Traffic Trace Info
DumpFile: 201305061400.dump
FileSize: 2847.83MB
Id: 201305061400
StartTime: Mon May 6 14:00:00 2013
EndTime: Mon May 6 14:15:01 2013
TotalTime: 900.54 seconds
TotalCapSize: -1913.30MB CapLen: 96 bytes
# of packets: 43589186 (17495.67MB)
AvgRate: 162.98Mbps stddev:25.88M
IP flow (unique src/dst pair) Information
# of flows: 20004243 (avg. 2.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 4.3% 4.0% 2.4% 1.7% 1.4% 1.4% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 15891240
Top 10 bandwidth usage (bytes/total in %):
16.8% 9.5% 6.4% 5.2% 5.0% 4.5% 4.2% 4.2% 3.8% 2.6%
# of IPv6 addresses: 8758
Top 10 bandwidth usage (bytes/total in %):
26.4% 14.7% 13.5% 8.6% 8.6% 6.2% 4.5% 4.2% 3.6% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201305061400.pktlen.png)
detailed numbers
[ 32- 63]: 22880229
[ 64- 127]: 8110061
[ 128- 255]: 731910
[ 256- 511]: 717295
[ 512- 1023]: 765851
[ 1024- 2047]: 10383840
Protocol Breakdown
![[protocol breakdown chart]](201305061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 43589186 (100.00%) 18345538404 (100.00%) 420.87
ip 42835651 ( 98.27%) 17712885520 ( 96.55%) 413.51
tcp 18147589 ( 41.63%) 15017528307 ( 81.86%) 827.52
http(s) 8167069 ( 18.74%) 10527468933 ( 57.38%) 1289.01
http(c) 5613626 ( 12.88%) 891561776 ( 4.86%) 158.82
squid 47536 ( 0.11%) 7505257 ( 0.04%) 157.89
smtp 61701 ( 0.14%) 9429217 ( 0.05%) 152.82
ftp 18970 ( 0.04%) 3899078 ( 0.02%) 205.54
pop3 2807 ( 0.01%) 1101996 ( 0.01%) 392.59
imap 1861 ( 0.00%) 223933 ( 0.00%) 120.33
telnet 1240 ( 0.00%) 84117 ( 0.00%) 67.84
ssh 25978 ( 0.06%) 5773833 ( 0.03%) 222.26
dns 13480 ( 0.03%) 981413 ( 0.01%) 72.81
bgp 527 ( 0.00%) 118064 ( 0.00%) 224.03
napster 15 ( 0.00%) 1490 ( 0.00%) 99.33
rtsp 2 ( 0.00%) 122 ( 0.00%) 61.00
icecast 268561 ( 0.62%) 372877760 ( 2.03%) 1388.43
hotline 1 ( 0.00%) 74 ( 0.00%) 74.00
other 3924215 ( 9.00%) 3196501244 ( 17.42%) 814.56
udp 2858264 ( 6.56%) 1080954624 ( 5.89%) 378.19
dns 1367039 ( 3.14%) 242832117 ( 1.32%) 177.63
realaud 18 ( 0.00%) 1659 ( 0.00%) 92.17
halflif 36 ( 0.00%) 4011 ( 0.00%) 111.42
starcra 19 ( 0.00%) 4586 ( 0.00%) 241.37
everque 60 ( 0.00%) 8581 ( 0.00%) 143.02
unreal 10 ( 0.00%) 1235 ( 0.00%) 123.50
quake 44 ( 0.00%) 4435 ( 0.00%) 100.80
cuseeme 7 ( 0.00%) 598 ( 0.00%) 85.43
other 1490859 ( 3.42%) 838040276 ( 4.57%) 562.12
icmp 21515704 ( 49.36%) 1377713076 ( 7.51%) 64.03
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 9475 ( 0.02%) 4009886 ( 0.02%) 423.21
ip6 269645 ( 0.62%) 225228005 ( 1.23%) 835.28
other 34789 ( 0.08%) 7432352 ( 0.04%) 213.64
frag 32776 ( 0.08%) 40960276 ( 0.22%) 1249.70
ip6 753535 ( 1.73%) 632652884 ( 3.45%) 839.58
tcp6 669079 ( 1.53%) 611532878 ( 3.33%) 913.99
http(s) 478886 ( 1.10%) 583439580 ( 3.18%) 1218.33
http(c) 169963 ( 0.39%) 17569196 ( 0.10%) 103.37
smtp 145 ( 0.00%) 55673 ( 0.00%) 383.95
ftp 25 ( 0.00%) 2265 ( 0.00%) 90.60
ssh 76 ( 0.00%) 12851 ( 0.00%) 169.09
dns 203 ( 0.00%) 109443 ( 0.00%) 539.13
bgp 94 ( 0.00%) 22493 ( 0.00%) 239.29
other 19687 ( 0.05%) 10321377 ( 0.06%) 524.27
udp6 54843 ( 0.13%) 16904025 ( 0.09%) 308.23
dns 53797 ( 0.12%) 16689178 ( 0.09%) 310.23
halflif 1 ( 0.00%) 103 ( 0.00%) 103.00
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 2 ( 0.00%) 207 ( 0.00%) 103.50
other 1042 ( 0.00%) 214430 ( 0.00%) 205.79
icmp6 28830 ( 0.07%) 3441657 ( 0.02%) 119.38
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 752 ( 0.00%) 770108 ( 0.00%) 1024.08
tcpdump file: 201305061400.dump.gz (947.69 MB)