Traffic Trace Info
DumpFile: 201305271400.dump
FileSize: 3807.55MB
Id: 201305271400
StartTime: Mon May 27 14:00:01 2013
EndTime: Mon May 27 14:15:00 2013
TotalTime: 899.30 seconds
TotalCapSize: -1166.04MB CapLen: 96 bytes
# of packets: 57513203 (28943.46MB)
AvgRate: 270.07Mbps stddev:41.56M
IP flow (unique src/dst pair) Information
# of flows: 20238134 (avg. 2.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 1.4% 1.2% 1.0% 1.0% 0.9% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 16164436
Top 10 bandwidth usage (bytes/total in %):
8.5% 5.7% 5.6% 5.2% 4.3% 3.6% 2.8% 2.6% 2.1% 1.8%
# of IPv6 addresses: 10807
Top 10 bandwidth usage (bytes/total in %):
6.8% 6.6% 6.4% 5.8% 5.3% 4.9% 4.0% 3.8% 3.6% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201305271400.pktlen.png)
detailed numbers
[ 32- 63]: 24747730
[ 64- 127]: 10367717
[ 128- 255]: 1287479
[ 256- 511]: 1796705
[ 512- 1023]: 1721408
[ 1024- 2047]: 17592164
Protocol Breakdown
![[protocol breakdown chart]](201305271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 57513203 (100.00%) 30349420332 (100.00%) 527.69
ip 54968163 ( 95.57%) 27419831137 ( 90.35%) 498.83
tcp 28366538 ( 49.32%) 24246213992 ( 79.89%) 854.75
http(s) 14085870 ( 24.49%) 17948011253 ( 59.14%) 1274.19
http(c) 11210131 ( 19.49%) 4674328088 ( 15.40%) 416.97
squid 140852 ( 0.24%) 117496051 ( 0.39%) 834.18
smtp 68289 ( 0.12%) 18539055 ( 0.06%) 271.48
ftp 17309 ( 0.03%) 1167772 ( 0.00%) 67.47
pop3 6526 ( 0.01%) 5651666 ( 0.02%) 866.02
imap 3410 ( 0.01%) 908250 ( 0.00%) 266.35
telnet 1661 ( 0.00%) 110635 ( 0.00%) 66.61
ssh 24310 ( 0.04%) 5542845 ( 0.02%) 228.01
dns 5861 ( 0.01%) 2279429 ( 0.01%) 388.91
bgp 603 ( 0.00%) 158155 ( 0.00%) 262.28
napster 5 ( 0.00%) 342 ( 0.00%) 68.40
realaud 52 ( 0.00%) 5499 ( 0.00%) 105.75
rtsp 3969 ( 0.01%) 5313831 ( 0.02%) 1338.83
icecast 80983 ( 0.14%) 72528507 ( 0.24%) 895.60
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 2716706 ( 4.72%) 1394172554 ( 4.59%) 513.18
udp 5099880 ( 8.87%) 1669686812 ( 5.50%) 327.40
dns 835051 ( 1.45%) 254550486 ( 0.84%) 304.83
rip 22 ( 0.00%) 1452 ( 0.00%) 66.00
realaud 4 ( 0.00%) 378 ( 0.00%) 94.50
halflif 50 ( 0.00%) 10198 ( 0.00%) 203.96
starcra 39 ( 0.00%) 6060 ( 0.00%) 155.38
everque 70 ( 0.00%) 10706 ( 0.00%) 152.94
unreal 2 ( 0.00%) 257 ( 0.00%) 128.50
quake 12 ( 0.00%) 1306 ( 0.00%) 108.83
cuseeme 15 ( 0.00%) 8489 ( 0.00%) 565.93
other 4259237 ( 7.41%) 1414699374 ( 4.66%) 332.15
icmp 21077360 ( 36.65%) 1329548310 ( 4.38%) 63.08
ipip 186 ( 0.00%) 19350 ( 0.00%) 104.03
ipsec 6261 ( 0.01%) 2996082 ( 0.01%) 478.53
ip6 378737 ( 0.66%) 162998655 ( 0.54%) 430.37
other 39201 ( 0.07%) 8367936 ( 0.03%) 213.46
frag 80383 ( 0.14%) 74793705 ( 0.25%) 930.47
ip6 2545038 ( 4.43%) 2929589075 ( 9.65%) 1151.10
tcp6 2408304 ( 4.19%) 2889612589 ( 9.52%) 1199.85
http(s) 2150379 ( 3.74%) 2787475911 ( 9.18%) 1296.27
http(c) 173166 ( 0.30%) 17949211 ( 0.06%) 103.65
smtp 68 ( 0.00%) 30087 ( 0.00%) 442.46
ftp 203 ( 0.00%) 17066 ( 0.00%) 84.07
pop3 24 ( 0.00%) 15308 ( 0.00%) 637.83
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 254 ( 0.00%) 72908 ( 0.00%) 287.04
bgp 100 ( 0.00%) 26300 ( 0.00%) 263.00
other 84038 ( 0.15%) 84013348 ( 0.28%) 999.71
udp6 105654 ( 0.18%) 31495823 ( 0.10%) 298.10
dns 87871 ( 0.15%) 29947333 ( 0.10%) 340.81
halflif 1 ( 0.00%) 100 ( 0.00%) 100.00
other 17782 ( 0.03%) 1548390 ( 0.01%) 87.08
icmp6 25990 ( 0.05%) 3021007 ( 0.01%) 116.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5060 ( 0.01%) 5455576 ( 0.02%) 1078.18
tcpdump file: 201305271400.dump.gz (1249.10 MB)