Traffic Trace Info
DumpFile: 201306091400.dump
FileSize: 2602.81MB
Id: 201306091400
StartTime: Sun Jun 9 14:00:00 2013
EndTime: Sun Jun 9 14:15:00 2013
TotalTime: 899.65 seconds
TotalCapSize: 1977.82MB CapLen: 96 bytes
# of packets: 40958657 (18846.72MB)
AvgRate: 175.77Mbps stddev:31.79M
IP flow (unique src/dst pair) Information
# of flows: 19348059 (avg. 2.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
15.2% 9.3% 2.5% 1.7% 1.5% 1.3% 1.0% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 15500652
Top 10 bandwidth usage (bytes/total in %):
16.0% 16.0% 9.8% 9.5% 9.5% 6.2% 4.5% 4.1% 2.9% 2.8%
# of IPv6 addresses: 7889
Top 10 bandwidth usage (bytes/total in %):
26.0% 26.0% 25.2% 5.7% 5.0% 4.3% 4.0% 4.0% 3.8% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201306091400.pktlen.png)
detailed numbers
[ 32- 63]: 22153197
[ 64- 127]: 5123976
[ 128- 255]: 682919
[ 256- 511]: 479267
[ 512- 1023]: 943915
[ 1024- 2047]: 11575383
Protocol Breakdown
![[protocol breakdown chart]](201306091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40958657 (100.00%) 19762220870 (100.00%) 482.49
ip 40345215 ( 98.50%) 19201263181 ( 97.16%) 475.92
tcp 16281567 ( 39.75%) 15564971397 ( 78.76%) 955.99
http(s) 6689886 ( 16.33%) 8780912402 ( 44.43%) 1312.57
http(c) 4778858 ( 11.67%) 2750355129 ( 13.92%) 575.53
squid 45311 ( 0.11%) 12430622 ( 0.06%) 274.34
smtp 62124 ( 0.15%) 10648376 ( 0.05%) 171.41
nntp 3 ( 0.00%) 180 ( 0.00%) 60.00
ftp 28692 ( 0.07%) 1905962 ( 0.01%) 66.43
pop3 2200 ( 0.01%) 584194 ( 0.00%) 265.54
imap 1683 ( 0.00%) 973878 ( 0.00%) 578.66
telnet 2571 ( 0.01%) 192840 ( 0.00%) 75.01
ssh 149249 ( 0.36%) 19653331 ( 0.10%) 131.68
dns 4795 ( 0.01%) 2216781 ( 0.01%) 462.31
bgp 516 ( 0.00%) 108714 ( 0.00%) 210.69
napster 10 ( 0.00%) 971 ( 0.00%) 97.10
realaud 45 ( 0.00%) 6672 ( 0.00%) 148.27
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 48352 ( 0.12%) 42550979 ( 0.22%) 880.03
hotline 4 ( 0.00%) 240 ( 0.00%) 60.00
other 4467267 ( 10.91%) 3942430066 ( 19.95%) 882.51
udp 3585372 ( 8.75%) 2059386669 ( 10.42%) 574.39
dns 601642 ( 1.47%) 191531157 ( 0.97%) 318.35
rip 1 ( 0.00%) 72 ( 0.00%) 72.00
realaud 1 ( 0.00%) 91 ( 0.00%) 91.00
halflif 2 ( 0.00%) 180 ( 0.00%) 90.00
starcra 8 ( 0.00%) 1614 ( 0.00%) 201.75
everque 273 ( 0.00%) 26747 ( 0.00%) 97.97
unreal 13 ( 0.00%) 1484 ( 0.00%) 114.15
quake 6 ( 0.00%) 552 ( 0.00%) 92.00
cuseeme 5 ( 0.00%) 457 ( 0.00%) 91.40
other 2980533 ( 7.28%) 1867581257 ( 9.45%) 626.59
icmp 20071226 ( 49.00%) 1250948207 ( 6.33%) 62.33
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 7109 ( 0.02%) 3172654 ( 0.02%) 446.29
ip6 348671 ( 0.85%) 309337189 ( 1.57%) 887.19
other 51086 ( 0.12%) 13427905 ( 0.07%) 262.85
frag 61822 ( 0.15%) 63744785 ( 0.32%) 1031.10
ip6 613442 ( 1.50%) 560957689 ( 2.84%) 914.44
tcp6 519945 ( 1.27%) 522141930 ( 2.64%) 1004.23
http(s) 296454 ( 0.72%) 360076495 ( 1.82%) 1214.61
http(c) 113301 ( 0.28%) 10053268 ( 0.05%) 88.73
smtp 661 ( 0.00%) 74677 ( 0.00%) 112.98
ftp 256 ( 0.00%) 31309 ( 0.00%) 122.30
ssh 196 ( 0.00%) 63625 ( 0.00%) 324.62
dns 111 ( 0.00%) 30393 ( 0.00%) 273.81
bgp 91 ( 0.00%) 21815 ( 0.00%) 239.73
other 108875 ( 0.27%) 151790348 ( 0.77%) 1394.17
udp6 64044 ( 0.16%) 34654424 ( 0.18%) 541.10
dns 42357 ( 0.10%) 13191571 ( 0.07%) 311.44
quake 1 ( 0.00%) 113 ( 0.00%) 113.00
cuseeme 1 ( 0.00%) 106 ( 0.00%) 106.00
other 21685 ( 0.05%) 21462634 ( 0.11%) 989.75
icmp6 28405 ( 0.07%) 3205552 ( 0.02%) 112.85
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1017 ( 0.00%) 951567 ( 0.00%) 935.66
tcpdump file: 201306091400.dump.gz (831.42 MB)