Traffic Trace Info
DumpFile: 201305221400.dump
FileSize: 3851.34MB
Id: 201305221400
StartTime: Wed May 22 14:00:00 2013
EndTime: Wed May 22 14:15:00 2013
TotalTime: 899.66 seconds
TotalCapSize: -1109.89MB CapLen: 96 bytes
# of packets: 56703281 (28737.48MB)
AvgRate: 268.00Mbps stddev:68.20M
IP flow (unique src/dst pair) Information
# of flows: 20657659 (avg. 2.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.5% 1.4% 1.3% 1.1% 1.0% 1.0% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 16460843
Top 10 bandwidth usage (bytes/total in %):
13.2% 11.1% 11.1% 5.6% 4.3% 4.2% 4.0% 2.7% 2.3% 2.2%
# of IPv6 addresses: 11104
Top 10 bandwidth usage (bytes/total in %):
12.1% 7.8% 5.1% 4.0% 3.9% 3.6% 3.6% 3.3% 3.2% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201305221400.pktlen.png)
detailed numbers
[ 32- 63]: 24409070
[ 64- 127]: 10797302
[ 128- 255]: 1162865
[ 256- 511]: 1382531
[ 512- 1023]: 953738
[ 1024- 2047]: 17997775
Protocol Breakdown
![[protocol breakdown chart]](201305221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 56703281 (100.00%) 30133435797 (100.00%) 531.42
ip 55046970 ( 97.08%) 28722360143 ( 95.32%) 521.78
tcp 30885441 ( 54.47%) 26286897799 ( 87.23%) 851.11
http(s) 17380440 ( 30.65%) 21966073893 ( 72.90%) 1263.84
http(c) 10776011 ( 19.00%) 3212301545 ( 10.66%) 298.10
squid 18740 ( 0.03%) 15037377 ( 0.05%) 802.42
smtp 86478 ( 0.15%) 29348102 ( 0.10%) 339.37
ftp 41213 ( 0.07%) 2846019 ( 0.01%) 69.06
pop3 4809 ( 0.01%) 2126686 ( 0.01%) 442.23
imap 495249 ( 0.87%) 69180619 ( 0.23%) 139.69
telnet 1427 ( 0.00%) 95468 ( 0.00%) 66.90
ssh 27138 ( 0.05%) 5779024 ( 0.02%) 212.95
dns 2168 ( 0.00%) 322513 ( 0.00%) 148.76
bgp 646 ( 0.00%) 203626 ( 0.00%) 315.21
napster 5 ( 0.00%) 300 ( 0.00%) 60.00
realaud 8 ( 0.00%) 660 ( 0.00%) 82.50
rtsp 32 ( 0.00%) 6900 ( 0.00%) 215.62
icecast 45434 ( 0.08%) 39560827 ( 0.13%) 870.73
hotline 2 ( 0.00%) 120 ( 0.00%) 60.00
other 2005641 ( 3.54%) 944014120 ( 3.13%) 470.68
udp 1990136 ( 3.51%) 622037648 ( 2.06%) 312.56
dns 861506 ( 1.52%) 241005652 ( 0.80%) 279.75
rip 2 ( 0.00%) 195 ( 0.00%) 97.50
realaud 9 ( 0.00%) 806 ( 0.00%) 89.56
halflif 64 ( 0.00%) 6980 ( 0.00%) 109.06
starcra 8 ( 0.00%) 720 ( 0.00%) 90.00
everque 204 ( 0.00%) 17255 ( 0.00%) 84.58
unreal 47 ( 0.00%) 5978 ( 0.00%) 127.19
quake 26 ( 0.00%) 2180 ( 0.00%) 83.85
cuseeme 5 ( 0.00%) 443 ( 0.00%) 88.60
other 1121434 ( 1.98%) 379261483 ( 1.26%) 338.19
icmp 21578760 ( 38.06%) 1363435542 ( 4.52%) 63.18
ipip 186 ( 0.00%) 19350 ( 0.00%) 104.03
ipsec 5922 ( 0.01%) 3198040 ( 0.01%) 540.03
ip6 552518 ( 0.97%) 440318233 ( 1.46%) 796.93
other 34007 ( 0.06%) 6453531 ( 0.02%) 189.77
frag 112667 ( 0.20%) 129580732 ( 0.43%) 1150.12
ip6 1656311 ( 2.92%) 1411075654 ( 4.68%) 851.94
tcp6 1551519 ( 2.74%) 1381766705 ( 4.59%) 890.59
http(s) 1251674 ( 2.21%) 1335340232 ( 4.43%) 1066.84
http(c) 241898 ( 0.43%) 22013267 ( 0.07%) 91.00
smtp 1230 ( 0.00%) 871651 ( 0.00%) 708.66
ftp 379 ( 0.00%) 45690 ( 0.00%) 120.55
pop3 20 ( 0.00%) 4971 ( 0.00%) 248.55
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 505 ( 0.00%) 249634 ( 0.00%) 494.32
bgp 90 ( 0.00%) 21847 ( 0.00%) 242.74
other 55651 ( 0.10%) 23206963 ( 0.08%) 417.01
udp6 77430 ( 0.14%) 22742331 ( 0.08%) 293.71
dns 75802 ( 0.13%) 22524890 ( 0.07%) 297.15
halflif 1 ( 0.00%) 112 ( 0.00%) 112.00
everque 1 ( 0.00%) 113 ( 0.00%) 113.00
cuseeme 1 ( 0.00%) 125 ( 0.00%) 125.00
other 1625 ( 0.00%) 217091 ( 0.00%) 133.59
icmp6 23907 ( 0.04%) 2799181 ( 0.01%) 117.09
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3425 ( 0.01%) 3763357 ( 0.01%) 1098.79
tcpdump file: 201305221400.dump.gz (1249.56 MB)