Traffic Trace Info
DumpFile: 201305081400.dump
FileSize: 3576.17MB
Id: 201305081400
StartTime: Wed May 8 14:00:01 2013
EndTime: Wed May 8 14:15:01 2013
TotalTime: 900.08 seconds
TotalCapSize: -1329.73MB CapLen: 96 bytes
# of packets: 53077415 (25706.96MB)
AvgRate: 239.59Mbps stddev:37.41M
IP flow (unique src/dst pair) Information
# of flows: 20706207 (avg. 2.56 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 2.9% 1.8% 1.6% 1.1% 1.1% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 16391178
Top 10 bandwidth usage (bytes/total in %):
9.7% 8.7% 6.1% 5.1% 4.9% 4.7% 4.1% 3.1% 3.1% 3.1%
# of IPv6 addresses: 11135
Top 10 bandwidth usage (bytes/total in %):
14.3% 11.8% 4.0% 4.0% 3.0% 3.0% 2.8% 2.8% 2.8% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201305081400.pktlen.png)
detailed numbers
[ 32- 63]: 24383176
[ 64- 127]: 9813597
[ 128- 255]: 965218
[ 256- 511]: 1107802
[ 512- 1023]: 970435
[ 1024- 2047]: 15837187
Protocol Breakdown
![[protocol breakdown chart]](201305081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 53077415 (100.00%) 26955702695 (100.00%) 507.86
ip 50995075 ( 96.08%) 25069693251 ( 93.00%) 491.61
tcp 26337445 ( 49.62%) 22680179129 ( 84.14%) 861.14
http(s) 14831399 ( 27.94%) 18921661395 ( 70.20%) 1275.78
http(c) 9160909 ( 17.26%) 2744371997 ( 10.18%) 299.57
squid 33397 ( 0.06%) 4996504 ( 0.02%) 149.61
smtp 90351 ( 0.17%) 24584236 ( 0.09%) 272.10
nntp 11 ( 0.00%) 730 ( 0.00%) 66.36
ftp 54596 ( 0.10%) 63421330 ( 0.24%) 1161.65
pop3 4945 ( 0.01%) 2066935 ( 0.01%) 417.98
imap 6223 ( 0.01%) 2903513 ( 0.01%) 466.58
telnet 2115 ( 0.00%) 145815 ( 0.00%) 68.94
ssh 299893 ( 0.57%) 42664253 ( 0.16%) 142.26
dns 13565 ( 0.03%) 2059111 ( 0.01%) 151.80
bgp 543 ( 0.00%) 124117 ( 0.00%) 228.58
napster 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 255 ( 0.00%) 26216 ( 0.00%) 102.81
rtsp 2174 ( 0.00%) 2070772 ( 0.01%) 952.52
icecast 45814 ( 0.09%) 42415396 ( 0.16%) 925.82
hotline 4 ( 0.00%) 246 ( 0.00%) 61.50
other 1791250 ( 3.37%) 826666503 ( 3.07%) 461.50
udp 2235197 ( 4.21%) 804070509 ( 2.98%) 359.73
dns 1083018 ( 2.04%) 282969025 ( 1.05%) 261.28
rip 9 ( 0.00%) 630 ( 0.00%) 70.00
realaud 15 ( 0.00%) 1479 ( 0.00%) 98.60
halflif 32 ( 0.00%) 3449 ( 0.00%) 107.78
starcra 10 ( 0.00%) 968 ( 0.00%) 96.80
everque 96 ( 0.00%) 15722 ( 0.00%) 163.77
unreal 100 ( 0.00%) 14152 ( 0.00%) 141.52
quake 53 ( 0.00%) 7232 ( 0.00%) 136.45
cuseeme 10 ( 0.00%) 1233 ( 0.00%) 123.30
other 1151661 ( 2.17%) 520950443 ( 1.93%) 452.35
icmp 21882812 ( 41.23%) 1369621148 ( 5.08%) 62.59
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 93149 ( 0.18%) 67630950 ( 0.25%) 726.05
ip6 413471 ( 0.78%) 141860134 ( 0.53%) 343.10
other 32816 ( 0.06%) 6312111 ( 0.02%) 192.35
frag 89646 ( 0.17%) 112380961 ( 0.42%) 1253.61
ip6 2082340 ( 3.92%) 1886009444 ( 7.00%) 905.72
tcp6 1960490 ( 3.69%) 1849281279 ( 6.86%) 943.28
http(s) 1567020 ( 2.95%) 1738900309 ( 6.45%) 1109.69
http(c) 256607 ( 0.48%) 26884617 ( 0.10%) 104.77
smtp 249 ( 0.00%) 129879 ( 0.00%) 521.60
ftp 177 ( 0.00%) 18010 ( 0.00%) 101.75
ssh 6908 ( 0.01%) 7345572 ( 0.03%) 1063.34
dns 414 ( 0.00%) 150809 ( 0.00%) 364.27
bgp 99 ( 0.00%) 24919 ( 0.00%) 251.71
other 129016 ( 0.24%) 75827164 ( 0.28%) 587.73
udp6 85972 ( 0.16%) 27542523 ( 0.10%) 320.37
dns 85651 ( 0.16%) 27498312 ( 0.10%) 321.05
starcra 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 1 ( 0.00%) 113 ( 0.00%) 113.00
other 318 ( 0.00%) 43885 ( 0.00%) 138.00
icmp6 30545 ( 0.06%) 3680848 ( 0.01%) 120.51
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 5302 ( 0.01%) 5500578 ( 0.02%) 1037.45
tcpdump file: 201305081400.dump.gz (1171.32 MB)