Traffic Trace Info
DumpFile: 201304201400.dump
FileSize: 3088.73MB
Id: 201304201400
StartTime: Sat Apr 20 14:00:00 2013
EndTime: Sat Apr 20 14:15:00 2013
TotalTime: 899.92 seconds
TotalCapSize: -1709.27MB CapLen: 96 bytes
# of packets: 46006144 (23006.67MB)
AvgRate: 214.46Mbps stddev:32.55M
IP flow (unique src/dst pair) Information
# of flows: 16360813 (avg. 2.81 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 2.2% 1.8% 1.7% 1.6% 1.6% 1.5% 1.5% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 12800300
Top 10 bandwidth usage (bytes/total in %):
14.8% 10.7% 9.2% 5.3% 4.4% 3.6% 2.9% 2.3% 2.2% 2.1%
# of IPv6 addresses: 8138
Top 10 bandwidth usage (bytes/total in %):
32.2% 24.8% 6.4% 5.3% 5.2% 5.1% 4.9% 4.8% 4.2% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201304201400.pktlen.png)
detailed numbers
[ 32- 63]: 20707599
[ 64- 127]: 8639976
[ 128- 255]: 640129
[ 256- 511]: 946696
[ 512- 1023]: 836137
[ 1024- 2047]: 14235607
Protocol Breakdown
![[protocol breakdown chart]](201304201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 46006144 (100.00%) 24124237145 (100.00%) 524.37
ip 44569101 ( 96.88%) 22590088413 ( 93.64%) 506.86
tcp 22136298 ( 48.12%) 19977190232 ( 82.81%) 902.46
http(s) 12268509 ( 26.67%) 15856689157 ( 65.73%) 1292.47
http(c) 6501915 ( 14.13%) 1445093321 ( 5.99%) 222.26
squid 28323 ( 0.06%) 14373750 ( 0.06%) 507.49
smtp 57733 ( 0.13%) 9222368 ( 0.04%) 159.74
ftp 16095 ( 0.03%) 3578227 ( 0.01%) 222.32
pop3 2269 ( 0.00%) 479168 ( 0.00%) 211.18
imap 1878 ( 0.00%) 224667 ( 0.00%) 119.63
telnet 1437 ( 0.00%) 95849 ( 0.00%) 66.70
ssh 46552 ( 0.10%) 9200851 ( 0.04%) 197.65
dns 2426 ( 0.01%) 295232 ( 0.00%) 121.69
bgp 527 ( 0.00%) 114664 ( 0.00%) 217.58
napster 56 ( 0.00%) 4120 ( 0.00%) 73.57
realaud 585 ( 0.00%) 62917 ( 0.00%) 107.55
rtsp 197479 ( 0.43%) 295024807 ( 1.22%) 1493.96
icecast 757 ( 0.00%) 108775 ( 0.00%) 143.69
hotline 6 ( 0.00%) 414 ( 0.00%) 69.00
other 3009751 ( 6.54%) 2342621945 ( 9.71%) 778.34
udp 2245093 ( 4.88%) 1231280330 ( 5.10%) 548.43
dns 709934 ( 1.54%) 212657285 ( 0.88%) 299.55
realaud 43 ( 0.00%) 5593 ( 0.00%) 130.07
halflif 309 ( 0.00%) 66480 ( 0.00%) 215.15
starcra 14 ( 0.00%) 1744 ( 0.00%) 124.57
everque 56 ( 0.00%) 10295 ( 0.00%) 183.84
unreal 23 ( 0.00%) 2247 ( 0.00%) 97.70
quake 10 ( 0.00%) 944 ( 0.00%) 94.40
cuseeme 10 ( 0.00%) 796 ( 0.00%) 79.60
other 1534576 ( 3.34%) 1018478534 ( 4.22%) 663.69
icmp 19906350 ( 43.27%) 1276022255 ( 5.29%) 64.10
ipip 186 ( 0.00%) 19380 ( 0.00%) 104.19
ipsec 3520 ( 0.01%) 2332364 ( 0.01%) 662.60
ip6 177042 ( 0.38%) 90929853 ( 0.38%) 513.61
other 100612 ( 0.22%) 12313999 ( 0.05%) 122.39
frag 24794 ( 0.05%) 35043440 ( 0.15%) 1413.38
ip6 1437043 ( 3.12%) 1534148732 ( 6.36%) 1067.57
tcp6 1310425 ( 2.85%) 1461059247 ( 6.06%) 1114.95
http(s) 1043022 ( 2.27%) 1420186862 ( 5.89%) 1361.61
http(c) 236136 ( 0.51%) 22046231 ( 0.09%) 93.36
squid 65 ( 0.00%) 15810 ( 0.00%) 243.23
smtp 154 ( 0.00%) 35788 ( 0.00%) 232.39
ftp 25 ( 0.00%) 2209 ( 0.00%) 88.36
dns 141 ( 0.00%) 47230 ( 0.00%) 334.96
bgp 93 ( 0.00%) 20677 ( 0.00%) 222.33
other 30789 ( 0.07%) 18704440 ( 0.08%) 607.50
udp6 54767 ( 0.12%) 17342007 ( 0.07%) 316.65
dns 54277 ( 0.12%) 17281901 ( 0.07%) 318.40
other 490 ( 0.00%) 60106 ( 0.00%) 122.67
icmp6 28472 ( 0.06%) 3395662 ( 0.01%) 119.26
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 43349 ( 0.09%) 52347736 ( 0.22%) 1207.59
tcpdump file: 201304201400.dump.gz (953.90 MB)