Traffic Trace Info
DumpFile: 201304271400.dump
FileSize: 2999.22MB
Id: 201304271400
StartTime: Sat Apr 27 14:00:01 2013
EndTime: Sat Apr 27 14:15:01 2013
TotalTime: 900.03 seconds
TotalCapSize: -1786.90MB CapLen: 96 bytes
# of packets: 45226870 (23168.19MB)
AvgRate: 215.94Mbps stddev:39.53M
IP flow (unique src/dst pair) Information
# of flows: 18757811 (avg. 2.41 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 4.1% 2.8% 2.5% 2.2% 2.1% 2.1% 1.7% 1.5% 1.2%
IP address Information
# of IPv4 addresses: 14768048
Top 10 bandwidth usage (bytes/total in %):
11.8% 9.4% 7.2% 6.2% 6.2% 4.9% 4.4% 4.4% 4.3% 3.3%
# of IPv6 addresses: 7796
Top 10 bandwidth usage (bytes/total in %):
31.5% 16.6% 9.0% 6.7% 5.7% 5.6% 5.2% 5.1% 4.9% 4.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201304271400.pktlen.png)
detailed numbers
[ 32- 63]: 21846057
[ 64- 127]: 6520756
[ 128- 255]: 772383
[ 256- 511]: 863745
[ 512- 1023]: 793935
[ 1024- 2047]: 14429994
Protocol Breakdown
![[protocol breakdown chart]](201304271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 45226870 (100.00%) 24293608540 (100.00%) 537.15
ip 44174675 ( 97.67%) 23168136512 ( 95.37%) 524.47
tcp 22128092 ( 48.93%) 20688678992 ( 85.16%) 934.95
http(s) 12628145 ( 27.92%) 16345011641 ( 67.28%) 1294.33
http(c) 6529814 ( 14.44%) 2029235667 ( 8.35%) 310.76
squid 7399 ( 0.02%) 2515566 ( 0.01%) 339.99
smtp 52400 ( 0.12%) 6999670 ( 0.03%) 133.58
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 31460 ( 0.07%) 4521046 ( 0.02%) 143.71
pop3 4204 ( 0.01%) 588713 ( 0.00%) 140.04
imap 10704 ( 0.02%) 10490966 ( 0.04%) 980.10
telnet 1205 ( 0.00%) 80477 ( 0.00%) 66.79
ssh 79262 ( 0.18%) 11769814 ( 0.05%) 148.49
dns 9786 ( 0.02%) 744097 ( 0.00%) 76.04
bgp 526 ( 0.00%) 106358 ( 0.00%) 202.20
napster 4 ( 0.00%) 280 ( 0.00%) 70.00
realaud 17 ( 0.00%) 2026 ( 0.00%) 119.18
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 15218 ( 0.03%) 10245714 ( 0.04%) 673.26
hotline 47 ( 0.00%) 3554 ( 0.00%) 75.62
other 2757899 ( 6.10%) 2266363283 ( 9.33%) 821.77
udp 2153764 ( 4.76%) 1010836391 ( 4.16%) 469.33
dns 802269 ( 1.77%) 300731864 ( 1.24%) 374.85
rip 1 ( 0.00%) 66 ( 0.00%) 66.00
realaud 6 ( 0.00%) 619 ( 0.00%) 103.17
halflif 17 ( 0.00%) 1470 ( 0.00%) 86.47
starcra 12 ( 0.00%) 1983 ( 0.00%) 165.25
everque 520 ( 0.00%) 38431 ( 0.00%) 73.91
unreal 15 ( 0.00%) 1730 ( 0.00%) 115.33
quake 18 ( 0.00%) 2865 ( 0.00%) 159.17
cuseeme 2 ( 0.00%) 179 ( 0.00%) 89.50
other 1349817 ( 2.98%) 709692161 ( 2.92%) 525.77
icmp 19531403 ( 43.19%) 1232544662 ( 5.07%) 63.11
ipip 186 ( 0.00%) 19380 ( 0.00%) 104.19
ipsec 3638 ( 0.01%) 2395196 ( 0.01%) 658.38
ip6 324222 ( 0.72%) 227360376 ( 0.94%) 701.25
other 33370 ( 0.07%) 6301515 ( 0.03%) 188.84
frag 231578 ( 0.51%) 243241972 ( 1.00%) 1050.37
ip6 1052195 ( 2.33%) 1125472028 ( 4.63%) 1069.64
tcp6 984451 ( 2.18%) 1105668089 ( 4.55%) 1123.13
http(s) 690587 ( 1.53%) 903790949 ( 3.72%) 1308.73
http(c) 140939 ( 0.31%) 12392116 ( 0.05%) 87.93
squid 72 ( 0.00%) 16328 ( 0.00%) 226.78
smtp 655 ( 0.00%) 183030 ( 0.00%) 279.44
ftp 25 ( 0.00%) 2209 ( 0.00%) 88.36
ssh 70 ( 0.00%) 12250 ( 0.00%) 175.00
dns 289 ( 0.00%) 88140 ( 0.00%) 304.98
bgp 93 ( 0.00%) 19953 ( 0.00%) 214.55
other 151721 ( 0.34%) 189163114 ( 0.78%) 1246.78
udp6 48843 ( 0.11%) 16586991 ( 0.07%) 339.60
dns 48079 ( 0.11%) 16487718 ( 0.07%) 342.93
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
unreal 1 ( 0.00%) 113 ( 0.00%) 113.00
other 762 ( 0.00%) 99054 ( 0.00%) 129.99
icmp6 17806 ( 0.04%) 2131448 ( 0.01%) 119.70
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1065 ( 0.00%) 1081420 ( 0.00%) 1015.42
tcpdump file: 201304271400.dump.gz (948.52 MB)