Traffic Trace Info
DumpFile: 201305311400.dump
FileSize: 4357.28MB
Id: 201305311400
StartTime: Fri May 31 14:00:00 2013
EndTime: Fri May 31 14:15:01 2013
TotalTime: 900.13 seconds
TotalCapSize: -668.70MB CapLen: 96 bytes
# of packets: 60946439 (42523.70MB)
AvgRate: 396.30Mbps stddev:64.26M
IP flow (unique src/dst pair) Information
# of flows: 11903470 (avg. 5.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.6% 3.2% 3.1% 2.0% 1.8% 1.6% 1.5% 1.4% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 9470932
Top 10 bandwidth usage (bytes/total in %):
7.1% 7.1% 5.8% 5.2% 3.8% 3.6% 3.5% 3.4% 3.3% 3.3%
# of IPv6 addresses: 11031
Top 10 bandwidth usage (bytes/total in %):
5.6% 4.2% 4.2% 3.4% 3.1% 3.0% 2.7% 2.6% 2.6% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201305311400.pktlen.png)
detailed numbers
[ 32- 63]: 17124549
[ 64- 127]: 11111849
[ 128- 255]: 1306688
[ 256- 511]: 2141687
[ 512- 1023]: 2048965
[ 1024- 2047]: 27212701
Protocol Breakdown
![[protocol breakdown chart]](201305311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 60946439 (100.00%) 44589333279 (100.00%) 731.62
ip 57157939 ( 93.78%) 41408693021 ( 92.87%) 724.46
tcp 40047612 ( 65.71%) 36692316699 ( 82.29%) 916.22
http(s) 20472749 ( 33.59%) 25142135460 ( 56.39%) 1228.08
http(c) 12517630 ( 20.54%) 5420378592 ( 12.16%) 433.02
squid 47498 ( 0.08%) 18138639 ( 0.04%) 381.88
smtp 70196 ( 0.12%) 18238687 ( 0.04%) 259.83
nntp 15 ( 0.00%) 928 ( 0.00%) 61.87
ftp 31372 ( 0.05%) 2097008 ( 0.00%) 66.84
pop3 4251 ( 0.01%) 1302095 ( 0.00%) 306.30
imap 3300 ( 0.01%) 516025 ( 0.00%) 156.37
telnet 5360 ( 0.01%) 386483 ( 0.00%) 72.11
ssh 1401566 ( 2.30%) 1058312911 ( 2.37%) 755.09
dns 4132 ( 0.01%) 2206081 ( 0.00%) 533.90
bgp 599 ( 0.00%) 161410 ( 0.00%) 269.47
napster 862 ( 0.00%) 650644 ( 0.00%) 754.81
realaud 23 ( 0.00%) 2234 ( 0.00%) 97.13
icecast 7503 ( 0.01%) 5836570 ( 0.01%) 777.90
hotline 1 ( 0.00%) 74 ( 0.00%) 74.00
other 5480555 ( 8.99%) 5021952858 ( 11.26%) 916.32
udp 2851161 ( 4.68%) 989100641 ( 2.22%) 346.91
dns 1000636 ( 1.64%) 289090565 ( 0.65%) 288.91
rip 21 ( 0.00%) 1435 ( 0.00%) 68.33
realaud 6 ( 0.00%) 808 ( 0.00%) 134.67
halflif 794 ( 0.00%) 849265 ( 0.00%) 1069.60
starcra 50 ( 0.00%) 6013 ( 0.00%) 120.26
everque 2012 ( 0.00%) 751884 ( 0.00%) 373.70
unreal 10 ( 0.00%) 1140 ( 0.00%) 114.00
quake 11 ( 0.00%) 959 ( 0.00%) 87.18
cuseeme 3 ( 0.00%) 271 ( 0.00%) 90.33
other 1844776 ( 3.03%) 697800580 ( 1.56%) 378.26
icmp 11945589 ( 19.60%) 763310948 ( 1.71%) 63.90
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 31747 ( 0.05%) 6590834 ( 0.01%) 207.60
ip6 2244958 ( 3.68%) 2950470316 ( 6.62%) 1314.27
other 36687 ( 0.06%) 6884313 ( 0.02%) 187.65
frag 76167 ( 0.12%) 77260024 ( 0.17%) 1014.35
ip6 3788500 ( 6.22%) 3180640258 ( 7.13%) 839.55
tcp6 3685230 ( 6.05%) 3150894726 ( 7.07%) 855.01
http(s) 2326394 ( 3.82%) 2981710947 ( 6.69%) 1281.69
http(c) 361627 ( 0.59%) 34243284 ( 0.08%) 94.69
smtp 142 ( 0.00%) 73453 ( 0.00%) 517.27
ftp 1352 ( 0.00%) 131294 ( 0.00%) 97.11
ssh 841039 ( 1.38%) 74065251 ( 0.17%) 88.06
dns 96 ( 0.00%) 22354 ( 0.00%) 232.85
bgp 251 ( 0.00%) 172341 ( 0.00%) 686.62
other 154329 ( 0.25%) 60475802 ( 0.14%) 391.86
udp6 73320 ( 0.12%) 21312872 ( 0.05%) 290.68
dns 71072 ( 0.12%) 20987164 ( 0.05%) 295.29
starcra 1 ( 0.00%) 101 ( 0.00%) 101.00
everque 1 ( 0.00%) 101 ( 0.00%) 101.00
cuseeme 1 ( 0.00%) 109 ( 0.00%) 109.00
other 2245 ( 0.00%) 325397 ( 0.00%) 144.94
icmp6 24810 ( 0.04%) 2922874 ( 0.01%) 117.81
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5110 ( 0.01%) 5505706 ( 0.01%) 1077.44
tcpdump file: 201305311400.dump.gz (1335.88 MB)