Traffic Trace Info
DumpFile: 201305051400.dump
FileSize: 2663.24MB
Id: 201305051400
StartTime: Sun May 5 14:00:00 2013
EndTime: Sun May 5 14:15:00 2013
TotalTime: 899.52 seconds
TotalCapSize: 2040.86MB CapLen: 96 bytes
# of packets: 40787983 (15939.58MB)
AvgRate: 148.65Mbps stddev:27.80M
IP flow (unique src/dst pair) Information
# of flows: 19844647 (avg. 2.06 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 4.9% 3.8% 3.6% 3.5% 3.5% 3.0% 2.2% 2.1% 1.8%
IP address Information
# of IPv4 addresses: 15729374
Top 10 bandwidth usage (bytes/total in %):
21.5% 9.2% 8.3% 7.4% 5.4% 5.1% 4.2% 4.0% 4.0% 3.7%
# of IPv6 addresses: 8001
Top 10 bandwidth usage (bytes/total in %):
16.1% 16.1% 14.7% 7.6% 7.5% 7.5% 6.4% 5.6% 4.6% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201305051400.pktlen.png)
detailed numbers
[ 32- 63]: 22701696
[ 64- 127]: 6759346
[ 128- 255]: 517023
[ 256- 511]: 705598
[ 512- 1023]: 684212
[ 1024- 2047]: 9420108
Protocol Breakdown
![[protocol breakdown chart]](201305051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40787983 (100.00%) 16713864335 (100.00%) 409.77
ip 39817814 ( 97.62%) 16066213262 ( 96.13%) 403.49
tcp 16686570 ( 40.91%) 14175219407 ( 84.81%) 849.50
http(s) 8209535 ( 20.13%) 10351588482 ( 61.93%) 1260.92
http(c) 5622739 ( 13.79%) 1857041775 ( 11.11%) 330.27
squid 59504 ( 0.15%) 10520554 ( 0.06%) 176.80
smtp 59893 ( 0.15%) 11200225 ( 0.07%) 187.00
ftp 13063 ( 0.03%) 3448586 ( 0.02%) 264.00
pop3 2071 ( 0.01%) 418492 ( 0.00%) 202.07
imap 2501 ( 0.01%) 333044 ( 0.00%) 133.16
telnet 1253 ( 0.00%) 83553 ( 0.00%) 66.68
ssh 552692 ( 1.36%) 639289344 ( 3.82%) 1156.68
dns 8715 ( 0.02%) 677283 ( 0.00%) 77.71
bgp 517 ( 0.00%) 114440 ( 0.00%) 221.35
napster 17 ( 0.00%) 1450 ( 0.00%) 85.29
realaud 24 ( 0.00%) 2810 ( 0.00%) 117.08
rtsp 10 ( 0.00%) 600 ( 0.00%) 60.00
icecast 417 ( 0.00%) 30545 ( 0.00%) 73.25
hotline 12 ( 0.00%) 1693 ( 0.00%) 141.08
other 2153607 ( 5.28%) 1300466531 ( 7.78%) 603.86
udp 1274676 ( 3.13%) 430863956 ( 2.58%) 338.02
dns 635952 ( 1.56%) 133213834 ( 0.80%) 209.47
realaud 11 ( 0.00%) 1569 ( 0.00%) 142.64
halflif 11 ( 0.00%) 1312 ( 0.00%) 119.27
starcra 14 ( 0.00%) 1799 ( 0.00%) 128.50
everque 64 ( 0.00%) 9435 ( 0.00%) 147.42
unreal 17 ( 0.00%) 1853 ( 0.00%) 109.00
quake 50 ( 0.00%) 22069 ( 0.00%) 441.38
cuseeme 4 ( 0.00%) 334 ( 0.00%) 83.50
other 638419 ( 1.57%) 297572848 ( 1.78%) 466.11
icmp 21646989 ( 53.07%) 1353414677 ( 8.10%) 62.52
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 8079 ( 0.02%) 3734198 ( 0.02%) 462.21
ip6 168415 ( 0.41%) 96305674 ( 0.58%) 571.84
other 32900 ( 0.08%) 6656080 ( 0.04%) 202.31
frag 66603 ( 0.16%) 91819067 ( 0.55%) 1378.60
ip6 970169 ( 2.38%) 647651073 ( 3.87%) 667.57
tcp6 896886 ( 2.20%) 626468189 ( 3.75%) 698.49
http(s) 437283 ( 1.07%) 576314899 ( 3.45%) 1317.94
http(c) 407516 ( 1.00%) 36239423 ( 0.22%) 88.93
smtp 90 ( 0.00%) 16715 ( 0.00%) 185.72
ftp 25 ( 0.00%) 2209 ( 0.00%) 88.36
ssh 87 ( 0.00%) 14012 ( 0.00%) 161.06
dns 311 ( 0.00%) 190666 ( 0.00%) 613.07
bgp 99 ( 0.00%) 23129 ( 0.00%) 233.63
other 51475 ( 0.13%) 13667136 ( 0.08%) 265.51
udp6 48004 ( 0.12%) 15438893 ( 0.09%) 321.62
dns 46766 ( 0.11%) 15203181 ( 0.09%) 325.09
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 2 ( 0.00%) 200 ( 0.00%) 100.00
cuseeme 1 ( 0.00%) 109 ( 0.00%) 109.00
other 1234 ( 0.00%) 235295 ( 0.00%) 190.68
icmp6 22327 ( 0.05%) 2663888 ( 0.02%) 119.31
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2921 ( 0.01%) 3075887 ( 0.02%) 1053.03
tcpdump file: 201305051400.dump.gz (849.36 MB)