Traffic Trace Info
DumpFile: 201304301400.dump
FileSize: 2990.15MB
Id: 201304301400
StartTime: Tue Apr 30 14:00:01 2013
EndTime: Tue Apr 30 14:15:00 2013
TotalTime: 899.49 seconds
TotalCapSize: -1793.39MB CapLen: 96 bytes
# of packets: 45058096 (18850.04MB)
AvgRate: 175.77Mbps stddev:30.60M
IP flow (unique src/dst pair) Information
# of flows: 18858938 (avg. 2.39 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.4% 2.1% 2.0% 1.8% 1.5% 1.2% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 14833956
Top 10 bandwidth usage (bytes/total in %):
8.0% 6.5% 5.8% 4.9% 4.7% 4.7% 3.3% 2.6% 2.5% 2.5%
# of IPv6 addresses: 10650
Top 10 bandwidth usage (bytes/total in %):
17.8% 9.4% 8.0% 6.7% 3.6% 3.3% 2.8% 2.6% 2.6% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201304301400.pktlen.png)
detailed numbers
[ 32- 63]: 23113451
[ 64- 127]: 7678856
[ 128- 255]: 868960
[ 256- 511]: 1162297
[ 512- 1023]: 997093
[ 1024- 2047]: 11237439
Protocol Breakdown
![[protocol breakdown chart]](201304301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 45058096 (100.00%) 19765695956 (100.00%) 438.67
ip 43302255 ( 96.10%) 18385465689 ( 93.02%) 424.58
tcp 20746070 ( 46.04%) 16082388766 ( 81.37%) 775.20
http(s) 10131692 ( 22.49%) 12083081982 ( 61.13%) 1192.60
http(c) 8178560 ( 18.15%) 2776840511 ( 14.05%) 339.53
squid 13710 ( 0.03%) 7167401 ( 0.04%) 522.79
smtp 83792 ( 0.19%) 23995430 ( 0.12%) 286.37
ftp 22909 ( 0.05%) 4019991 ( 0.02%) 175.48
pop3 2040 ( 0.00%) 354996 ( 0.00%) 174.02
imap 2916 ( 0.01%) 367785 ( 0.00%) 126.13
telnet 1432 ( 0.00%) 95609 ( 0.00%) 66.77
ssh 112192 ( 0.25%) 85666865 ( 0.43%) 763.57
dns 18754 ( 0.04%) 3065490 ( 0.02%) 163.46
bgp 564 ( 0.00%) 136584 ( 0.00%) 242.17
napster 62 ( 0.00%) 6891 ( 0.00%) 111.15
realaud 12 ( 0.00%) 752 ( 0.00%) 62.67
rtsp 104741 ( 0.23%) 156586575 ( 0.79%) 1494.99
icecast 42554 ( 0.09%) 22274578 ( 0.11%) 523.44
hotline 9 ( 0.00%) 982 ( 0.00%) 109.11
other 2030130 ( 4.51%) 918726284 ( 4.65%) 452.55
udp 1949590 ( 4.33%) 762579461 ( 3.86%) 391.15
dns 822953 ( 1.83%) 265499079 ( 1.34%) 322.62
realaud 10 ( 0.00%) 855 ( 0.00%) 85.50
halflif 18 ( 0.00%) 1910 ( 0.00%) 106.11
starcra 10 ( 0.00%) 1849 ( 0.00%) 184.90
everque 193 ( 0.00%) 36921 ( 0.00%) 191.30
unreal 25 ( 0.00%) 3028 ( 0.00%) 121.12
quake 20 ( 0.00%) 2579 ( 0.00%) 128.95
cuseeme 22 ( 0.00%) 1705 ( 0.00%) 77.50
other 1126225 ( 2.50%) 496974819 ( 2.51%) 441.27
icmp 20076503 ( 44.56%) 1258700774 ( 6.37%) 62.70
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 137266 ( 0.30%) 121992340 ( 0.62%) 888.73
ip6 357769 ( 0.79%) 152176956 ( 0.77%) 425.35
other 34873 ( 0.08%) 7608232 ( 0.04%) 218.17
frag 25584 ( 0.06%) 28806895 ( 0.15%) 1125.97
ip6 1755841 ( 3.90%) 1380230267 ( 6.98%) 786.08
tcp6 1651867 ( 3.67%) 1349615906 ( 6.83%) 817.02
http(s) 1228504 ( 2.73%) 1294259532 ( 6.55%) 1053.52
http(c) 383707 ( 0.85%) 35687282 ( 0.18%) 93.01
smtp 1599 ( 0.00%) 1508620 ( 0.01%) 943.48
ftp 70 ( 0.00%) 6532 ( 0.00%) 93.31
ssh 146 ( 0.00%) 41000 ( 0.00%) 280.82
dns 221 ( 0.00%) 74911 ( 0.00%) 338.96
bgp 85 ( 0.00%) 18839 ( 0.00%) 221.64
other 37535 ( 0.08%) 18019190 ( 0.09%) 480.06
udp6 76645 ( 0.17%) 24628890 ( 0.12%) 321.34
dns 75670 ( 0.17%) 24487276 ( 0.12%) 323.61
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
other 974 ( 0.00%) 141507 ( 0.00%) 145.28
icmp6 24387 ( 0.05%) 3002670 ( 0.02%) 123.13
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2912 ( 0.01%) 2978721 ( 0.02%) 1022.91
tcpdump file: 201304301400.dump.gz (984.99 MB)