Traffic Trace Info
DumpFile: 201305111400.dump
FileSize: 3403.32MB
Id: 201305111400
StartTime: Sat May 11 14:00:01 2013
EndTime: Sat May 11 14:15:00 2013
TotalTime: 899.68 seconds
TotalCapSize: -1461.02MB CapLen: 96 bytes
# of packets: 50353420 (25468.20MB)
AvgRate: 237.47Mbps stddev:43.21M
IP flow (unique src/dst pair) Information
# of flows: 19870667 (avg. 2.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 2.0% 1.9% 1.7% 1.5% 1.4% 1.3% 1.3% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 15813512
Top 10 bandwidth usage (bytes/total in %):
12.8% 9.5% 5.3% 4.4% 4.2% 2.9% 2.9% 2.6% 2.4% 2.4%
# of IPv6 addresses: 8398
Top 10 bandwidth usage (bytes/total in %):
45.3% 45.3% 14.7% 7.6% 6.3% 6.1% 5.1% 4.1% 4.0% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201305111400.pktlen.png)
detailed numbers
[ 32- 63]: 23409971
[ 64- 127]: 8473126
[ 128- 255]: 873661
[ 256- 511]: 849253
[ 512- 1023]: 848239
[ 1024- 2047]: 15899170
Protocol Breakdown
![[protocol breakdown chart]](201305111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 50353420 (100.00%) 26705338572 (100.00%) 530.36
ip 46891261 ( 93.12%) 22901847328 ( 85.76%) 488.40
tcp 21960099 ( 43.61%) 20698146558 ( 77.51%) 942.53
http(s) 12932365 ( 25.68%) 17065672244 ( 63.90%) 1319.61
http(c) 7136104 ( 14.17%) 2558508098 ( 9.58%) 358.53
squid 65555 ( 0.13%) 7179923 ( 0.03%) 109.53
smtp 59811 ( 0.12%) 10942893 ( 0.04%) 182.96
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 17126 ( 0.03%) 3791789 ( 0.01%) 221.41
pop3 3626 ( 0.01%) 709946 ( 0.00%) 195.79
imap 19465 ( 0.04%) 18044109 ( 0.07%) 927.00
telnet 1205 ( 0.00%) 81513 ( 0.00%) 67.65
ssh 63373 ( 0.13%) 21349920 ( 0.08%) 336.89
dns 9881 ( 0.02%) 752959 ( 0.00%) 76.20
bgp 517 ( 0.00%) 106499 ( 0.00%) 205.99
napster 4 ( 0.00%) 244 ( 0.00%) 61.00
realaud 150 ( 0.00%) 23283 ( 0.00%) 155.22
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 896 ( 0.00%) 72306 ( 0.00%) 80.70
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 1650018 ( 3.28%) 1010910652 ( 3.79%) 612.67
udp 1865104 ( 3.70%) 589767813 ( 2.21%) 316.21
dns 1038653 ( 2.06%) 218117737 ( 0.82%) 210.00
realaud 24 ( 0.00%) 2448 ( 0.00%) 102.00
halflif 45 ( 0.00%) 3965 ( 0.00%) 88.11
starcra 30 ( 0.00%) 2519 ( 0.00%) 83.97
everque 94 ( 0.00%) 11858 ( 0.00%) 126.15
unreal 9 ( 0.00%) 853 ( 0.00%) 94.78
quake 49 ( 0.00%) 4956 ( 0.00%) 101.14
cuseeme 22 ( 0.00%) 1734 ( 0.00%) 78.82
other 823451 ( 1.64%) 368092255 ( 1.38%) 447.01
icmp 22048359 ( 43.79%) 1389150723 ( 5.20%) 63.00
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 30359 ( 0.06%) 9853502 ( 0.04%) 324.57
ip6 954006 ( 1.89%) 208488238 ( 0.78%) 218.54
other 33149 ( 0.07%) 6421224 ( 0.02%) 193.71
frag 108083 ( 0.21%) 141642517 ( 0.53%) 1310.50
ip6 3462159 ( 6.88%) 3803491244 ( 14.24%) 1098.59
tcp6 3375238 ( 6.70%) 3779336502 ( 14.15%) 1119.72
http(s) 1462690 ( 2.90%) 2012090631 ( 7.53%) 1375.61
http(c) 391437 ( 0.78%) 34857321 ( 0.13%) 89.05
squid 39 ( 0.00%) 4196 ( 0.00%) 107.59
smtp 58 ( 0.00%) 24286 ( 0.00%) 418.72
ftp 69 ( 0.00%) 6479 ( 0.00%) 93.90
ssh 1481807 ( 2.94%) 1721261432 ( 6.45%) 1161.60
dns 120 ( 0.00%) 35808 ( 0.00%) 298.40
bgp 111 ( 0.00%) 23147 ( 0.00%) 208.53
other 38907 ( 0.08%) 11033202 ( 0.04%) 283.58
udp6 57007 ( 0.11%) 18596430 ( 0.07%) 326.21
dns 56396 ( 0.11%) 18511956 ( 0.07%) 328.25
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
starcra 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 1 ( 0.00%) 115 ( 0.00%) 115.00
other 608 ( 0.00%) 84146 ( 0.00%) 138.40
icmp6 27590 ( 0.05%) 3291153 ( 0.01%) 119.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2294 ( 0.00%) 2263079 ( 0.01%) 986.52
tcpdump file: 201305111400.dump.gz (1034.57 MB)