Traffic Trace Info
DumpFile: 201304211400.dump
FileSize: 2831.43MB
Id: 201304211400
StartTime: Sun Apr 21 14:00:01 2013
EndTime: Sun Apr 21 14:15:01 2013
TotalTime: 899.61 seconds
TotalCapSize: -1918.60MB CapLen: 96 bytes
# of packets: 42861777 (24759.03MB)
AvgRate: 230.86Mbps stddev:32.31M
IP flow (unique src/dst pair) Information
# of flows: 12780875 (avg. 3.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.6% 2.5% 2.4% 2.4% 2.2% 2.1% 1.8% 1.7% 1.5%
IP address Information
# of IPv4 addresses: 9726916
Top 10 bandwidth usage (bytes/total in %):
28.8% 10.4% 3.7% 3.5% 3.2% 3.1% 2.9% 2.8% 2.7% 2.7%
# of IPv6 addresses: 7539
Top 10 bandwidth usage (bytes/total in %):
64.7% 10.8% 9.5% 9.3% 7.4% 7.2% 6.8% 6.8% 6.8% 6.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201304211400.pktlen.png)
detailed numbers
[ 32- 63]: 17449957
[ 64- 127]: 7359553
[ 128- 255]: 729352
[ 256- 511]: 769821
[ 512- 1023]: 835993
[ 1024- 2047]: 15717101
Protocol Breakdown
![[protocol breakdown chart]](201304211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42861777 (100.00%) 25961725582 (100.00%) 605.71
ip 41644223 ( 97.16%) 24709328205 ( 95.18%) 593.34
tcp 24460212 ( 57.07%) 21439606399 ( 82.58%) 876.51
http(s) 12901853 ( 30.10%) 17275401754 ( 66.54%) 1338.99
http(c) 7480597 ( 17.45%) 2582494007 ( 9.95%) 345.23
squid 82650 ( 0.19%) 16391285 ( 0.06%) 198.32
smtp 58978 ( 0.14%) 8917087 ( 0.03%) 151.19
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 12183 ( 0.03%) 3354453 ( 0.01%) 275.34
pop3 1765 ( 0.00%) 418030 ( 0.00%) 236.84
imap 1402 ( 0.00%) 232626 ( 0.00%) 165.92
telnet 46663 ( 0.11%) 3440692 ( 0.01%) 73.73
ssh 1516712 ( 3.54%) 264767172 ( 1.02%) 174.57
dns 2065 ( 0.00%) 278820 ( 0.00%) 135.02
bgp 551 ( 0.00%) 127906 ( 0.00%) 232.13
napster 27 ( 0.00%) 4978 ( 0.00%) 184.37
realaud 773 ( 0.00%) 65143 ( 0.00%) 84.27
rtsp 6 ( 0.00%) 360 ( 0.00%) 60.00
icecast 26366 ( 0.06%) 12083295 ( 0.05%) 458.29
other 2327620 ( 5.43%) 1271628731 ( 4.90%) 546.32
udp 3961234 ( 9.24%) 2226996640 ( 8.58%) 562.20
dns 690140 ( 1.61%) 192190973 ( 0.74%) 278.48
realaud 5 ( 0.00%) 696 ( 0.00%) 139.20
halflif 683 ( 0.00%) 138433 ( 0.00%) 202.68
starcra 34 ( 0.00%) 3876 ( 0.00%) 114.00
everque 760 ( 0.00%) 579420 ( 0.00%) 762.39
unreal 24 ( 0.00%) 2151 ( 0.00%) 89.62
quake 8 ( 0.00%) 865 ( 0.00%) 108.12
cuseeme 12 ( 0.00%) 861 ( 0.00%) 71.75
other 3263276 ( 7.61%) 2033589709 ( 7.83%) 623.17
icmp 12853894 ( 29.99%) 805419505 ( 3.10%) 62.66
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 3403 ( 0.01%) 2265158 ( 0.01%) 665.64
ip6 285195 ( 0.67%) 224724253 ( 0.87%) 787.97
other 80101 ( 0.19%) 10297090 ( 0.04%) 128.55
frag 104720 ( 0.24%) 126617873 ( 0.49%) 1209.11
ip6 1217554 ( 2.84%) 1252397377 ( 4.82%) 1028.62
tcp6 468610 ( 1.09%) 414537171 ( 1.60%) 884.61
http(s) 354835 ( 0.83%) 402168643 ( 1.55%) 1133.40
http(c) 107778 ( 0.25%) 10284990 ( 0.04%) 95.43
smtp 31 ( 0.00%) 3188 ( 0.00%) 102.84
ftp 25 ( 0.00%) 2209 ( 0.00%) 88.36
dns 162 ( 0.00%) 74788 ( 0.00%) 461.65
bgp 90 ( 0.00%) 20570 ( 0.00%) 228.56
other 5689 ( 0.01%) 1982783 ( 0.01%) 348.53
udp6 47760 ( 0.11%) 14895193 ( 0.06%) 311.88
dns 47208 ( 0.11%) 14837658 ( 0.06%) 314.30
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
other 551 ( 0.00%) 57428 ( 0.00%) 104.23
icmp6 19711 ( 0.05%) 2363043 ( 0.01%) 119.88
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 681443 ( 1.59%) 820597890 ( 3.16%) 1204.21
tcpdump file: 201304211400.dump.gz (912.23 MB)