Traffic Trace Info
DumpFile: 201305291400.dump
FileSize: 4195.53MB
Id: 201305291400
StartTime: Wed May 29 14:00:00 2013
EndTime: Wed May 29 14:15:01 2013
TotalTime: 900.73 seconds
TotalCapSize: -850.49MB CapLen: 96 bytes
# of packets: 62260186 (34967.16MB)
AvgRate: 325.66Mbps stddev:45.86M
IP flow (unique src/dst pair) Information
# of flows: 20828954 (avg. 2.99 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.7% 2.4% 1.7% 1.6% 1.3% 1.1% 1.0% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 16614629
Top 10 bandwidth usage (bytes/total in %):
10.3% 8.7% 7.3% 5.4% 4.3% 3.8% 3.8% 3.5% 3.4% 2.9%
# of IPv6 addresses: 10827
Top 10 bandwidth usage (bytes/total in %):
5.6% 5.3% 4.4% 4.0% 3.8% 3.5% 3.2% 3.1% 3.0% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201305291400.pktlen.png)
detailed numbers
[ 32- 63]: 26761451
[ 64- 127]: 9575823
[ 128- 255]: 1005395
[ 256- 511]: 1854410
[ 512- 1023]: 1183694
[ 1024- 2047]: 21879413
Protocol Breakdown
![[protocol breakdown chart]](201305291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 62260186 (100.00%) 36665727580 (100.00%) 588.91
ip 59039998 ( 94.83%) 33492901382 ( 91.35%) 567.29
tcp 33233583 ( 53.38%) 30567926581 ( 83.37%) 919.79
http(s) 19736768 ( 31.70%) 25153592567 ( 68.60%) 1274.45
http(c) 11172592 ( 17.95%) 3860563463 ( 10.53%) 345.54
squid 12836 ( 0.02%) 3475053 ( 0.01%) 270.73
smtp 75195 ( 0.12%) 25177395 ( 0.07%) 334.83
ftp 30360 ( 0.05%) 1977963 ( 0.01%) 65.15
pop3 5330 ( 0.01%) 2707204 ( 0.01%) 507.92
imap 14891 ( 0.02%) 3166961 ( 0.01%) 212.68
telnet 63100 ( 0.10%) 3899948 ( 0.01%) 61.81
ssh 34618 ( 0.06%) 8238656 ( 0.02%) 237.99
dns 4864 ( 0.01%) 2267872 ( 0.01%) 466.26
bgp 577 ( 0.00%) 137985 ( 0.00%) 239.14
napster 1 ( 0.00%) 60 ( 0.00%) 60.00
realaud 3 ( 0.00%) 184 ( 0.00%) 61.33
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 75009 ( 0.12%) 52083002 ( 0.14%) 694.36
hotline 5 ( 0.00%) 332 ( 0.00%) 66.40
other 2007432 ( 3.22%) 1450637816 ( 3.96%) 722.63
udp 2512713 ( 4.04%) 842895101 ( 2.30%) 335.45
dns 1080308 ( 1.74%) 370614442 ( 1.01%) 343.06
rip 39 ( 0.00%) 2598 ( 0.00%) 66.62
realaud 31 ( 0.00%) 2159 ( 0.00%) 69.65
halflif 54 ( 0.00%) 21464 ( 0.00%) 397.48
starcra 19 ( 0.00%) 4421 ( 0.00%) 232.68
everque 3843 ( 0.01%) 3841500 ( 0.01%) 999.61
unreal 25 ( 0.00%) 7734 ( 0.00%) 309.36
quake 29 ( 0.00%) 2633 ( 0.00%) 90.79
cuseeme 8 ( 0.00%) 1038 ( 0.00%) 129.75
other 1422218 ( 2.28%) 467616431 ( 1.28%) 328.79
icmp 22502261 ( 36.14%) 1423510735 ( 3.88%) 63.26
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 16734 ( 0.03%) 7262860 ( 0.02%) 434.02
ip6 735779 ( 1.18%) 644409861 ( 1.76%) 875.82
other 38743 ( 0.06%) 6876974 ( 0.02%) 177.50
frag 213268 ( 0.34%) 197712183 ( 0.54%) 927.06
ip6 3220188 ( 5.17%) 3172826198 ( 8.65%) 985.29
tcp6 3112147 ( 5.00%) 3141117651 ( 8.57%) 1009.31
http(s) 2314606 ( 3.72%) 3070376599 ( 8.37%) 1326.52
http(c) 790110 ( 1.27%) 68984009 ( 0.19%) 87.31
smtp 248 ( 0.00%) 114932 ( 0.00%) 463.44
ftp 25 ( 0.00%) 2209 ( 0.00%) 88.36
pop3 82 ( 0.00%) 15137 ( 0.00%) 184.60
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 737 ( 0.00%) 390043 ( 0.00%) 529.23
bgp 91 ( 0.00%) 18713 ( 0.00%) 205.64
other 6176 ( 0.01%) 1203559 ( 0.00%) 194.88
udp6 84855 ( 0.14%) 25995305 ( 0.07%) 306.35
dns 82921 ( 0.13%) 25770531 ( 0.07%) 310.78
halflif 1 ( 0.00%) 108 ( 0.00%) 108.00
everque 2 ( 0.00%) 221 ( 0.00%) 110.50
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 1930 ( 0.00%) 224341 ( 0.00%) 116.24
icmp6 19937 ( 0.03%) 2293702 ( 0.01%) 115.05
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3219 ( 0.01%) 3415460 ( 0.01%) 1061.03
tcpdump file: 201305291400.dump.gz (1320.49 MB)