Traffic Trace Info
DumpFile: 201305091400.dump
FileSize: 4028.88MB
Id: 201305091400
StartTime: Thu May 9 14:00:01 2013
EndTime: Thu May 9 14:15:01 2013
TotalTime: 900.31 seconds
TotalCapSize: -960.91MB CapLen: 96 bytes
# of packets: 58574909 (29578.81MB)
AvgRate: 275.59Mbps stddev:40.15M
IP flow (unique src/dst pair) Information
# of flows: 19312530 (avg. 3.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.9% 3.4% 2.2% 2.0% 1.7% 1.5% 1.4% 1.2% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 15393308
Top 10 bandwidth usage (bytes/total in %):
10.0% 8.9% 8.6% 6.4% 5.2% 4.0% 3.8% 3.6% 3.2% 3.1%
# of IPv6 addresses: 11647
Top 10 bandwidth usage (bytes/total in %):
21.4% 18.7% 10.9% 7.6% 6.1% 5.7% 3.0% 2.9% 2.8% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201305091400.pktlen.png)
detailed numbers
[ 32- 63]: 25001360
[ 64- 127]: 11318724
[ 128- 255]: 1294244
[ 256- 511]: 1394952
[ 512- 1023]: 1514580
[ 1024- 2047]: 18051049
Protocol Breakdown
![[protocol breakdown chart]](201305091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 58574909 (100.00%) 31015629392 (100.00%) 529.50
ip 55036743 ( 93.96%) 28745462567 ( 92.68%) 522.30
tcp 30782902 ( 52.55%) 26169968295 ( 84.38%) 850.15
http(s) 16535628 ( 28.23%) 21040256920 ( 67.84%) 1272.42
http(c) 9166331 ( 15.65%) 2747730062 ( 8.86%) 299.76
squid 19679 ( 0.03%) 11220666 ( 0.04%) 570.18
smtp 72747 ( 0.12%) 16213747 ( 0.05%) 222.88
nntp 16 ( 0.00%) 960 ( 0.00%) 60.00
ftp 26489 ( 0.05%) 4264092 ( 0.01%) 160.98
pop3 4602 ( 0.01%) 927538 ( 0.00%) 201.55
imap 3696 ( 0.01%) 879689 ( 0.00%) 238.01
telnet 2277 ( 0.00%) 145825 ( 0.00%) 64.04
ssh 1893075 ( 3.23%) 325571550 ( 1.05%) 171.98
dns 13320 ( 0.02%) 986285 ( 0.00%) 74.05
bgp 531 ( 0.00%) 116885 ( 0.00%) 220.12
napster 20 ( 0.00%) 2456 ( 0.00%) 122.80
realaud 97 ( 0.00%) 12958 ( 0.00%) 133.59
rtsp 44221 ( 0.08%) 61789515 ( 0.20%) 1397.29
icecast 22292 ( 0.04%) 12243507 ( 0.04%) 549.23
hotline 3 ( 0.00%) 186 ( 0.00%) 62.00
other 2977770 ( 5.08%) 1947598974 ( 6.28%) 654.05
udp 2159769 ( 3.69%) 501041029 ( 1.62%) 231.99
dns 1274842 ( 2.18%) 236550310 ( 0.76%) 185.55
rip 26 ( 0.00%) 1764 ( 0.00%) 67.85
realaud 21 ( 0.00%) 2011 ( 0.00%) 95.76
halflif 34 ( 0.00%) 3269 ( 0.00%) 96.15
starcra 31 ( 0.00%) 3060 ( 0.00%) 98.71
everque 152 ( 0.00%) 25990 ( 0.00%) 170.99
unreal 9 ( 0.00%) 903 ( 0.00%) 100.33
quake 75 ( 0.00%) 8485 ( 0.00%) 113.13
cuseeme 13 ( 0.00%) 1946 ( 0.00%) 149.69
other 884431 ( 1.51%) 264348759 ( 0.85%) 298.89
icmp 21186335 ( 36.17%) 1354735945 ( 4.37%) 63.94
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 27081 ( 0.05%) 8625974 ( 0.03%) 318.52
ip6 837356 ( 1.43%) 703348855 ( 2.27%) 839.96
other 43115 ( 0.07%) 7723199 ( 0.02%) 179.13
frag 37304 ( 0.06%) 54510651 ( 0.18%) 1461.25
ip6 3538166 ( 6.04%) 2270166825 ( 7.32%) 641.62
tcp6 3294479 ( 5.62%) 2096685410 ( 6.76%) 636.42
http(s) 1584256 ( 2.70%) 1880371212 ( 6.06%) 1186.91
http(c) 1607878 ( 2.74%) 140165781 ( 0.45%) 87.17
smtp 254 ( 0.00%) 69406 ( 0.00%) 273.25
ftp 227 ( 0.00%) 23263 ( 0.00%) 102.48
ssh 5852 ( 0.01%) 8194446 ( 0.03%) 1400.28
dns 309 ( 0.00%) 107913 ( 0.00%) 349.23
bgp 95 ( 0.00%) 19772 ( 0.00%) 208.13
other 95608 ( 0.16%) 67733617 ( 0.22%) 708.45
udp6 84700 ( 0.14%) 28662822 ( 0.09%) 338.40
dns 83264 ( 0.14%) 28434647 ( 0.09%) 341.50
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
other 1435 ( 0.00%) 228068 ( 0.00%) 158.93
icmp6 40220 ( 0.07%) 4670246 ( 0.02%) 116.12
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 118737 ( 0.20%) 140144267 ( 0.45%) 1180.29
tcpdump file: 201305091400.dump.gz (1308.05 MB)