Traffic Trace Info
DumpFile: 201305181400.dump
FileSize: 2865.36MB
Id: 201305181400
StartTime: Sat May 18 14:00:00 2013
EndTime: Sat May 18 14:15:00 2013
TotalTime: 899.88 seconds
TotalCapSize: -1899.57MB CapLen: 96 bytes
# of packets: 43838235 (19146.75MB)
AvgRate: 178.49Mbps stddev:39.06M
IP flow (unique src/dst pair) Information
# of flows: 20000766 (avg. 2.19 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 2.3% 1.7% 1.6% 1.4% 1.3% 1.2% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 15914506
Top 10 bandwidth usage (bytes/total in %):
16.4% 10.2% 7.0% 6.2% 5.4% 3.9% 3.8% 2.9% 2.7% 2.6%
# of IPv6 addresses: 8655
Top 10 bandwidth usage (bytes/total in %):
8.1% 8.0% 7.8% 7.0% 6.5% 4.5% 3.4% 3.3% 3.0% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201305181400.pktlen.png)
detailed numbers
[ 32- 63]: 22901075
[ 64- 127]: 7017747
[ 128- 255]: 723293
[ 256- 511]: 871065
[ 512- 1023]: 679814
[ 1024- 2047]: 11645241
Protocol Breakdown
![[protocol breakdown chart]](201305181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 43838235 (100.00%) 20076824820 (100.00%) 457.98
ip 42653642 ( 97.30%) 18780517611 ( 93.54%) 440.30
tcp 19539362 ( 44.57%) 16638472070 ( 82.87%) 851.54
http(s) 10773251 ( 24.58%) 13894812273 ( 69.21%) 1289.75
http(c) 6262691 ( 14.29%) 1336027338 ( 6.65%) 213.33
squid 16768 ( 0.04%) 11676827 ( 0.06%) 696.38
smtp 65764 ( 0.15%) 15827883 ( 0.08%) 240.68
ftp 9404 ( 0.02%) 675403 ( 0.00%) 71.82
pop3 2508 ( 0.01%) 868694 ( 0.00%) 346.37
imap 1928 ( 0.00%) 312188 ( 0.00%) 161.92
telnet 1125 ( 0.00%) 75351 ( 0.00%) 66.98
ssh 198356 ( 0.45%) 16483077 ( 0.08%) 83.10
dns 2523 ( 0.01%) 432823 ( 0.00%) 171.55
bgp 546 ( 0.00%) 123297 ( 0.00%) 225.82
napster 12 ( 0.00%) 2113 ( 0.00%) 176.08
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 3629 ( 0.01%) 2100088 ( 0.01%) 578.70
hotline 2 ( 0.00%) 120 ( 0.00%) 60.00
other 2200853 ( 5.02%) 1359054475 ( 6.77%) 617.51
udp 2270613 ( 5.18%) 780369748 ( 3.89%) 343.68
dns 1095104 ( 2.50%) 185268778 ( 0.92%) 169.18
realaud 10 ( 0.00%) 904 ( 0.00%) 90.40
halflif 46 ( 0.00%) 7642 ( 0.00%) 166.13
starcra 17 ( 0.00%) 2534 ( 0.00%) 149.06
everque 107 ( 0.00%) 16932 ( 0.00%) 158.24
unreal 33 ( 0.00%) 7111 ( 0.00%) 215.48
quake 24 ( 0.00%) 2267 ( 0.00%) 94.46
cuseeme 5 ( 0.00%) 420 ( 0.00%) 84.00
other 1172627 ( 2.67%) 594791935 ( 2.96%) 507.23
icmp 20601732 ( 46.99%) 1272294169 ( 6.34%) 61.76
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 10910 ( 0.02%) 9571644 ( 0.05%) 877.33
ip6 198684 ( 0.45%) 74067942 ( 0.37%) 372.79
other 32156 ( 0.07%) 5722768 ( 0.03%) 177.97
frag 31703 ( 0.07%) 31109773 ( 0.15%) 981.29
ip6 1184593 ( 2.70%) 1296307209 ( 6.46%) 1094.31
tcp6 1095208 ( 2.50%) 1271149893 ( 6.33%) 1160.65
http(s) 935458 ( 2.13%) 1222340522 ( 6.09%) 1306.68
http(c) 106910 ( 0.24%) 11337995 ( 0.06%) 106.05
squid 74 ( 0.00%) 17355 ( 0.00%) 234.53
smtp 83 ( 0.00%) 31196 ( 0.00%) 375.86
ftp 25 ( 0.00%) 2209 ( 0.00%) 88.36
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 104 ( 0.00%) 32404 ( 0.00%) 311.58
bgp 94 ( 0.00%) 22199 ( 0.00%) 236.16
other 52388 ( 0.12%) 37353563 ( 0.19%) 713.02
udp6 61029 ( 0.14%) 16964579 ( 0.08%) 277.98
dns 54682 ( 0.12%) 16332637 ( 0.08%) 298.68
other 6347 ( 0.01%) 631942 ( 0.00%) 99.57
icmp6 23141 ( 0.05%) 2716844 ( 0.01%) 117.40
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5185 ( 0.01%) 5471813 ( 0.03%) 1055.32
tcpdump file: 201305181400.dump.gz (913.48 MB)