Traffic Trace Info
DumpFile: 201305201400.dump
FileSize: 3985.87MB
Id: 201305201400
StartTime: Mon May 20 14:00:00 2013
EndTime: Mon May 20 14:15:01 2013
TotalTime: 900.48 seconds
TotalCapSize: -1007.80MB CapLen: 96 bytes
# of packets: 58828998 (31893.24MB)
AvgRate: 297.12Mbps stddev:39.07M
IP flow (unique src/dst pair) Information
# of flows: 20280327 (avg. 2.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 2.7% 2.5% 2.3% 2.2% 1.8% 1.3% 1.2% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 16163399
Top 10 bandwidth usage (bytes/total in %):
18.1% 10.0% 9.8% 4.5% 4.0% 3.9% 3.8% 2.8% 2.7% 2.5%
# of IPv6 addresses: 11225
Top 10 bandwidth usage (bytes/total in %):
12.6% 8.6% 8.5% 7.4% 7.4% 6.7% 5.2% 3.5% 3.4% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201305201400.pktlen.png)
detailed numbers
[ 32- 63]: 25306265
[ 64- 127]: 9782715
[ 128- 255]: 1371822
[ 256- 511]: 1257249
[ 512- 1023]: 1030978
[ 1024- 2047]: 20079969
Protocol Breakdown
![[protocol breakdown chart]](201305201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 58828998 (100.00%) 33442484047 (100.00%) 568.47
ip 56206155 ( 95.54%) 31875994442 ( 95.32%) 567.13
tcp 31742770 ( 53.96%) 29406528916 ( 87.93%) 926.40
http(s) 17551287 ( 29.83%) 23101448907 ( 69.08%) 1316.23
http(c) 9613627 ( 16.34%) 2689613417 ( 8.04%) 279.77
squid 132391 ( 0.23%) 14798068 ( 0.04%) 111.78
smtp 82303 ( 0.14%) 26281633 ( 0.08%) 319.33
nntp 5 ( 0.00%) 370 ( 0.00%) 74.00
ftp 29626 ( 0.05%) 1994525 ( 0.01%) 67.32
pop3 4090 ( 0.01%) 1799159 ( 0.01%) 439.89
imap 3041 ( 0.01%) 743826 ( 0.00%) 244.60
telnet 1541 ( 0.00%) 103485 ( 0.00%) 67.15
ssh 338745 ( 0.58%) 422074268 ( 1.26%) 1245.99
dns 2063 ( 0.00%) 269172 ( 0.00%) 130.48
bgp 533 ( 0.00%) 122201 ( 0.00%) 229.27
napster 30 ( 0.00%) 2037 ( 0.00%) 67.90
realaud 5 ( 0.00%) 300 ( 0.00%) 60.00
rtsp 50180 ( 0.09%) 3020169 ( 0.01%) 60.19
icecast 7265 ( 0.01%) 5825982 ( 0.02%) 801.92
hotline 5 ( 0.00%) 300 ( 0.00%) 60.00
other 3926031 ( 6.67%) 3138430977 ( 9.38%) 799.39
udp 2522124 ( 4.29%) 722537706 ( 2.16%) 286.48
dns 1108347 ( 1.88%) 389727613 ( 1.17%) 351.63
realaud 7 ( 0.00%) 534 ( 0.00%) 76.29
halflif 21 ( 0.00%) 2619 ( 0.00%) 124.71
starcra 12 ( 0.00%) 1212 ( 0.00%) 101.00
everque 206 ( 0.00%) 26142 ( 0.00%) 126.90
unreal 4 ( 0.00%) 673 ( 0.00%) 168.25
quake 15 ( 0.00%) 1684 ( 0.00%) 112.27
cuseeme 4 ( 0.00%) 339 ( 0.00%) 84.75
other 1409049 ( 2.40%) 331269099 ( 0.99%) 235.10
icmp 21328222 ( 36.25%) 1336948605 ( 4.00%) 62.68
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 9506 ( 0.02%) 3308484 ( 0.01%) 348.04
ip6 570404 ( 0.97%) 400491345 ( 1.20%) 702.12
other 32944 ( 0.06%) 6160116 ( 0.02%) 186.99
frag 162470 ( 0.28%) 161464368 ( 0.48%) 993.81
ip6 2622843 ( 4.46%) 1566489605 ( 4.68%) 597.25
tcp6 2511800 ( 4.27%) 1534314590 ( 4.59%) 610.84
http(s) 1128649 ( 1.92%) 1180679325 ( 3.53%) 1046.10
http(c) 677693 ( 1.15%) 62461944 ( 0.19%) 92.17
smtp 55 ( 0.00%) 37940 ( 0.00%) 689.82
ftp 220 ( 0.00%) 23239 ( 0.00%) 105.63
ssh 184 ( 0.00%) 27334 ( 0.00%) 148.55
dns 306 ( 0.00%) 182027 ( 0.00%) 594.86
bgp 96 ( 0.00%) 24005 ( 0.00%) 250.05
other 704597 ( 1.20%) 290878776 ( 0.87%) 412.83
udp6 76329 ( 0.13%) 25238248 ( 0.08%) 330.65
dns 71470 ( 0.12%) 21459083 ( 0.06%) 300.25
halflif 2 ( 0.00%) 230 ( 0.00%) 115.00
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
unreal 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 2 ( 0.00%) 202 ( 0.00%) 101.00
other 4853 ( 0.01%) 3778519 ( 0.01%) 778.59
icmp6 31684 ( 0.05%) 3856775 ( 0.01%) 121.73
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2999 ( 0.01%) 3075776 ( 0.01%) 1025.60
tcpdump file: 201305201400.dump.gz (1277.95 MB)