Traffic Trace Info
DumpFile: 201305161400.dump
FileSize: 4211.20MB
Id: 201305161400
StartTime: Thu May 16 14:00:00 2013
EndTime: Thu May 16 14:15:01 2013
TotalTime: 900.49 seconds
TotalCapSize: -828.79MB CapLen: 96 bytes
# of packets: 61864906 (34218.66MB)
AvgRate: 318.76Mbps stddev:47.08M
IP flow (unique src/dst pair) Information
# of flows: 20684950 (avg. 2.99 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 2.7% 2.4% 2.1% 1.9% 1.9% 1.8% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 16507275
Top 10 bandwidth usage (bytes/total in %):
12.5% 5.0% 4.6% 4.4% 3.7% 3.4% 3.4% 3.4% 3.0% 2.8%
# of IPv6 addresses: 11267
Top 10 bandwidth usage (bytes/total in %):
36.0% 28.9% 10.5% 5.6% 5.6% 3.8% 3.5% 3.5% 2.6% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201305161400.pktlen.png)
detailed numbers
[ 32- 63]: 24549117
[ 64- 127]: 11620330
[ 128- 255]: 1276891
[ 256- 511]: 1565552
[ 512- 1023]: 1139006
[ 1024- 2047]: 21714010
Protocol Breakdown
![[protocol breakdown chart]](201305161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 61864906 (100.00%) 35880863210 (100.00%) 579.99
ip 58978789 ( 95.33%) 32945183695 ( 91.82%) 558.59
tcp 32253847 ( 52.14%) 29689173533 ( 82.74%) 920.48
http(s) 18170880 ( 29.37%) 23072818461 ( 64.30%) 1269.77
http(c) 9954775 ( 16.09%) 3382337296 ( 9.43%) 339.77
squid 9059 ( 0.01%) 1624843 ( 0.00%) 179.36
smtp 81237 ( 0.13%) 19978211 ( 0.06%) 245.93
nntp 7 ( 0.00%) 420 ( 0.00%) 60.00
ftp 38420 ( 0.06%) 5320476 ( 0.01%) 138.48
pop3 7319 ( 0.01%) 5934294 ( 0.02%) 810.81
imap 4807 ( 0.01%) 3159043 ( 0.01%) 657.18
telnet 1659 ( 0.00%) 110797 ( 0.00%) 66.79
ssh 1001232 ( 1.62%) 879579600 ( 2.45%) 878.50
dns 7765 ( 0.01%) 619598 ( 0.00%) 79.79
bgp 550 ( 0.00%) 130514 ( 0.00%) 237.30
napster 38 ( 0.00%) 3272 ( 0.00%) 86.11
realaud 22 ( 0.00%) 2305 ( 0.00%) 104.77
rtsp 54036 ( 0.09%) 80098070 ( 0.22%) 1482.31
icecast 17860 ( 0.03%) 15509735 ( 0.04%) 868.41
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 2904132 ( 4.69%) 2221943658 ( 6.19%) 765.10
udp 4110788 ( 6.64%) 1196741411 ( 3.34%) 291.12
dns 934003 ( 1.51%) 299168887 ( 0.83%) 320.31
rip 25 ( 0.00%) 1961 ( 0.00%) 78.44
realaud 9 ( 0.00%) 715 ( 0.00%) 79.44
halflif 1864 ( 0.00%) 2091051 ( 0.01%) 1121.81
starcra 17 ( 0.00%) 2581 ( 0.00%) 151.82
everque 363 ( 0.00%) 53466 ( 0.00%) 147.29
unreal 48 ( 0.00%) 9381 ( 0.00%) 195.44
quake 34 ( 0.00%) 4179 ( 0.00%) 122.91
cuseeme 21 ( 0.00%) 2705 ( 0.00%) 128.81
other 3168553 ( 5.12%) 894975570 ( 2.49%) 282.46
icmp 21366694 ( 34.54%) 1332952051 ( 3.71%) 62.38
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 31149 ( 0.05%) 12475134 ( 0.03%) 400.50
ip6 1180642 ( 1.91%) 707152526 ( 1.97%) 598.96
other 35485 ( 0.06%) 6669880 ( 0.02%) 187.96
frag 132389 ( 0.21%) 151569736 ( 0.42%) 1144.88
ip6 2886117 ( 4.67%) 2935679515 ( 8.18%) 1017.17
tcp6 2757460 ( 4.46%) 2893773706 ( 8.06%) 1049.43
http(s) 1655594 ( 2.68%) 1920741311 ( 5.35%) 1160.15
http(c) 341087 ( 0.55%) 34242942 ( 0.10%) 100.39
smtp 142 ( 0.00%) 45111 ( 0.00%) 317.68
ftp 1342 ( 0.00%) 130291 ( 0.00%) 97.09
ssh 197 ( 0.00%) 33604 ( 0.00%) 170.58
dns 125 ( 0.00%) 36557 ( 0.00%) 292.46
bgp 95 ( 0.00%) 22133 ( 0.00%) 232.98
other 758878 ( 1.23%) 938521757 ( 2.62%) 1236.72
udp6 78668 ( 0.13%) 24155071 ( 0.07%) 307.05
dns 78112 ( 0.13%) 24057003 ( 0.07%) 307.98
realaud 1 ( 0.00%) 106 ( 0.00%) 106.00
everque 1 ( 0.00%) 117 ( 0.00%) 117.00
quake 1 ( 0.00%) 118 ( 0.00%) 118.00
other 553 ( 0.00%) 97727 ( 0.00%) 176.72
icmp6 37223 ( 0.06%) 4342199 ( 0.01%) 116.65
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 12736 ( 0.02%) 13404459 ( 0.04%) 1052.49
tcpdump file: 201305161400.dump.gz (1356.49 MB)