Traffic Trace Info
DumpFile: 201305021400.dump
FileSize: 3507.80MB
Id: 201305021400
StartTime: Thu May 2 14:00:00 2013
EndTime: Thu May 2 14:15:01 2013
TotalTime: 900.57 seconds
TotalCapSize: -1383.67MB CapLen: 96 bytes
# of packets: 52131384 (24363.34MB)
AvgRate: 226.92Mbps stddev:40.47M
IP flow (unique src/dst pair) Information
# of flows: 20168873 (avg. 2.58 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 1.7% 1.6% 1.5% 1.2% 1.1% 1.1% 1.1% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 15942616
Top 10 bandwidth usage (bytes/total in %):
9.6% 5.6% 5.2% 5.1% 4.6% 3.9% 3.7% 3.4% 2.8% 2.6%
# of IPv6 addresses: 10561
Top 10 bandwidth usage (bytes/total in %):
10.1% 8.1% 6.8% 6.1% 5.8% 5.2% 4.9% 4.7% 3.6% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201305021400.pktlen.png)
detailed numbers
[ 32- 63]: 24423300
[ 64- 127]: 9362300
[ 128- 255]: 1003881
[ 256- 511]: 1494988
[ 512- 1023]: 1030692
[ 1024- 2047]: 14816223
Protocol Breakdown
![[protocol breakdown chart]](201305021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 52131384 (100.00%) 25546818297 (100.00%) 490.05
ip 50131108 ( 96.16%) 23935723724 ( 93.69%) 477.46
tcp 25696607 ( 49.29%) 21810593270 ( 85.37%) 848.77
http(s) 13487072 ( 25.87%) 16985785621 ( 66.49%) 1259.41
http(c) 9815154 ( 18.83%) 3428201121 ( 13.42%) 349.28
squid 17883 ( 0.03%) 4510111 ( 0.02%) 252.20
smtp 89439 ( 0.17%) 19461597 ( 0.08%) 217.60
nntp 10 ( 0.00%) 600 ( 0.00%) 60.00
ftp 24057 ( 0.05%) 4145255 ( 0.02%) 172.31
pop3 2965 ( 0.01%) 985882 ( 0.00%) 332.51
imap 3456 ( 0.01%) 1122553 ( 0.00%) 324.81
telnet 1551 ( 0.00%) 102349 ( 0.00%) 65.99
ssh 36184 ( 0.07%) 5433630 ( 0.02%) 150.17
dns 10506 ( 0.02%) 1849146 ( 0.01%) 176.01
bgp 527 ( 0.00%) 111618 ( 0.00%) 211.80
napster 9 ( 0.00%) 540 ( 0.00%) 60.00
realaud 17 ( 0.00%) 1682 ( 0.00%) 98.94
rtsp 10 ( 0.00%) 600 ( 0.00%) 60.00
icecast 22373 ( 0.04%) 15993393 ( 0.06%) 714.85
other 2185298 ( 4.19%) 1342881812 ( 5.26%) 614.51
udp 2074232 ( 3.98%) 576129926 ( 2.26%) 277.76
dns 928647 ( 1.78%) 224118819 ( 0.88%) 241.34
rip 26 ( 0.00%) 1716 ( 0.00%) 66.00
realaud 9 ( 0.00%) 1275 ( 0.00%) 141.67
halflif 382 ( 0.00%) 549042 ( 0.00%) 1437.28
starcra 12 ( 0.00%) 2260 ( 0.00%) 188.33
everque 213 ( 0.00%) 79472 ( 0.00%) 373.11
unreal 731 ( 0.00%) 729638 ( 0.00%) 998.14
quake 19 ( 0.00%) 3096 ( 0.00%) 162.95
cuseeme 7 ( 0.00%) 761 ( 0.00%) 108.71
other 1144063 ( 2.19%) 350564240 ( 1.37%) 306.42
icmp 21809514 ( 41.84%) 1373040609 ( 5.37%) 62.96
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 6245 ( 0.01%) 3287030 ( 0.01%) 526.35
ip6 505568 ( 0.97%) 165484504 ( 0.65%) 327.32
other 38758 ( 0.07%) 7169225 ( 0.03%) 184.97
frag 62120 ( 0.12%) 86690551 ( 0.34%) 1395.53
ip6 2000276 ( 3.84%) 1611094573 ( 6.31%) 805.44
tcp6 1893583 ( 3.63%) 1579139307 ( 6.18%) 833.94
http(s) 1342509 ( 2.58%) 1498716428 ( 5.87%) 1116.35
http(c) 432579 ( 0.83%) 39961418 ( 0.16%) 92.38
smtp 1804 ( 0.00%) 532702 ( 0.00%) 295.29
ftp 25 ( 0.00%) 2249 ( 0.00%) 89.96
ssh 74 ( 0.00%) 12638 ( 0.00%) 170.78
dns 213 ( 0.00%) 83868 ( 0.00%) 393.75
bgp 92 ( 0.00%) 21340 ( 0.00%) 231.96
other 116287 ( 0.22%) 39808664 ( 0.16%) 342.33
udp6 74624 ( 0.14%) 25657314 ( 0.10%) 343.82
dns 72491 ( 0.14%) 24032995 ( 0.09%) 331.53
everque 2 ( 0.00%) 188 ( 0.00%) 94.00
unreal 1 ( 0.00%) 93 ( 0.00%) 93.00
quake 1 ( 0.00%) 99 ( 0.00%) 99.00
other 2129 ( 0.00%) 1623939 ( 0.01%) 762.77
icmp6 29372 ( 0.06%) 3576034 ( 0.01%) 121.75
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2667 ( 0.01%) 2717838 ( 0.01%) 1019.06
tcpdump file: 201305021400.dump.gz (1152.39 MB)