Traffic Trace Info
DumpFile: 201304251400.dump
FileSize: 4327.15MB
Id: 201304251400
StartTime: Thu Apr 25 14:00:00 2013
EndTime: Thu Apr 25 14:15:01 2013
TotalTime: 900.42 seconds
TotalCapSize: -738.10MB CapLen: 96 bytes
# of packets: 63520341 (36891.11MB)
AvgRate: 343.69Mbps stddev:43.61M
IP flow (unique src/dst pair) Information
# of flows: 18906547 (avg. 3.36 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.9% 6.3% 5.2% 3.1% 2.6% 1.8% 1.6% 1.4% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 14879443
Top 10 bandwidth usage (bytes/total in %):
7.2% 7.2% 6.9% 6.6% 6.4% 5.4% 5.4% 4.8% 4.5% 4.4%
# of IPv6 addresses: 10836
Top 10 bandwidth usage (bytes/total in %):
12.1% 9.9% 9.2% 6.5% 6.3% 5.4% 3.1% 2.6% 2.6% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201304251400.pktlen.png)
detailed numbers
[ 32- 63]: 25627509
[ 64- 127]: 10722225
[ 128- 255]: 1100377
[ 256- 511]: 1187005
[ 512- 1023]: 1466903
[ 1024- 2047]: 23416322
Protocol Breakdown
![[protocol breakdown chart]](201304251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 63520341 (100.00%) 38683134219 (100.00%) 608.99
ip 60701056 ( 95.56%) 36915589346 ( 95.43%) 608.15
tcp 36883772 ( 58.07%) 33803352720 ( 87.39%) 916.48
http(s) 20331659 ( 32.01%) 26870712694 ( 69.46%) 1321.62
http(c) 12041964 ( 18.96%) 2804171597 ( 7.25%) 232.87
squid 30457 ( 0.05%) 15247545 ( 0.04%) 500.63
smtp 76459 ( 0.12%) 22663268 ( 0.06%) 296.41
nntp 6 ( 0.00%) 360 ( 0.00%) 60.00
ftp 22362 ( 0.04%) 4056305 ( 0.01%) 181.39
pop3 3838 ( 0.01%) 1285364 ( 0.00%) 334.90
imap 7191 ( 0.01%) 4284729 ( 0.01%) 595.85
telnet 1440 ( 0.00%) 95455 ( 0.00%) 66.29
ssh 162455 ( 0.26%) 63070022 ( 0.16%) 388.23
dns 8177 ( 0.01%) 681383 ( 0.00%) 83.33
bgp 550 ( 0.00%) 130655 ( 0.00%) 237.55
napster 132 ( 0.00%) 9087 ( 0.00%) 68.84
realaud 159 ( 0.00%) 24299 ( 0.00%) 152.82
rtsp 18 ( 0.00%) 9694 ( 0.00%) 538.56
icecast 19155 ( 0.03%) 6570136 ( 0.02%) 343.00
hotline 8 ( 0.00%) 1856 ( 0.00%) 232.00
other 4177682 ( 6.58%) 4010334671 ( 10.37%) 959.94
udp 3480453 ( 5.48%) 1648584360 ( 4.26%) 473.67
dns 858868 ( 1.35%) 264893209 ( 0.68%) 308.42
rip 26 ( 0.00%) 1716 ( 0.00%) 66.00
realaud 9 ( 0.00%) 765 ( 0.00%) 85.00
halflif 11 ( 0.00%) 852 ( 0.00%) 77.45
starcra 8 ( 0.00%) 1175 ( 0.00%) 146.88
everque 5842 ( 0.01%) 5810461 ( 0.02%) 994.60
unreal 111 ( 0.00%) 15532 ( 0.00%) 139.93
quake 12 ( 0.00%) 1609 ( 0.00%) 134.08
cuseeme 5 ( 0.00%) 490 ( 0.00%) 98.00
other 2615260 ( 4.12%) 1377689990 ( 3.56%) 526.79
icmp 19761441 ( 31.11%) 1235830626 ( 3.19%) 62.54
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 6087 ( 0.01%) 2920742 ( 0.01%) 479.83
ip6 515676 ( 0.81%) 217112029 ( 0.56%) 421.02
other 53442 ( 0.08%) 7769599 ( 0.02%) 145.38
frag 122495 ( 0.19%) 160568597 ( 0.42%) 1310.82
ip6 2819285 ( 4.44%) 1767544873 ( 4.57%) 626.95
tcp6 2659411 ( 4.19%) 1681961308 ( 4.35%) 632.46
http(s) 1456779 ( 2.29%) 1526808725 ( 3.95%) 1048.07
http(c) 1049661 ( 1.65%) 93782252 ( 0.24%) 89.35
smtp 196 ( 0.00%) 68912 ( 0.00%) 351.59
ftp 82 ( 0.00%) 9135 ( 0.00%) 111.40
ssh 74 ( 0.00%) 12586 ( 0.00%) 170.08
dns 182 ( 0.00%) 62774 ( 0.00%) 344.91
bgp 93 ( 0.00%) 18525 ( 0.00%) 199.19
other 152344 ( 0.24%) 61198399 ( 0.16%) 401.71
udp6 80040 ( 0.13%) 26252506 ( 0.07%) 327.99
dns 79264 ( 0.12%) 26164745 ( 0.07%) 330.10
unreal 1 ( 0.00%) 92 ( 0.00%) 92.00
quake 1 ( 0.00%) 110 ( 0.00%) 110.00
cuseeme 1 ( 0.00%) 108 ( 0.00%) 108.00
other 773 ( 0.00%) 87451 ( 0.00%) 113.13
icmp6 31334 ( 0.05%) 3706775 ( 0.01%) 118.30
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 48469 ( 0.08%) 55620068 ( 0.14%) 1147.54
tcpdump file: 201304251400.dump.gz (1384.90 MB)