Traffic Trace Info
DumpFile: 201305301400.dump
FileSize: 4056.60MB
Id: 201305301400
StartTime: Thu May 30 14:00:01 2013
EndTime: Thu May 30 14:15:00 2013
TotalTime: 899.24 seconds
TotalCapSize: -966.87MB CapLen: 96 bytes
# of packets: 60782165 (35629.66MB)
AvgRate: 332.33Mbps stddev:50.14M
IP flow (unique src/dst pair) Information
# of flows: 20650458 (avg. 2.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.2% 6.3% 5.9% 4.4% 2.9% 1.9% 1.8% 1.3% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 16514788
Top 10 bandwidth usage (bytes/total in %):
16.4% 11.2% 7.6% 6.7% 6.2% 4.6% 3.4% 3.3% 3.0% 3.0%
# of IPv6 addresses: 10983
Top 10 bandwidth usage (bytes/total in %):
23.2% 9.8% 8.6% 4.5% 4.4% 3.4% 3.4% 2.7% 2.3% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201305301400.pktlen.png)
detailed numbers
[ 32- 63]: 25589314
[ 64- 127]: 8868335
[ 128- 255]: 1383831
[ 256- 511]: 1184085
[ 512- 1023]: 1070258
[ 1024- 2047]: 22686342
Protocol Breakdown
![[protocol breakdown chart]](201305301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 60782165 (100.00%) 37360410908 (100.00%) 614.66
ip 58856572 ( 96.83%) 35759660333 ( 95.72%) 607.57
tcp 33368676 ( 54.90%) 33315123904 ( 89.17%) 998.40
http(s) 20751924 ( 34.14%) 27112494004 ( 72.57%) 1306.51
http(c) 9288923 ( 15.28%) 3584798472 ( 9.60%) 385.92
squid 21403 ( 0.04%) 19788362 ( 0.05%) 924.56
smtp 74625 ( 0.12%) 23465326 ( 0.06%) 314.44
nntp 9 ( 0.00%) 540 ( 0.00%) 60.00
ftp 33464 ( 0.06%) 2170982 ( 0.01%) 64.88
pop3 7072 ( 0.01%) 4857819 ( 0.01%) 686.91
imap 125975 ( 0.21%) 14797479 ( 0.04%) 117.46
telnet 2553 ( 0.00%) 164192 ( 0.00%) 64.31
ssh 80880 ( 0.13%) 10156425 ( 0.03%) 125.57
dns 3156 ( 0.01%) 381769 ( 0.00%) 120.97
bgp 549 ( 0.00%) 122736 ( 0.00%) 223.56
napster 23 ( 0.00%) 4313 ( 0.00%) 187.52
realaud 47 ( 0.00%) 5425 ( 0.00%) 115.43
rtsp 8 ( 0.00%) 480 ( 0.00%) 60.00
icecast 32686 ( 0.05%) 34737755 ( 0.09%) 1062.77
other 2945331 ( 4.85%) 2507174945 ( 6.71%) 851.24
udp 3804886 ( 6.26%) 963301292 ( 2.58%) 253.17
dns 942526 ( 1.55%) 318164243 ( 0.85%) 337.57
rip 46 ( 0.00%) 3036 ( 0.00%) 66.00
realaud 29 ( 0.00%) 3589 ( 0.00%) 123.76
halflif 6 ( 0.00%) 529 ( 0.00%) 88.17
starcra 22 ( 0.00%) 3263 ( 0.00%) 148.32
everque 50 ( 0.00%) 7465 ( 0.00%) 149.30
unreal 230 ( 0.00%) 205721 ( 0.00%) 894.44
quake 21 ( 0.00%) 2438 ( 0.00%) 116.10
cuseeme 4 ( 0.00%) 963 ( 0.00%) 240.75
other 2850579 ( 4.69%) 644133489 ( 1.72%) 225.97
icmp 21289881 ( 35.03%) 1347739608 ( 3.61%) 63.30
ipip 185 ( 0.00%) 19240 ( 0.00%) 104.00
ipsec 10559 ( 0.02%) 3409450 ( 0.01%) 322.90
ip6 341932 ( 0.56%) 122584181 ( 0.33%) 358.50
other 40453 ( 0.07%) 7482658 ( 0.02%) 184.97
frag 125781 ( 0.21%) 110677503 ( 0.30%) 879.92
ip6 1925593 ( 3.17%) 1600750575 ( 4.28%) 831.30
tcp6 1816772 ( 2.99%) 1571501364 ( 4.21%) 865.00
http(s) 1343934 ( 2.21%) 1480546904 ( 3.96%) 1101.65
http(c) 391311 ( 0.64%) 36887567 ( 0.10%) 94.27
smtp 574 ( 0.00%) 408768 ( 0.00%) 712.14
ftp 416 ( 0.00%) 37697 ( 0.00%) 90.62
pop3 30 ( 0.00%) 14286 ( 0.00%) 476.20
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 126 ( 0.00%) 37182 ( 0.00%) 295.10
bgp 89 ( 0.00%) 20502 ( 0.00%) 230.36
other 80220 ( 0.13%) 53536008 ( 0.14%) 667.36
udp6 76162 ( 0.13%) 23319230 ( 0.06%) 306.18
dns 74565 ( 0.12%) 23112954 ( 0.06%) 309.97
quake 1 ( 0.00%) 110 ( 0.00%) 110.00
cuseeme 1 ( 0.00%) 173 ( 0.00%) 173.00
other 1595 ( 0.00%) 205993 ( 0.00%) 129.15
icmp6 30097 ( 0.05%) 3531191 ( 0.01%) 117.33
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2532 ( 0.00%) 2394710 ( 0.01%) 945.78
tcpdump file: 201305301400.dump.gz (1298.79 MB)