Traffic Trace Info
DumpFile: 201305251400.dump
FileSize: 3284.87MB
Id: 201305251400
StartTime: Sat May 25 14:00:00 2013
EndTime: Sat May 25 14:15:01 2013
TotalTime: 900.56 seconds
TotalCapSize: -1568.62MB CapLen: 96 bytes
# of packets: 49641884 (23614.72MB)
AvgRate: 219.95Mbps stddev:38.71M
IP flow (unique src/dst pair) Information
# of flows: 20273711 (avg. 2.45 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.6% 3.9% 2.4% 2.4% 1.7% 1.5% 1.4% 1.3% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 16150047
Top 10 bandwidth usage (bytes/total in %):
12.3% 8.4% 6.1% 5.7% 4.8% 4.4% 4.2% 4.2% 3.7% 3.4%
# of IPv6 addresses: 8229
Top 10 bandwidth usage (bytes/total in %):
26.4% 17.7% 10.1% 8.7% 6.9% 5.7% 5.4% 4.5% 3.7% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201305251400.pktlen.png)
detailed numbers
[ 32- 63]: 23907740
[ 64- 127]: 8699895
[ 128- 255]: 769978
[ 256- 511]: 833580
[ 512- 1023]: 768013
[ 1024- 2047]: 14662678
Protocol Breakdown
![[protocol breakdown chart]](201305251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 49641884 (100.00%) 24761824419 (100.00%) 498.81
ip 48044168 ( 96.78%) 22872252936 ( 92.37%) 476.07
tcp 21454281 ( 43.22%) 20458561751 ( 82.62%) 953.59
http(s) 11215169 ( 22.59%) 14984212376 ( 60.51%) 1336.07
http(c) 6331857 ( 12.76%) 2326102440 ( 9.39%) 367.36
squid 151712 ( 0.31%) 16863125 ( 0.07%) 111.15
smtp 97852 ( 0.20%) 42248285 ( 0.17%) 431.76
nntp 4 ( 0.00%) 240 ( 0.00%) 60.00
ftp 16822 ( 0.03%) 1209606 ( 0.00%) 71.91
pop3 2596 ( 0.01%) 409263 ( 0.00%) 157.65
imap 2966 ( 0.01%) 1519305 ( 0.01%) 512.24
telnet 1608 ( 0.00%) 111368 ( 0.00%) 69.26
ssh 36427 ( 0.07%) 9905389 ( 0.04%) 271.92
dns 82247 ( 0.17%) 5084577 ( 0.02%) 61.82
bgp 509 ( 0.00%) 94623 ( 0.00%) 185.90
napster 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 15 ( 0.00%) 1196 ( 0.00%) 79.73
icecast 6705 ( 0.01%) 5780954 ( 0.02%) 862.19
hotline 3 ( 0.00%) 194 ( 0.00%) 64.67
other 3507788 ( 7.07%) 3065018750 ( 12.38%) 873.78
udp 1977000 ( 3.98%) 513642663 ( 2.07%) 259.81
dns 787089 ( 1.59%) 252788152 ( 1.02%) 321.17
rip 6 ( 0.00%) 470 ( 0.00%) 78.33
realaud 15 ( 0.00%) 1898 ( 0.00%) 126.53
halflif 7 ( 0.00%) 1091 ( 0.00%) 155.86
starcra 36 ( 0.00%) 2381 ( 0.00%) 66.14
everque 81 ( 0.00%) 11533 ( 0.00%) 142.38
unreal 13 ( 0.00%) 1267 ( 0.00%) 97.46
quake 17 ( 0.00%) 2145 ( 0.00%) 126.18
cuseeme 14 ( 0.00%) 1040 ( 0.00%) 74.29
other 1185868 ( 2.39%) 258652044 ( 1.04%) 218.11
icmp 24161969 ( 48.67%) 1540434317 ( 6.22%) 63.75
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 31563 ( 0.06%) 42088154 ( 0.17%) 1333.46
ip6 380622 ( 0.77%) 310189657 ( 1.25%) 814.95
other 38548 ( 0.08%) 7317124 ( 0.03%) 189.82
frag 72661 ( 0.15%) 80757920 ( 0.33%) 1111.43
ip6 1597716 ( 3.22%) 1889571483 ( 7.63%) 1182.67
tcp6 1517428 ( 3.06%) 1868657559 ( 7.55%) 1231.46
http(s) 1247760 ( 2.51%) 1748862954 ( 7.06%) 1401.60
http(c) 186739 ( 0.38%) 17218478 ( 0.07%) 92.21
smtp 578 ( 0.00%) 77665 ( 0.00%) 134.37
ftp 25 ( 0.00%) 2237 ( 0.00%) 89.48
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 116 ( 0.00%) 27751 ( 0.00%) 239.23
bgp 101 ( 0.00%) 22880 ( 0.00%) 226.53
other 82037 ( 0.17%) 102433144 ( 0.41%) 1248.62
udp6 52946 ( 0.11%) 15308946 ( 0.06%) 289.14
dns 51374 ( 0.10%) 15108891 ( 0.06%) 294.10
other 1572 ( 0.00%) 200055 ( 0.00%) 127.26
icmp6 24719 ( 0.05%) 2883493 ( 0.01%) 116.65
ip6 7 ( 0.00%) 976 ( 0.00%) 139.43
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2585 ( 0.01%) 2716293 ( 0.01%) 1050.79
tcpdump file: 201305251400.dump.gz (993.77 MB)