Traffic Trace Info
DumpFile: 201305031400.dump
FileSize: 2915.90MB
Id: 201305031400
StartTime: Fri May 3 14:00:01 2013
EndTime: Fri May 3 14:15:01 2013
TotalTime: 899.82 seconds
TotalCapSize: -1858.71MB CapLen: 96 bytes
# of packets: 44473378 (19668.74MB)
AvgRate: 183.35Mbps stddev:30.80M
IP flow (unique src/dst pair) Information
# of flows: 20216660 (avg. 2.20 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.9% 5.4% 4.0% 2.8% 2.2% 2.2% 2.1% 1.9% 1.6% 1.6%
IP address Information
# of IPv4 addresses: 16092835
Top 10 bandwidth usage (bytes/total in %):
13.0% 13.0% 10.3% 10.3% 8.3% 6.3% 5.9% 5.9% 4.3% 4.3%
# of IPv6 addresses: 7927
Top 10 bandwidth usage (bytes/total in %):
54.8% 27.3% 17.0% 15.9% 11.3% 10.5% 8.3% 3.4% 3.2% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201305031400.pktlen.png)
detailed numbers
[ 32- 63]: 23846620
[ 64- 127]: 6529311
[ 128- 255]: 560691
[ 256- 511]: 669476
[ 512- 1023]: 721165
[ 1024- 2047]: 12146115
Protocol Breakdown
![[protocol breakdown chart]](201305031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 44473378 (100.00%) 20624170210 (100.00%) 463.74
ip 43079404 ( 96.87%) 19179128686 ( 92.99%) 445.20
tcp 19682563 ( 44.26%) 17206116808 ( 83.43%) 874.18
http(s) 10932655 ( 24.58%) 14578972636 ( 70.69%) 1333.53
http(c) 6646890 ( 14.95%) 1354644720 ( 6.57%) 203.80
squid 10567 ( 0.02%) 7522905 ( 0.04%) 711.92
smtp 81139 ( 0.18%) 15007151 ( 0.07%) 184.96
ftp 19816 ( 0.04%) 5091811 ( 0.02%) 256.95
pop3 2235 ( 0.01%) 577487 ( 0.00%) 258.38
imap 1860 ( 0.00%) 361044 ( 0.00%) 194.11
telnet 1286 ( 0.00%) 86261 ( 0.00%) 67.08
ssh 23588 ( 0.05%) 5088650 ( 0.02%) 215.73
dns 10577 ( 0.02%) 789286 ( 0.00%) 74.62
bgp 707 ( 0.00%) 291449 ( 0.00%) 412.23
napster 24 ( 0.00%) 2936 ( 0.00%) 122.33
realaud 64 ( 0.00%) 6188 ( 0.00%) 96.69
icecast 11749 ( 0.03%) 7971665 ( 0.04%) 678.50
hotline 21 ( 0.00%) 2394 ( 0.00%) 114.00
other 1939385 ( 4.36%) 1229700225 ( 5.96%) 634.07
udp 1533209 ( 3.45%) 463836247 ( 2.25%) 302.53
dns 795735 ( 1.79%) 224650082 ( 1.09%) 282.32
realaud 9 ( 0.00%) 838 ( 0.00%) 93.11
halflif 1575 ( 0.00%) 213724 ( 0.00%) 135.70
starcra 10 ( 0.00%) 842 ( 0.00%) 84.20
everque 160 ( 0.00%) 46915 ( 0.00%) 293.22
unreal 17 ( 0.00%) 2184 ( 0.00%) 128.47
quake 29 ( 0.00%) 2917 ( 0.00%) 100.59
cuseeme 5 ( 0.00%) 459 ( 0.00%) 91.80
other 735530 ( 1.65%) 238846013 ( 1.16%) 324.73
icmp 21631097 ( 48.64%) 1375285480 ( 6.67%) 63.58
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 4806 ( 0.01%) 2639152 ( 0.01%) 549.14
ip6 188295 ( 0.42%) 124277888 ( 0.60%) 660.02
other 39250 ( 0.09%) 6953951 ( 0.03%) 177.17
frag 49750 ( 0.11%) 58526050 ( 0.28%) 1176.40
ip6 1393974 ( 3.13%) 1445041524 ( 7.01%) 1036.63
tcp6 1278881 ( 2.88%) 1375990171 ( 6.67%) 1075.93
http(s) 1023996 ( 2.30%) 1351685393 ( 6.55%) 1320.01
http(c) 251103 ( 0.56%) 23303855 ( 0.11%) 92.81
smtp 119 ( 0.00%) 42258 ( 0.00%) 355.11
ftp 25 ( 0.00%) 2209 ( 0.00%) 88.36
ssh 70 ( 0.00%) 12262 ( 0.00%) 175.17
dns 160 ( 0.00%) 55433 ( 0.00%) 346.46
bgp 106 ( 0.00%) 29902 ( 0.00%) 282.09
other 3302 ( 0.01%) 858859 ( 0.00%) 260.10
udp6 50815 ( 0.11%) 16684372 ( 0.08%) 328.34
dns 50245 ( 0.11%) 16597363 ( 0.08%) 330.33
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
other 569 ( 0.00%) 86903 ( 0.00%) 152.73
icmp6 23220 ( 0.05%) 2794622 ( 0.01%) 120.35
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 41028 ( 0.09%) 49568279 ( 0.24%) 1208.16
tcpdump file: 201305031400.dump.gz (934.35 MB)