Traffic Trace Info
DumpFile: 201305211400.dump
FileSize: 4070.16MB
Id: 201305211400
StartTime: Tue May 21 14:00:01 2013
EndTime: Tue May 21 14:15:01 2013
TotalTime: 899.80 seconds
TotalCapSize: -955.49MB CapLen: 96 bytes
# of packets: 60924180 (32005.03MB)
AvgRate: 298.43Mbps stddev:45.89M
IP flow (unique src/dst pair) Information
# of flows: 23213823 (avg. 2.62 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 3.3% 3.1% 2.5% 1.3% 1.2% 1.2% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 17870935
Top 10 bandwidth usage (bytes/total in %):
15.6% 13.1% 6.4% 4.7% 4.4% 4.0% 4.0% 3.7% 3.4% 2.8%
# of IPv6 addresses: 11309
Top 10 bandwidth usage (bytes/total in %):
13.6% 13.3% 13.3% 8.3% 7.4% 6.0% 5.3% 5.1% 3.2% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201305211400.pktlen.png)
detailed numbers
[ 32- 63]: 28039129
[ 64- 127]: 9070530
[ 128- 255]: 1026420
[ 256- 511]: 1326493
[ 512- 1023]: 1522339
[ 1024- 2047]: 19939269
Protocol Breakdown
![[protocol breakdown chart]](201305211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 60924180 (100.00%) 33559703477 (100.00%) 550.84
ip 58359058 ( 95.79%) 30909137277 ( 92.10%) 529.64
tcp 30334982 ( 49.79%) 28438846305 ( 84.74%) 937.49
http(s) 17862105 ( 29.32%) 23279747600 ( 69.37%) 1303.30
http(c) 8591622 ( 14.10%) 1984147926 ( 5.91%) 230.94
squid 25250 ( 0.04%) 11619704 ( 0.03%) 460.19
smtp 82899 ( 0.14%) 27703305 ( 0.08%) 334.18
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 17976 ( 0.03%) 1171714 ( 0.00%) 65.18
pop3 7520 ( 0.01%) 2050092 ( 0.01%) 272.62
imap 4479 ( 0.01%) 1021405 ( 0.00%) 228.04
telnet 1182 ( 0.00%) 78775 ( 0.00%) 66.65
ssh 97722 ( 0.16%) 25891706 ( 0.08%) 264.95
dns 2121 ( 0.00%) 285966 ( 0.00%) 134.83
bgp 655 ( 0.00%) 216448 ( 0.00%) 330.45
napster 330 ( 0.00%) 20910 ( 0.00%) 63.36
realaud 53 ( 0.00%) 5103 ( 0.00%) 96.28
rtsp 4053 ( 0.01%) 5737141 ( 0.02%) 1415.53
icecast 23878 ( 0.04%) 21335088 ( 0.06%) 893.50
hotline 2 ( 0.00%) 120 ( 0.00%) 60.00
other 3613134 ( 5.93%) 3077813242 ( 9.17%) 851.84
udp 2041547 ( 3.35%) 668256477 ( 1.99%) 327.33
dns 823294 ( 1.35%) 253704959 ( 0.76%) 308.16
realaud 3 ( 0.00%) 267 ( 0.00%) 89.00
halflif 26338 ( 0.04%) 20167334 ( 0.06%) 765.71
starcra 12 ( 0.00%) 1581 ( 0.00%) 131.75
everque 116 ( 0.00%) 15648 ( 0.00%) 134.90
unreal 30 ( 0.00%) 4365 ( 0.00%) 145.50
quake 22 ( 0.00%) 1651 ( 0.00%) 75.05
cuseeme 22 ( 0.00%) 1557 ( 0.00%) 70.77
other 1185551 ( 1.95%) 393910459 ( 1.17%) 332.26
icmp 25461971 ( 41.79%) 1586385647 ( 4.73%) 62.30
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 4949 ( 0.01%) 2832402 ( 0.01%) 572.32
ip6 450051 ( 0.74%) 201442006 ( 0.60%) 447.60
other 65374 ( 0.11%) 11355280 ( 0.03%) 173.70
frag 61673 ( 0.10%) 55934673 ( 0.17%) 906.96
ip6 2565122 ( 4.21%) 2650566200 ( 7.90%) 1033.31
tcp6 2458691 ( 4.04%) 2620424008 ( 7.81%) 1065.78
http(s) 2170048 ( 3.56%) 2542900134 ( 7.58%) 1171.82
http(c) 184640 ( 0.30%) 17957765 ( 0.05%) 97.26
smtp 972 ( 0.00%) 388984 ( 0.00%) 400.19
ftp 44 ( 0.00%) 4054 ( 0.00%) 92.14
pop3 83 ( 0.00%) 51101 ( 0.00%) 615.67
ssh 928 ( 0.00%) 108674 ( 0.00%) 117.11
dns 345 ( 0.00%) 200465 ( 0.00%) 581.06
bgp 95 ( 0.00%) 23585 ( 0.00%) 248.26
other 101536 ( 0.17%) 58789246 ( 0.18%) 579.00
udp6 78736 ( 0.13%) 22450025 ( 0.07%) 285.13
dns 76576 ( 0.13%) 22175702 ( 0.07%) 289.59
quake 1 ( 0.00%) 115 ( 0.00%) 115.00
other 2159 ( 0.00%) 274208 ( 0.00%) 127.01
icmp6 22715 ( 0.04%) 2609431 ( 0.01%) 114.88
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4950 ( 0.01%) 5078656 ( 0.02%) 1025.99
tcpdump file: 201305211400.dump.gz (1289.44 MB)