Traffic Trace Info
DumpFile: 201304261400.dump
FileSize: 2610.25MB
Id: 201304261400
StartTime: Fri Apr 26 14:00:00 2013
EndTime: Fri Apr 26 14:15:00 2013
TotalTime: 899.87 seconds
TotalCapSize: 2044.22MB CapLen: 96 bytes
# of packets: 37094876 (23033.52MB)
AvgRate: 214.67Mbps stddev:45.71M
IP flow (unique src/dst pair) Information
# of flows: 7638158 (avg. 4.86 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 3.0% 2.6% 2.0% 1.5% 1.5% 1.4% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 5786246
Top 10 bandwidth usage (bytes/total in %):
11.1% 6.5% 5.7% 4.4% 3.9% 3.8% 3.7% 3.3% 3.1% 2.8%
# of IPv6 addresses: 10375
Top 10 bandwidth usage (bytes/total in %):
16.7% 11.9% 6.7% 6.5% 4.4% 3.5% 3.1% 3.1% 2.9% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201304261400.pktlen.png)
detailed numbers
[ 32- 63]: 11702135
[ 64- 127]: 7551524
[ 128- 255]: 887263
[ 256- 511]: 1321321
[ 512- 1023]: 1167919
[ 1024- 2047]: 14464714
Protocol Breakdown
![[protocol breakdown chart]](201304261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37094876 (100.00%) 24152395989 (100.00%) 651.10
ip 35175939 ( 94.83%) 22984305910 ( 95.16%) 653.41
tcp 24668988 ( 66.50%) 21300016986 ( 88.19%) 863.43
http(s) 13645603 ( 36.79%) 17326439926 ( 71.74%) 1269.75
http(c) 8596872 ( 23.18%) 2372029702 ( 9.82%) 275.92
squid 12606 ( 0.03%) 4885614 ( 0.02%) 387.56
smtp 87752 ( 0.24%) 26567412 ( 0.11%) 302.76
ftp 24853 ( 0.07%) 4151848 ( 0.02%) 167.06
pop3 2919 ( 0.01%) 1456682 ( 0.01%) 499.03
imap 8231 ( 0.02%) 4643962 ( 0.02%) 564.20
telnet 74231 ( 0.20%) 5422777 ( 0.02%) 73.05
ssh 181910 ( 0.49%) 60398933 ( 0.25%) 332.03
dns 7406 ( 0.02%) 602040 ( 0.00%) 81.29
bgp 591 ( 0.00%) 169256 ( 0.00%) 286.39
napster 30 ( 0.00%) 15809 ( 0.00%) 526.97
realaud 243 ( 0.00%) 34972 ( 0.00%) 143.92
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 15153 ( 0.04%) 13567592 ( 0.06%) 895.37
hotline 4 ( 0.00%) 272 ( 0.00%) 68.00
other 2010583 ( 5.42%) 1479630129 ( 6.13%) 735.92
udp 2218424 ( 5.98%) 862261347 ( 3.57%) 388.68
dns 1076791 ( 2.90%) 381285192 ( 1.58%) 354.09
rip 4 ( 0.00%) 292 ( 0.00%) 73.00
realaud 15 ( 0.00%) 1532 ( 0.00%) 102.13
halflif 124 ( 0.00%) 18589 ( 0.00%) 149.91
starcra 33 ( 0.00%) 3105 ( 0.00%) 94.09
everque 522 ( 0.00%) 46670 ( 0.00%) 89.41
unreal 18 ( 0.00%) 1790 ( 0.00%) 99.44
quake 10 ( 0.00%) 1016 ( 0.00%) 101.60
cuseeme 1 ( 0.00%) 112 ( 0.00%) 112.00
other 1140803 ( 3.08%) 480844196 ( 1.99%) 421.50
icmp 7810581 ( 21.06%) 516163257 ( 2.14%) 66.09
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 4197 ( 0.01%) 1355294 ( 0.01%) 322.92
ip6 418300 ( 1.13%) 296205170 ( 1.23%) 708.12
other 55264 ( 0.15%) 8284586 ( 0.03%) 149.91
frag 115720 ( 0.31%) 154685093 ( 0.64%) 1336.72
ip6 1918937 ( 5.17%) 1168090079 ( 4.84%) 608.72
tcp6 1819193 ( 4.90%) 1139563360 ( 4.72%) 626.41
http(s) 985013 ( 2.66%) 1033247318 ( 4.28%) 1048.97
http(c) 754221 ( 2.03%) 65941860 ( 0.27%) 87.43
smtp 802 ( 0.00%) 238663 ( 0.00%) 297.58
ftp 52 ( 0.00%) 4883 ( 0.00%) 93.90
ssh 177 ( 0.00%) 26268 ( 0.00%) 148.41
dns 240 ( 0.00%) 82890 ( 0.00%) 345.38
bgp 103 ( 0.00%) 35063 ( 0.00%) 340.42
other 78585 ( 0.21%) 39986415 ( 0.17%) 508.83
udp6 75690 ( 0.20%) 24234746 ( 0.10%) 320.18
dns 75073 ( 0.20%) 24162260 ( 0.10%) 321.85
other 617 ( 0.00%) 72486 ( 0.00%) 117.48
icmp6 22400 ( 0.06%) 2702443 ( 0.01%) 120.64
ip6 60 ( 0.00%) 8580 ( 0.00%) 143.00
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1563 ( 0.00%) 1576734 ( 0.01%) 1008.79
tcpdump file: 201304261400.dump.gz (841.40 MB)