Traffic Trace Info
DumpFile: 201304241400.dump
FileSize: 3674.80MB
Id: 201304241400
StartTime: Wed Apr 24 14:00:01 2013
EndTime: Wed Apr 24 14:15:01 2013
TotalTime: 900.00 seconds
TotalCapSize: -1252.57MB CapLen: 96 bytes
# of packets: 54483362 (26896.49MB)
AvgRate: 250.70Mbps stddev:43.17M
IP flow (unique src/dst pair) Information
# of flows: 18121321 (avg. 3.01 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.5% 1.4% 1.1% 1.1% 0.9% 0.9% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 14021610
Top 10 bandwidth usage (bytes/total in %):
9.8% 7.6% 4.5% 4.4% 4.0% 3.9% 3.8% 3.0% 1.6% 1.6%
# of IPv6 addresses: 10213
Top 10 bandwidth usage (bytes/total in %):
10.4% 10.4% 10.0% 6.0% 3.5% 3.4% 3.4% 3.1% 3.1% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201304241400.pktlen.png)
detailed numbers
[ 32- 63]: 24269628
[ 64- 127]: 10331321
[ 128- 255]: 952246
[ 256- 511]: 1217218
[ 512- 1023]: 1139418
[ 1024- 2047]: 16573531
Protocol Breakdown
![[protocol breakdown chart]](201304241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 54483362 (100.00%) 28203011952 (100.00%) 517.64
ip 53244367 ( 97.73%) 27036625693 ( 95.86%) 507.78
tcp 29834278 ( 54.76%) 24391482829 ( 86.49%) 817.57
http(s) 15579285 ( 28.59%) 19630023826 ( 69.60%) 1260.01
http(c) 11029106 ( 20.24%) 2865360177 ( 10.16%) 259.80
squid 17189 ( 0.03%) 8889827 ( 0.03%) 517.18
smtp 79830 ( 0.15%) 24067621 ( 0.09%) 301.49
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 28618 ( 0.05%) 4373546 ( 0.02%) 152.83
pop3 4288 ( 0.01%) 2052205 ( 0.01%) 478.59
imap 3494 ( 0.01%) 1403225 ( 0.00%) 401.61
telnet 1210 ( 0.00%) 81447 ( 0.00%) 67.31
ssh 33177 ( 0.06%) 7661092 ( 0.03%) 230.92
dns 4959 ( 0.01%) 549032 ( 0.00%) 110.71
bgp 553 ( 0.00%) 132450 ( 0.00%) 239.51
napster 48 ( 0.00%) 11561 ( 0.00%) 240.85
realaud 15 ( 0.00%) 1164 ( 0.00%) 77.60
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 75442 ( 0.14%) 61226653 ( 0.22%) 811.57
hotline 19 ( 0.00%) 1604 ( 0.00%) 84.42
other 2977041 ( 5.46%) 1785647159 ( 6.33%) 599.81
udp 2927458 ( 5.37%) 1280596173 ( 4.54%) 437.44
dns 892591 ( 1.64%) 291825689 ( 1.03%) 326.94
realaud 2 ( 0.00%) 203 ( 0.00%) 101.50
halflif 293 ( 0.00%) 63517 ( 0.00%) 216.78
starcra 19 ( 0.00%) 1758 ( 0.00%) 92.53
everque 128 ( 0.00%) 25452 ( 0.00%) 198.84
unreal 86 ( 0.00%) 16987 ( 0.00%) 197.52
quake 22 ( 0.00%) 1673 ( 0.00%) 76.05
cuseeme 15 ( 0.00%) 1050 ( 0.00%) 70.00
other 2034183 ( 3.73%) 988564649 ( 3.51%) 485.98
icmp 20028216 ( 36.76%) 1249066180 ( 4.43%) 62.37
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 26588 ( 0.05%) 7315904 ( 0.03%) 275.16
ip6 334618 ( 0.61%) 96083792 ( 0.34%) 287.14
other 93025 ( 0.17%) 12061655 ( 0.04%) 129.66
frag 6405 ( 0.01%) 9339571 ( 0.03%) 1458.17
ip6 1238995 ( 2.27%) 1166386259 ( 4.14%) 941.40
tcp6 1089231 ( 2.00%) 1132662820 ( 4.02%) 1039.87
http(s) 1006446 ( 1.85%) 1107787984 ( 3.93%) 1100.69
http(c) 62369 ( 0.11%) 8593847 ( 0.03%) 137.79
smtp 706 ( 0.00%) 116974 ( 0.00%) 165.69
ftp 67 ( 0.00%) 7954 ( 0.00%) 118.72
dns 222 ( 0.00%) 85027 ( 0.00%) 383.00
bgp 91 ( 0.00%) 19387 ( 0.00%) 213.04
other 19330 ( 0.04%) 16051647 ( 0.06%) 830.40
udp6 126758 ( 0.23%) 30007085 ( 0.11%) 236.73
dns 81601 ( 0.15%) 26044789 ( 0.09%) 319.17
everque 1 ( 0.00%) 193 ( 0.00%) 193.00
cuseeme 1 ( 0.00%) 101 ( 0.00%) 101.00
other 45155 ( 0.08%) 3962002 ( 0.01%) 87.74
icmp6 21892 ( 0.04%) 2633594 ( 0.01%) 120.30
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1083 ( 0.00%) 1078544 ( 0.00%) 995.89
tcpdump file: 201304241400.dump.gz (1188.83 MB)