Traffic Trace Info
DumpFile: 201305041400.dump
FileSize: 2427.26MB
Id: 201305041400
StartTime: Sat May 4 14:00:01 2013
EndTime: Sat May 4 14:15:00 2013
TotalTime: 899.58 seconds
TotalCapSize: 1848.52MB CapLen: 96 bytes
# of packets: 37927905 (12703.51MB)
AvgRate: 118.47Mbps stddev:24.45M
IP flow (unique src/dst pair) Information
# of flows: 20547416 (avg. 1.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 3.7% 3.7% 3.4% 2.8% 2.5% 1.6% 1.5% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 16127300
Top 10 bandwidth usage (bytes/total in %):
16.0% 9.3% 9.2% 6.1% 4.8% 4.1% 3.9% 3.8% 3.8% 3.7%
# of IPv6 addresses: 8094
Top 10 bandwidth usage (bytes/total in %):
38.6% 22.2% 9.4% 6.8% 6.8% 6.1% 5.7% 4.7% 4.2% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201305041400.pktlen.png)
detailed numbers
[ 32- 63]: 23182245
[ 64- 127]: 5727767
[ 128- 255]: 551196
[ 256- 511]: 594731
[ 512- 1023]: 559597
[ 1024- 2047]: 7312369
Protocol Breakdown
![[protocol breakdown chart]](201305041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37927905 (100.00%) 13320600463 (100.00%) 351.21
ip 37080326 ( 97.77%) 12862703911 ( 96.56%) 346.89
tcp 13517065 ( 35.64%) 10863383861 ( 81.55%) 803.68
http(s) 5887706 ( 15.52%) 7296836886 ( 54.78%) 1239.33
http(c) 4553483 ( 12.01%) 1055611195 ( 7.92%) 231.82
squid 208803 ( 0.55%) 225676915 ( 1.69%) 1080.81
smtp 76032 ( 0.20%) 16055510 ( 0.12%) 211.17
nntp 4 ( 0.00%) 240 ( 0.00%) 60.00
ftp 16296 ( 0.04%) 3616981 ( 0.03%) 221.96
pop3 2180 ( 0.01%) 578646 ( 0.00%) 265.43
imap 3599 ( 0.01%) 943888 ( 0.01%) 262.26
telnet 1795 ( 0.00%) 123172 ( 0.00%) 68.62
ssh 402317 ( 1.06%) 497972315 ( 3.74%) 1237.76
dns 11062 ( 0.03%) 827588 ( 0.01%) 74.81
bgp 537 ( 0.00%) 127821 ( 0.00%) 238.03
napster 16 ( 0.00%) 1020 ( 0.00%) 63.75
realaud 11 ( 0.00%) 1126 ( 0.00%) 102.36
rtsp 6067 ( 0.02%) 4091906 ( 0.03%) 674.45
icecast 251122 ( 0.66%) 377673919 ( 2.84%) 1503.95
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 2096034 ( 5.53%) 1383244673 ( 10.38%) 659.93
udp 1644311 ( 4.34%) 490290958 ( 3.68%) 298.17
dns 722080 ( 1.90%) 168403961 ( 1.26%) 233.22
rip 1 ( 0.00%) 1030 ( 0.00%) 1030.00
realaud 895 ( 0.00%) 53899 ( 0.00%) 60.22
halflif 4716 ( 0.01%) 5540031 ( 0.04%) 1174.73
starcra 81 ( 0.00%) 7284 ( 0.00%) 89.93
everque 60 ( 0.00%) 9317 ( 0.00%) 155.28
unreal 41 ( 0.00%) 6846 ( 0.00%) 166.98
quake 24 ( 0.00%) 1989 ( 0.00%) 82.88
cuseeme 10 ( 0.00%) 753 ( 0.00%) 75.30
other 916295 ( 2.42%) 316199780 ( 2.37%) 345.09
icmp 21635416 ( 57.04%) 1348158070 ( 10.12%) 62.31
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 57696 ( 0.15%) 77469848 ( 0.58%) 1342.72
ip6 187020 ( 0.49%) 76494563 ( 0.57%) 409.02
other 38634 ( 0.10%) 6887451 ( 0.05%) 178.27
frag 58923 ( 0.16%) 67304055 ( 0.51%) 1142.24
ip6 847579 ( 2.23%) 457896552 ( 3.44%) 540.24
tcp6 765910 ( 2.02%) 436737709 ( 3.28%) 570.22
http(s) 257962 ( 0.68%) 296933366 ( 2.23%) 1151.07
http(c) 422547 ( 1.11%) 37390929 ( 0.28%) 88.49
smtp 287 ( 0.00%) 179205 ( 0.00%) 624.41
ftp 65 ( 0.00%) 7775 ( 0.00%) 119.62
ssh 70 ( 0.00%) 12262 ( 0.00%) 175.17
dns 134 ( 0.00%) 40925 ( 0.00%) 305.41
bgp 92 ( 0.00%) 17081 ( 0.00%) 185.66
other 84753 ( 0.22%) 102156166 ( 0.77%) 1205.34
udp6 52560 ( 0.14%) 16870004 ( 0.13%) 320.97
dns 50980 ( 0.13%) 16135910 ( 0.12%) 316.51
everque 1 ( 0.00%) 119 ( 0.00%) 119.00
other 1579 ( 0.00%) 733975 ( 0.01%) 464.84
icmp6 28195 ( 0.07%) 3420960 ( 0.03%) 121.33
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 884 ( 0.00%) 863799 ( 0.01%) 977.15
tcpdump file: 201305041400.dump.gz (794.48 MB)