Traffic Trace Info
DumpFile: 201305121400.dump
FileSize: 3000.10MB
Id: 201305121400
StartTime: Sun May 12 14:00:01 2013
EndTime: Sun May 12 14:15:00 2013
TotalTime: 899.00 seconds
TotalCapSize: -1782.25MB CapLen: 96 bytes
# of packets: 44979931 (21263.45MB)
AvgRate: 198.44Mbps stddev:33.21M
IP flow (unique src/dst pair) Information
# of flows: 20097594 (avg. 2.24 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.3% 3.5% 2.3% 2.3% 1.8% 1.8% 1.8% 1.6% 1.6% 1.2%
IP address Information
# of IPv4 addresses: 16029355
Top 10 bandwidth usage (bytes/total in %):
13.6% 7.8% 6.4% 6.4% 6.1% 4.6% 4.3% 3.3% 3.1% 2.8%
# of IPv6 addresses: 7467
Top 10 bandwidth usage (bytes/total in %):
76.2% 74.3% 4.7% 3.6% 2.6% 2.6% 1.9% 1.7% 1.3% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201305121400.pktlen.png)
detailed numbers
[ 32- 63]: 22845013
[ 64- 127]: 7069483
[ 128- 255]: 811705
[ 256- 511]: 409603
[ 512- 1023]: 519648
[ 1024- 2047]: 13324479
Protocol Breakdown
![[protocol breakdown chart]](201305121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 44979931 (100.00%) 22296339892 (100.00%) 495.70
ip 42259469 ( 93.95%) 18603925809 ( 83.44%) 440.23
tcp 17416009 ( 38.72%) 15789973155 ( 70.82%) 906.64
http(s) 9372430 ( 20.84%) 12640868596 ( 56.69%) 1348.73
http(c) 4786404 ( 10.64%) 1421086240 ( 6.37%) 296.90
squid 6858 ( 0.02%) 2883832 ( 0.01%) 420.51
smtp 56689 ( 0.13%) 10606539 ( 0.05%) 187.10
ftp 50815 ( 0.11%) 6903058 ( 0.03%) 135.85
pop3 5363 ( 0.01%) 899324 ( 0.00%) 167.69
imap 2485 ( 0.01%) 1485282 ( 0.01%) 597.70
telnet 1472 ( 0.00%) 103081 ( 0.00%) 70.03
ssh 757080 ( 1.68%) 120870525 ( 0.54%) 159.65
dns 10490 ( 0.02%) 1856023 ( 0.01%) 176.93
bgp 493 ( 0.00%) 81374 ( 0.00%) 165.06
napster 5 ( 0.00%) 304 ( 0.00%) 60.80
realaud 89 ( 0.00%) 9679 ( 0.00%) 108.75
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 11296 ( 0.03%) 9276712 ( 0.04%) 821.24
hotline 2 ( 0.00%) 156 ( 0.00%) 78.00
other 2354035 ( 5.23%) 1573042250 ( 7.06%) 668.23
udp 2304368 ( 5.12%) 1101073986 ( 4.94%) 477.82
dns 720644 ( 1.60%) 125098044 ( 0.56%) 173.59
rip 9 ( 0.00%) 596 ( 0.00%) 66.22
realaud 21 ( 0.00%) 1648 ( 0.00%) 78.48
halflif 38 ( 0.00%) 3838 ( 0.00%) 101.00
starcra 19 ( 0.00%) 1673 ( 0.00%) 88.05
everque 67 ( 0.00%) 9565 ( 0.00%) 142.76
unreal 3 ( 0.00%) 288 ( 0.00%) 96.00
quake 18 ( 0.00%) 2326 ( 0.00%) 129.22
cuseeme 3 ( 0.00%) 287 ( 0.00%) 95.67
other 1583471 ( 3.52%) 975901949 ( 4.38%) 616.31
icmp 21302721 ( 47.36%) 1359582792 ( 6.10%) 63.82
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 67685 ( 0.15%) 75460562 ( 0.34%) 1114.88
ip6 1133936 ( 2.52%) 270609769 ( 1.21%) 238.65
other 34565 ( 0.08%) 7206275 ( 0.03%) 208.48
frag 22079 ( 0.05%) 24936425 ( 0.11%) 1129.42
ip6 2720462 ( 6.05%) 3692414083 ( 16.56%) 1357.27
tcp6 2645603 ( 5.88%) 3672852929 ( 16.47%) 1388.29
http(s) 647228 ( 1.44%) 872726421 ( 3.91%) 1348.41
http(c) 142701 ( 0.32%) 13211140 ( 0.06%) 92.58
smtp 123 ( 0.00%) 87261 ( 0.00%) 709.44
ftp 25 ( 0.00%) 2209 ( 0.00%) 88.36
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 191 ( 0.00%) 52178 ( 0.00%) 273.18
bgp 94 ( 0.00%) 18570 ( 0.00%) 197.55
other 1855169 ( 4.12%) 2786742700 ( 12.50%) 1502.15
udp6 47253 ( 0.11%) 15738133 ( 0.07%) 333.06
dns 46756 ( 0.10%) 15666585 ( 0.07%) 335.07
halflif 1 ( 0.00%) 113 ( 0.00%) 113.00
other 496 ( 0.00%) 71435 ( 0.00%) 144.02
icmp6 26982 ( 0.06%) 3216277 ( 0.01%) 119.20
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 593 ( 0.00%) 602528 ( 0.00%) 1016.07
tcpdump file: 201305121400.dump.gz (932.18 MB)