Traffic Trace Info
DumpFile: 201305071400.dump
FileSize: 3945.00MB
Id: 201305071400
StartTime: Tue May 7 14:00:01 2013
EndTime: Tue May 7 14:15:00 2013
TotalTime: 899.72 seconds
TotalCapSize: -1046.60MB CapLen: 96 bytes
# of packets: 58693455 (31785.40MB)
AvgRate: 296.29Mbps stddev:54.82M
IP flow (unique src/dst pair) Information
# of flows: 20681776 (avg. 2.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.5% 1.9% 1.7% 1.6% 1.5% 1.5% 0.9% 0.8% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 16407191
Top 10 bandwidth usage (bytes/total in %):
15.4% 15.4% 8.4% 8.1% 6.6% 6.2% 3.8% 2.2% 2.1% 1.9%
# of IPv6 addresses: 11648
Top 10 bandwidth usage (bytes/total in %):
10.7% 10.5% 10.1% 9.9% 8.5% 4.4% 2.5% 2.1% 2.1% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201305071400.pktlen.png)
detailed numbers
[ 32- 63]: 25403217
[ 64- 127]: 9841965
[ 128- 255]: 1039057
[ 256- 511]: 1296913
[ 512- 1023]: 1122992
[ 1024- 2047]: 19989311
Protocol Breakdown
![[protocol breakdown chart]](201305071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 58693455 (100.00%) 33329402861 (100.00%) 567.86
ip 56379944 ( 96.06%) 31411301981 ( 94.25%) 557.14
tcp 31786586 ( 54.16%) 29105190149 ( 87.33%) 915.64
http(s) 17902531 ( 30.50%) 23051824679 ( 69.16%) 1287.63
http(c) 10512069 ( 17.91%) 4200480264 ( 12.60%) 399.59
squid 27433 ( 0.05%) 19159280 ( 0.06%) 698.40
smtp 126501 ( 0.22%) 51791996 ( 0.16%) 409.42
nntp 9 ( 0.00%) 540 ( 0.00%) 60.00
ftp 23533 ( 0.04%) 4129005 ( 0.01%) 175.46
pop3 8497 ( 0.01%) 2872027 ( 0.01%) 338.00
imap 2561 ( 0.00%) 574733 ( 0.00%) 224.42
telnet 4337 ( 0.01%) 299495 ( 0.00%) 69.06
ssh 919898 ( 1.57%) 139214143 ( 0.42%) 151.34
dns 8131 ( 0.01%) 647380 ( 0.00%) 79.62
bgp 521 ( 0.00%) 110262 ( 0.00%) 211.64
napster 19 ( 0.00%) 1903 ( 0.00%) 100.16
realaud 78 ( 0.00%) 5822 ( 0.00%) 74.64
rtsp 4150 ( 0.01%) 5869087 ( 0.02%) 1414.24
icecast 50871 ( 0.09%) 47878622 ( 0.14%) 941.18
hotline 7 ( 0.00%) 859 ( 0.00%) 122.71
other 2195440 ( 3.74%) 1580330052 ( 4.74%) 719.82
udp 2376597 ( 4.05%) 764920889 ( 2.30%) 321.86
dns 952824 ( 1.62%) 200570313 ( 0.60%) 210.50
rip 2 ( 0.00%) 182 ( 0.00%) 91.00
realaud 12 ( 0.00%) 1049 ( 0.00%) 87.42
halflif 13 ( 0.00%) 2308 ( 0.00%) 177.54
starcra 14 ( 0.00%) 2583 ( 0.00%) 184.50
everque 11133 ( 0.02%) 10679042 ( 0.03%) 959.22
unreal 26504 ( 0.05%) 37753216 ( 0.11%) 1424.43
quake 13 ( 0.00%) 1197 ( 0.00%) 92.08
cuseeme 1 ( 0.00%) 87 ( 0.00%) 87.00
other 1385951 ( 2.36%) 515826424 ( 1.55%) 372.18
icmp 21773545 ( 37.10%) 1364111259 ( 4.09%) 62.65
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 31764 ( 0.05%) 11715416 ( 0.04%) 368.83
ip6 378194 ( 0.64%) 159341599 ( 0.48%) 421.32
other 33073 ( 0.06%) 6003399 ( 0.02%) 181.52
frag 124701 ( 0.21%) 176323993 ( 0.53%) 1413.97
ip6 2313511 ( 3.94%) 1918100880 ( 5.75%) 829.09
tcp6 2173021 ( 3.70%) 1865185997 ( 5.60%) 858.34
http(s) 1569970 ( 2.67%) 1772114570 ( 5.32%) 1128.76
http(c) 414413 ( 0.71%) 42629470 ( 0.13%) 102.87
smtp 300 ( 0.00%) 94037 ( 0.00%) 313.46
ftp 26 ( 0.00%) 2327 ( 0.00%) 89.50
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 299 ( 0.00%) 115806 ( 0.00%) 387.31
bgp 97 ( 0.00%) 22359 ( 0.00%) 230.51
other 187844 ( 0.32%) 50194978 ( 0.15%) 267.22
udp6 86028 ( 0.15%) 28318741 ( 0.08%) 329.18
dns 84540 ( 0.14%) 27697179 ( 0.08%) 327.62
halflif 3 ( 0.00%) 317 ( 0.00%) 105.67
quake 1 ( 0.00%) 134 ( 0.00%) 134.00
other 1484 ( 0.00%) 621111 ( 0.00%) 418.54
icmp6 36160 ( 0.06%) 4208582 ( 0.01%) 116.39
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 18272 ( 0.03%) 20383480 ( 0.06%) 1115.56
tcpdump file: 201305071400.dump.gz (1306.99 MB)