Traffic Trace Info
DumpFile: 201306151400.dump
FileSize: 3080.77MB
Id: 201306151400
StartTime: Sat Jun 15 14:00:01 2013
EndTime: Sat Jun 15 14:15:00 2013
TotalTime: 899.42 seconds
TotalCapSize: -1709.92MB CapLen: 96 bytes
# of packets: 45526645 (25781.75MB)
AvgRate: 240.47Mbps stddev:42.40M
IP flow (unique src/dst pair) Information
# of flows: 18123270 (avg. 2.51 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 3.9% 1.8% 1.8% 1.8% 1.7% 1.6% 1.5% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 14344436
Top 10 bandwidth usage (bytes/total in %):
21.6% 8.6% 6.7% 4.6% 4.4% 4.4% 4.1% 3.6% 3.5% 3.3%
# of IPv6 addresses: 8632
Top 10 bandwidth usage (bytes/total in %):
18.9% 13.2% 5.5% 3.9% 3.4% 3.2% 3.2% 3.2% 3.1% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201306151400.pktlen.png)
detailed numbers
[ 32- 63]: 20504749
[ 64- 127]: 6543484
[ 128- 255]: 590005
[ 256- 511]: 701822
[ 512- 1023]: 630327
[ 1024- 2047]: 16556258
Protocol Breakdown
![[protocol breakdown chart]](201306151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 45526645 (100.00%) 27034123487 (100.00%) 593.81
ip 42877462 ( 94.18%) 23903639989 ( 88.42%) 557.49
tcp 21835407 ( 47.96%) 21068986559 ( 77.93%) 964.90
http(s) 13095899 ( 28.77%) 17650165115 ( 65.29%) 1347.76
http(c) 6535226 ( 14.35%) 1679281809 ( 6.21%) 256.96
squid 31958 ( 0.07%) 26898512 ( 0.10%) 841.68
smtp 80708 ( 0.18%) 30835256 ( 0.11%) 382.06
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 4523 ( 0.01%) 336335 ( 0.00%) 74.36
pop3 1594 ( 0.00%) 523029 ( 0.00%) 328.12
imap 1870 ( 0.00%) 388076 ( 0.00%) 207.53
telnet 99311 ( 0.22%) 7290677 ( 0.03%) 73.41
ssh 81166 ( 0.18%) 9437723 ( 0.03%) 116.28
dns 3853 ( 0.01%) 2532415 ( 0.01%) 657.26
bgp 505 ( 0.00%) 97951 ( 0.00%) 193.96
napster 9 ( 0.00%) 4606 ( 0.00%) 511.78
realaud 23 ( 0.00%) 2194 ( 0.00%) 95.39
rtsp 4 ( 0.00%) 240 ( 0.00%) 60.00
icecast 535 ( 0.00%) 93068 ( 0.00%) 173.96
hotline 2 ( 0.00%) 124 ( 0.00%) 62.00
other 1898219 ( 4.17%) 1661099309 ( 6.14%) 875.08
udp 1501741 ( 3.30%) 603376536 ( 2.23%) 401.78
dns 673769 ( 1.48%) 186203198 ( 0.69%) 276.36
rip 13 ( 0.00%) 858 ( 0.00%) 66.00
realaud 10 ( 0.00%) 1115 ( 0.00%) 111.50
halflif 863 ( 0.00%) 75656 ( 0.00%) 87.67
starcra 48 ( 0.00%) 5858 ( 0.00%) 122.04
everque 27 ( 0.00%) 6109 ( 0.00%) 226.26
unreal 53 ( 0.00%) 4371 ( 0.00%) 82.47
quake 72 ( 0.00%) 5080 ( 0.00%) 70.56
cuseeme 1 ( 0.00%) 81 ( 0.00%) 81.00
other 822986 ( 1.81%) 416758560 ( 1.54%) 506.40
icmp 18462219 ( 40.55%) 1155908902 ( 4.28%) 62.61
ipip 185 ( 0.00%) 19240 ( 0.00%) 104.00
ipsec 20329 ( 0.04%) 6538982 ( 0.02%) 321.66
ip6 1004484 ( 2.21%) 1053335436 ( 3.90%) 1048.63
other 53097 ( 0.12%) 15474334 ( 0.06%) 291.44
frag 62086 ( 0.14%) 64419182 ( 0.24%) 1037.58
ip6 2649183 ( 5.82%) 3130483498 ( 11.58%) 1181.68
tcp6 2568822 ( 5.64%) 3110089943 ( 11.50%) 1210.71
http(s) 1839020 ( 4.04%) 2563845954 ( 9.48%) 1394.14
http(c) 370168 ( 0.81%) 29722603 ( 0.11%) 80.29
squid 37 ( 0.00%) 8238 ( 0.00%) 222.65
smtp 78 ( 0.00%) 23066 ( 0.00%) 295.72
ftp 673 ( 0.00%) 85556 ( 0.00%) 127.13
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 126 ( 0.00%) 36261 ( 0.00%) 287.79
bgp 93 ( 0.00%) 23345 ( 0.00%) 251.02
other 358555 ( 0.79%) 516332470 ( 1.91%) 1440.04
udp6 60222 ( 0.13%) 16406318 ( 0.06%) 272.43
dns 58303 ( 0.13%) 16156335 ( 0.06%) 277.11
halflif 1 ( 0.00%) 117 ( 0.00%) 117.00
everque 2 ( 0.00%) 212 ( 0.00%) 106.00
unreal 1 ( 0.00%) 96 ( 0.00%) 96.00
other 1915 ( 0.00%) 249558 ( 0.00%) 130.32
icmp6 17801 ( 0.04%) 2041087 ( 0.01%) 114.66
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2308 ( 0.01%) 1942070 ( 0.01%) 841.45
tcpdump file: 201306151400.dump.gz (936.22 MB)