Traffic Trace Info
DumpFile: 201305131400.dump
FileSize: 3992.37MB
Id: 201305131400
StartTime: Mon May 13 14:00:00 2013
EndTime: Mon May 13 14:15:01 2013
TotalTime: 900.69 seconds
TotalCapSize: -981.73MB CapLen: 96 bytes
# of packets: 57546815 (29951.80MB)
AvgRate: 278.98Mbps stddev:42.23M
IP flow (unique src/dst pair) Information
# of flows: 20188914 (avg. 2.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.2% 2.8% 2.4% 1.8% 1.7% 1.7% 1.5% 1.4% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 16080439
Top 10 bandwidth usage (bytes/total in %):
9.2% 7.0% 6.9% 5.1% 5.0% 4.6% 4.2% 3.3% 3.3% 2.9%
# of IPv6 addresses: 11157
Top 10 bandwidth usage (bytes/total in %):
61.2% 57.2% 7.0% 3.4% 2.1% 1.9% 1.7% 1.5% 1.4% 1.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201305131400.pktlen.png)
detailed numbers
[ 32- 63]: 24349018
[ 64- 127]: 10878273
[ 128- 255]: 1080457
[ 256- 511]: 1391485
[ 512- 1023]: 1147879
[ 1024- 2047]: 18699703
Protocol Breakdown
![[protocol breakdown chart]](201305131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 57546815 (100.00%) 31406743434 (100.00%) 545.76
ip 53058326 ( 92.20%) 26911452898 ( 85.69%) 507.21
tcp 27114890 ( 47.12%) 23699346513 ( 75.46%) 874.03
http(s) 14478050 ( 25.16%) 18501625049 ( 58.91%) 1277.91
http(c) 10029227 ( 17.43%) 3741594998 ( 11.91%) 373.07
squid 59779 ( 0.10%) 5944262 ( 0.02%) 99.44
smtp 69610 ( 0.12%) 19071673 ( 0.06%) 273.98
ftp 28937 ( 0.05%) 4551872 ( 0.01%) 157.30
pop3 3317 ( 0.01%) 1141251 ( 0.00%) 344.06
imap 23881 ( 0.04%) 19367599 ( 0.06%) 811.00
telnet 1208 ( 0.00%) 80797 ( 0.00%) 66.88
ssh 61820 ( 0.11%) 11239749 ( 0.04%) 181.81
dns 8950 ( 0.02%) 1761819 ( 0.01%) 196.85
bgp 535 ( 0.00%) 117218 ( 0.00%) 219.10
napster 77 ( 0.00%) 49846 ( 0.00%) 647.35
realaud 46 ( 0.00%) 5668 ( 0.00%) 123.22
rtsp 17 ( 0.00%) 2970 ( 0.00%) 174.71
icecast 41731 ( 0.07%) 37015895 ( 0.12%) 887.01
hotline 1 ( 0.00%) 66 ( 0.00%) 66.00
other 2307704 ( 4.01%) 1355775781 ( 4.32%) 587.50
udp 2397837 ( 4.17%) 938341548 ( 2.99%) 391.33
dns 784805 ( 1.36%) 212366028 ( 0.68%) 270.60
rip 1 ( 0.00%) 90 ( 0.00%) 90.00
realaud 4 ( 0.00%) 370 ( 0.00%) 92.50
halflif 17 ( 0.00%) 1994 ( 0.00%) 117.29
starcra 28 ( 0.00%) 5471 ( 0.00%) 195.39
everque 50 ( 0.00%) 8921 ( 0.00%) 178.42
unreal 62 ( 0.00%) 9080 ( 0.00%) 146.45
quake 47 ( 0.00%) 4316 ( 0.00%) 91.83
cuseeme 4 ( 0.00%) 373 ( 0.00%) 93.25
other 1612639 ( 2.80%) 725843218 ( 2.31%) 450.10
icmp 21759991 ( 37.81%) 1366457457 ( 4.35%) 62.80
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 18380 ( 0.03%) 6157960 ( 0.02%) 335.04
ip6 1732784 ( 3.01%) 893906074 ( 2.85%) 515.88
other 34259 ( 0.06%) 7224076 ( 0.02%) 210.87
frag 61328 ( 0.11%) 64694702 ( 0.21%) 1054.90
ip6 4488489 ( 7.80%) 4495290536 ( 14.31%) 1001.52
tcp6 4365489 ( 7.59%) 4458113676 ( 14.19%) 1021.22
http(s) 1541247 ( 2.68%) 1692691252 ( 5.39%) 1098.26
http(c) 913680 ( 1.59%) 85117053 ( 0.27%) 93.16
smtp 277 ( 0.00%) 250517 ( 0.00%) 904.39
ftp 3291 ( 0.01%) 354889 ( 0.00%) 107.84
imap 532 ( 0.00%) 338907 ( 0.00%) 637.04
ssh 177 ( 0.00%) 26280 ( 0.00%) 148.47
dns 850 ( 0.00%) 594904 ( 0.00%) 699.89
bgp 91 ( 0.00%) 21679 ( 0.00%) 238.23
other 1905344 ( 3.31%) 2678718195 ( 8.53%) 1405.90
udp6 88590 ( 0.15%) 29862705 ( 0.10%) 337.09
dns 87502 ( 0.15%) 29720085 ( 0.09%) 339.65
quake 1 ( 0.00%) 121 ( 0.00%) 121.00
other 1087 ( 0.00%) 142499 ( 0.00%) 131.09
icmp6 30791 ( 0.05%) 3657647 ( 0.01%) 118.79
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3589 ( 0.01%) 3652428 ( 0.01%) 1017.67
tcpdump file: 201305131400.dump.gz (1237.17 MB)