Traffic Trace Info
DumpFile: 201304231400.dump
FileSize: 3970.11MB
Id: 201304231400
StartTime: Tue Apr 23 14:00:00 2013
EndTime: Tue Apr 23 14:15:01 2013
TotalTime: 900.63 seconds
TotalCapSize: -1016.84MB CapLen: 96 bytes
# of packets: 58386902 (29869.15MB)
AvgRate: 278.22Mbps stddev:42.87M
IP flow (unique src/dst pair) Information
# of flows: 18607903 (avg. 3.14 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.2% 4.6% 2.7% 2.0% 1.6% 1.4% 1.2% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 14591720
Top 10 bandwidth usage (bytes/total in %):
20.4% 11.3% 11.3% 5.0% 5.0% 4.1% 3.6% 3.5% 3.1% 2.2%
# of IPv6 addresses: 11079
Top 10 bandwidth usage (bytes/total in %):
45.8% 33.6% 3.1% 2.6% 2.5% 2.4% 2.4% 2.3% 2.3% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201304231400.pktlen.png)
detailed numbers
[ 32- 63]: 26674270
[ 64- 127]: 9856391
[ 128- 255]: 1076000
[ 256- 511]: 1112557
[ 512- 1023]: 1065182
[ 1024- 2047]: 18602502
Protocol Breakdown
![[protocol breakdown chart]](201304231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 58386902 (100.00%) 31320074994 (100.00%) 536.42
ip 55599335 ( 95.23%) 28812565932 ( 91.99%) 518.22
tcp 32378570 ( 55.46%) 26393403329 ( 84.27%) 815.15
http(s) 17074274 ( 29.24%) 22413745415 ( 71.56%) 1312.72
http(c) 11653414 ( 19.96%) 2316618335 ( 7.40%) 198.79
squid 78208 ( 0.13%) 29998063 ( 0.10%) 383.57
smtp 109949 ( 0.19%) 44756848 ( 0.14%) 407.07
ftp 36213 ( 0.06%) 4995021 ( 0.02%) 137.93
pop3 4190 ( 0.01%) 1948331 ( 0.01%) 465.00
imap 6518 ( 0.01%) 4594591 ( 0.01%) 704.91
telnet 1904 ( 0.00%) 126353 ( 0.00%) 66.36
ssh 178089 ( 0.31%) 27614837 ( 0.09%) 155.06
dns 74827 ( 0.13%) 6537527 ( 0.02%) 87.37
bgp 638 ( 0.00%) 210052 ( 0.00%) 329.24
napster 92 ( 0.00%) 11505 ( 0.00%) 125.05
realaud 204 ( 0.00%) 43180 ( 0.00%) 211.67
icecast 96742 ( 0.17%) 76780756 ( 0.25%) 793.67
hotline 3 ( 0.00%) 186 ( 0.00%) 62.00
other 3063305 ( 5.25%) 1465422329 ( 4.68%) 478.38
udp 2436551 ( 4.17%) 751177060 ( 2.40%) 308.30
dns 814863 ( 1.40%) 205282446 ( 0.66%) 251.92
realaud 34 ( 0.00%) 4719 ( 0.00%) 138.79
halflif 292 ( 0.00%) 61791 ( 0.00%) 211.61
starcra 48 ( 0.00%) 5327 ( 0.00%) 110.98
everque 156 ( 0.00%) 36661 ( 0.00%) 235.01
unreal 16 ( 0.00%) 2107 ( 0.00%) 131.69
quake 49 ( 0.00%) 3447 ( 0.00%) 70.35
cuseeme 3 ( 0.00%) 249 ( 0.00%) 83.00
other 1620949 ( 2.78%) 545683774 ( 1.74%) 336.64
icmp 19615924 ( 33.60%) 1229674899 ( 3.93%) 62.69
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 202954 ( 0.35%) 28984712 ( 0.09%) 142.81
ip6 905871 ( 1.55%) 400359992 ( 1.28%) 441.96
other 59280 ( 0.10%) 8946670 ( 0.03%) 150.92
frag 15599 ( 0.03%) 22781499 ( 0.07%) 1460.45
ip6 2787567 ( 4.77%) 2507509062 ( 8.01%) 899.53
tcp6 2602716 ( 4.46%) 2397981301 ( 7.66%) 921.34
http(s) 1304567 ( 2.23%) 1375959450 ( 4.39%) 1054.73
http(c) 505210 ( 0.87%) 43644437 ( 0.14%) 86.39
smtp 348 ( 0.00%) 123798 ( 0.00%) 355.74
ftp 4007 ( 0.01%) 421062 ( 0.00%) 105.08
pop3 1 ( 0.00%) 98 ( 0.00%) 98.00
dns 1169 ( 0.00%) 805527 ( 0.00%) 689.07
bgp 94 ( 0.00%) 25937 ( 0.00%) 275.93
other 787320 ( 1.35%) 977000992 ( 3.12%) 1240.92
udp6 94553 ( 0.16%) 27078540 ( 0.09%) 286.38
dns 83446 ( 0.14%) 26072900 ( 0.08%) 312.45
quake 1 ( 0.00%) 90 ( 0.00%) 90.00
other 11106 ( 0.02%) 1005550 ( 0.00%) 90.54
icmp6 22598 ( 0.04%) 2386776 ( 0.01%) 105.62
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 67669 ( 0.12%) 80058229 ( 0.26%) 1183.09
tcpdump file: 201304231400.dump.gz (1266.92 MB)