Traffic Trace Info
DumpFile: 201304151400.dump
FileSize: 4194.96MB
Id: 201304151400
StartTime: Mon Apr 15 14:00:01 2013
EndTime: Mon Apr 15 14:15:01 2013
TotalTime: 900.39 seconds
TotalCapSize: -817.66MB CapLen: 96 bytes
# of packets: 60070921 (29640.45MB)
AvgRate: 276.13Mbps stddev:41.92M
IP flow (unique src/dst pair) Information
# of flows: 17354736 (avg. 3.46 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.7% 2.6% 2.3% 1.0% 1.0% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 13385355
Top 10 bandwidth usage (bytes/total in %):
14.0% 5.6% 5.1% 4.7% 4.3% 4.0% 3.3% 3.0% 2.9% 2.9%
# of IPv6 addresses: 11151
Top 10 bandwidth usage (bytes/total in %):
7.2% 6.5% 6.4% 4.6% 3.9% 3.7% 3.5% 3.2% 3.2% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201304151400.pktlen.png)
detailed numbers
[ 32- 63]: 21951215
[ 64- 127]: 15953256
[ 128- 255]: 928884
[ 256- 511]: 1841288
[ 512- 1023]: 1401993
[ 1024- 2047]: 17994285
Protocol Breakdown
![[protocol breakdown chart]](201304151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 60070921 (100.00%) 31080260717 (100.00%) 517.39
ip 57002543 ( 94.89%) 28997646250 ( 93.30%) 508.71
tcp 29078350 ( 48.41%) 25695912313 ( 82.68%) 883.68
http(s) 15817641 ( 26.33%) 19806253647 ( 63.73%) 1252.16
http(c) 10431823 ( 17.37%) 4524431230 ( 14.56%) 433.71
squid 40897 ( 0.07%) 14174579 ( 0.05%) 346.59
smtp 117315 ( 0.20%) 27584464 ( 0.09%) 235.13
ftp 340910 ( 0.57%) 310229612 ( 1.00%) 910.00
pop3 4050 ( 0.01%) 2271289 ( 0.01%) 560.81
imap 2286 ( 0.00%) 304087 ( 0.00%) 133.02
telnet 2628 ( 0.00%) 1657861 ( 0.01%) 630.85
ssh 321443 ( 0.54%) 48776395 ( 0.16%) 151.74
dns 5598 ( 0.01%) 2354707 ( 0.01%) 420.63
bgp 531 ( 0.00%) 111037 ( 0.00%) 209.11
napster 21 ( 0.00%) 1764 ( 0.00%) 84.00
realaud 243 ( 0.00%) 48601 ( 0.00%) 200.00
rtsp 5 ( 0.00%) 300 ( 0.00%) 60.00
icecast 2538 ( 0.00%) 938027 ( 0.00%) 369.59
hotline 41 ( 0.00%) 4335 ( 0.00%) 105.73
other 1990380 ( 3.31%) 956770378 ( 3.08%) 480.70
udp 2892727 ( 4.82%) 900795147 ( 2.90%) 311.40
dns 1338677 ( 2.23%) 435956960 ( 1.40%) 325.66
realaud 5 ( 0.00%) 502 ( 0.00%) 100.40
halflif 315 ( 0.00%) 63902 ( 0.00%) 202.86
starcra 65 ( 0.00%) 4776 ( 0.00%) 73.48
everque 112 ( 0.00%) 18261 ( 0.00%) 163.04
unreal 216 ( 0.00%) 22284 ( 0.00%) 103.17
quake 61 ( 0.00%) 4416 ( 0.00%) 72.39
cuseeme 17 ( 0.00%) 1244 ( 0.00%) 73.18
other 1552463 ( 2.58%) 464550056 ( 1.49%) 299.23
icmp 23852184 ( 39.71%) 1543837911 ( 4.97%) 64.73
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 31242 ( 0.05%) 7673132 ( 0.02%) 245.60
ip6 952975 ( 1.59%) 827892679 ( 2.66%) 868.75
other 194880 ( 0.32%) 21515798 ( 0.07%) 110.41
frag 312544 ( 0.52%) 265757371 ( 0.86%) 850.30
ip6 3068378 ( 5.11%) 2082614467 ( 6.70%) 678.73
tcp6 2951119 ( 4.91%) 2051546824 ( 6.60%) 695.18
http(s) 1930492 ( 3.21%) 1868131574 ( 6.01%) 967.70
http(c) 885195 ( 1.47%) 78637870 ( 0.25%) 88.84
smtp 545 ( 0.00%) 666817 ( 0.00%) 1223.52
ftp 26 ( 0.00%) 2307 ( 0.00%) 88.73
pop3 34 ( 0.00%) 2925 ( 0.00%) 86.03
dns 829 ( 0.00%) 525211 ( 0.00%) 633.55
bgp 98 ( 0.00%) 21206 ( 0.00%) 216.39
other 133900 ( 0.22%) 103558914 ( 0.33%) 773.40
udp6 81138 ( 0.14%) 23349364 ( 0.08%) 287.77
dns 77097 ( 0.13%) 22580574 ( 0.07%) 292.89
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 4040 ( 0.01%) 768684 ( 0.00%) 190.27
icmp6 31341 ( 0.05%) 2929725 ( 0.01%) 93.48
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4750 ( 0.01%) 4784474 ( 0.02%) 1007.26
tcpdump file: 201304151400.dump.gz (1260.58 MB)