53
tcp 20877575 ( 83.03%) 18635956195 ( 88.81%) 892.63
http(s) 12602531 ( 50.12%) 16041884302 ( 76.45%) 1272.91
http(c) 6905206 ( 27.46%) 1867845398 ( 8.90%) 270.50
squid 22614 ( 0.09%) 15587543 ( 0.07%) 689.29
smtp 63269 ( 0.25%) 10477078 ( 0.05%) 165.60
ftp 11647 ( 0.05%) 3251480 ( 0.02%) 279.17
pop3 1502 ( 0.01%) 359287 ( 0.00%) 239.21
imap 4883 ( 0.02%) 3847190 ( 0.02%) 787.87
telnet 1473 ( 0.01%) 98020 ( 0.00%) 66.54
ssh 148715 ( 0.59%) 17047526 ( 0.08%) 114.63
dns 2762 ( 0.01%) 306955 ( 0.00%) 111.14
bgp 517 ( 0.00%) 103654 ( 0.00%) 200.49
napster 85 ( 0.00%) 9128 ( 0.00%) 107.39
realaud 83 ( 0.00%) 12696 ( 0.00%) 152.96
rtsp 6 ( 0.00%) 372 ( 0.00%) 62.00
icecast 9973 ( 0.04%) 6208091 ( 0.03%) 622.49
hotline 9 ( 0.00%) 930 ( 0.00%) 103.33
other 1102300 ( 4.38%) 668916545 ( 3.19%) 606.84
udp 1918412 ( 7.63%) 934898251 ( 4.46%) 487.33
dns 591998 ( 2.35%) 119845226 ( 0.57%) 202.44
realaud 24 ( 0.00%) 2016 ( 0.00%) 84.00
halflif 15086 ( 0.06%) 22157688 ( 0.11%) 1468.76
starcra 20 ( 0.00%) 1917 ( 0.00%) 95.85
everque 35 ( 0.00%) 6214 ( 0.00%) 177.54
unreal 10 ( 0.00%) 1655 ( 0.00%) 165.50
quake 11 ( 0.00%) 1508 ( 0.00%) 137.09
cuseeme 1 ( 0.00%) 90 ( 0.00%) 90.00
other 1311119 ( 5.21%) 792829654 ( 3.78%) 604.70
icmp 520754 ( 2.07%) 84690685 ( 0.40%) 162.63
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 10353 ( 0.04%) 3961334 ( 0.02%) 382.63
ip6 370848 ( 1.47%) 241686687 ( 1.15%) 651.71
other 43029 ( 0.17%) 6541577 ( 0.03%) 152.03
frag 182210 ( 0.72%) 266656409 ( 1.27%) 1463.46
ip6 1403383 ( 5.58%) 1075665186 ( 5.13%) 766.48
tcp6 1230263 ( 4.89%) 992460612 ( 4.73%) 806.71
http(s) 720045 ( 2.86%) 818693814 ( 3.90%) 1137.00
http(c) 356311 ( 1.42%) 29866559 ( 0.14%) 83.82
squid 72 ( 0.00%) 16028 ( 0.00%) 222.61
smtp 98 ( 0.00%) 17729 ( 0.00%) 180.91
ftp 72 ( 0.00%) 7599 ( 0.00%) 105.54
imap 1231 ( 0.00%) 795164 ( 0.00%) 645.95
ssh 112 ( 0.00%) 15176 ( 0.00%) 135.50
dns 277 ( 0.00%) 136703 ( 0.00%) 493.51
bgp 93 ( 0.00%) 19780 ( 0.00%) 212.69
other 151952 ( 0.60%) 142892060 ( 0.68%) 940.38
udp6 148744 ( 0.59%) 79431927 ( 0.38%) 534.02
dns 51606 ( 0.21%) 15966052 ( 0.08%) 309.38
everque 2 ( 0.00%) 211 ( 0.00%) 105.50
quake 1 ( 0.00%) 130 ( 0.00%) 130.00
other 97135 ( 0.39%) 63465534 ( 0.30%) 653.37
icmp6 22912 ( 0.09%) 2288649 ( 0.01%) 99.89
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1434 ( 0.01%) 1479918 ( 0.01%) 1032.02
tcpdump file: 201304131400.dump.gz (541.15 MB)