Traffic Trace Info
DumpFile: 201304281400.dump
FileSize: 2641.21MB
Id: 201304281400
StartTime: Sun Apr 28 14:00:00 2013
EndTime: Sun Apr 28 14:15:01 2013
TotalTime: 900.51 seconds
TotalCapSize: 2021.85MB CapLen: 96 bytes
# of packets: 40589582 (18197.83MB)
AvgRate: 169.53Mbps stddev:32.91M
IP flow (unique src/dst pair) Information
# of flows: 19159225 (avg. 2.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.3% 6.2% 3.8% 3.4% 2.9% 2.6% 2.4% 2.3% 2.1% 1.8%
IP address Information
# of IPv4 addresses: 15047593
Top 10 bandwidth usage (bytes/total in %):
21.6% 14.3% 10.1% 6.8% 6.5% 6.5% 6.4% 4.1% 3.8% 3.7%
# of IPv6 addresses: 7422
Top 10 bandwidth usage (bytes/total in %):
32.8% 32.8% 11.7% 6.6% 6.2% 5.7% 5.5% 5.5% 5.0% 4.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201304281400.pktlen.png)
detailed numbers
[ 32- 63]: 22234523
[ 64- 127]: 5232718
[ 128- 255]: 531969
[ 256- 511]: 743768
[ 512- 1023]: 666854
[ 1024- 2047]: 11179750
Protocol Breakdown
![[protocol breakdown chart]](201304281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40589582 (100.00%) 19081805513 (100.00%) 470.12
ip 39737225 ( 97.90%) 18068732309 ( 94.69%) 454.71
tcp 18255639 ( 44.98%) 16169692487 ( 84.74%) 885.74
http(s) 9274614 ( 22.85%) 11815741003 ( 61.92%) 1273.99
http(c) 5273496 ( 12.99%) 1835183498 ( 9.62%) 348.00
squid 47579 ( 0.12%) 7923914 ( 0.04%) 166.54
smtp 100256 ( 0.25%) 17298756 ( 0.09%) 172.55
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 17725 ( 0.04%) 3787446 ( 0.02%) 213.68
pop3 1517 ( 0.00%) 487394 ( 0.00%) 321.29
imap 4208 ( 0.01%) 2056956 ( 0.01%) 488.82
telnet 1283 ( 0.00%) 86063 ( 0.00%) 67.08
ssh 19993 ( 0.05%) 4178658 ( 0.02%) 209.01
dns 7377 ( 0.02%) 679044 ( 0.00%) 92.05
bgp 512 ( 0.00%) 112680 ( 0.00%) 220.08
napster 7 ( 0.00%) 420 ( 0.00%) 60.00
realaud 4 ( 0.00%) 240 ( 0.00%) 60.00
rtsp 5 ( 0.00%) 300 ( 0.00%) 60.00
icecast 1019 ( 0.00%) 85288 ( 0.00%) 83.70
hotline 3 ( 0.00%) 184 ( 0.00%) 61.33
other 3506039 ( 8.64%) 2482070523 ( 13.01%) 707.94
udp 1623920 ( 4.00%) 593608112 ( 3.11%) 365.54
dns 579521 ( 1.43%) 144503846 ( 0.76%) 249.35
realaud 4 ( 0.00%) 490 ( 0.00%) 122.50
halflif 16 ( 0.00%) 1342 ( 0.00%) 83.88
starcra 11 ( 0.00%) 1836 ( 0.00%) 166.91
everque 47 ( 0.00%) 7292 ( 0.00%) 155.15
unreal 34 ( 0.00%) 2320 ( 0.00%) 68.24
quake 26 ( 0.00%) 2284 ( 0.00%) 87.85
cuseeme 3 ( 0.00%) 286 ( 0.00%) 95.33
other 1044129 ( 2.57%) 449010379 ( 2.35%) 430.03
icmp 19692409 ( 48.52%) 1232598601 ( 6.46%) 62.59
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 3515 ( 0.01%) 2339274 ( 0.01%) 665.51
ip6 130916 ( 0.32%) 64027859 ( 0.34%) 489.08
other 30642 ( 0.08%) 6446816 ( 0.03%) 210.39
frag 40138 ( 0.10%) 47134650 ( 0.25%) 1174.31
ip6 852357 ( 2.10%) 1013073204 ( 5.31%) 1188.56
tcp6 678715 ( 1.67%) 874331247 ( 4.58%) 1288.22
http(s) 630955 ( 1.55%) 854182045 ( 4.48%) 1353.79
http(c) 28472 ( 0.07%) 2860840 ( 0.01%) 100.48
smtp 519 ( 0.00%) 51957 ( 0.00%) 100.11
ftp 25 ( 0.00%) 2209 ( 0.00%) 88.36
ssh 74 ( 0.00%) 12626 ( 0.00%) 170.62
dns 188 ( 0.00%) 73725 ( 0.00%) 392.15
bgp 88 ( 0.00%) 15193 ( 0.00%) 172.65
other 18394 ( 0.05%) 17132652 ( 0.09%) 931.43
udp6 46005 ( 0.11%) 15232306 ( 0.08%) 331.10
dns 44093 ( 0.11%) 14835266 ( 0.08%) 336.45
quake 1 ( 0.00%) 119 ( 0.00%) 119.00
cuseeme 1 ( 0.00%) 101 ( 0.00%) 101.00
other 1910 ( 0.00%) 396820 ( 0.00%) 207.76
icmp6 27003 ( 0.07%) 3181564 ( 0.02%) 117.82
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 100604 ( 0.25%) 120324007 ( 0.63%) 1196.02
tcpdump file: 201304281400.dump.gz (840.31 MB)