Traffic Trace Info
DumpFile: 201306281400.dump
FileSize: 4171.75MB
Id: 201306281400
StartTime: Fri Jun 28 14:00:00 2013
EndTime: Fri Jun 28 14:15:00 2013
TotalTime: 900.32 seconds
TotalCapSize: -879.32MB CapLen: 96 bytes
# of packets: 62590578 (30911.81MB)
AvgRate: 288.07Mbps stddev:82.00M
IP flow (unique src/dst pair) Information
# of flows: 25727289 (avg. 2.43 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 4.4% 2.7% 2.1% 1.2% 1.1% 1.0% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 20209176
Top 10 bandwidth usage (bytes/total in %):
9.3% 8.0% 6.3% 6.2% 5.4% 4.9% 4.8% 4.7% 4.4% 3.3%
# of IPv6 addresses: 11034
Top 10 bandwidth usage (bytes/total in %):
12.3% 9.3% 6.2% 5.8% 5.4% 5.1% 4.3% 4.2% 3.9% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201306281400.pktlen.png)
detailed numbers
[ 32- 63]: 30233504
[ 64- 127]: 9519477
[ 128- 255]: 1114596
[ 256- 511]: 1568723
[ 512- 1023]: 1134413
[ 1024- 2047]: 19019865
Protocol Breakdown
![[protocol breakdown chart]](201306281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 62590578 (100.00%) 32413384885 (100.00%) 517.86
ip 60586173 ( 96.80%) 30629167681 ( 94.50%) 505.55
tcp 29271920 ( 46.77%) 27228069558 ( 84.00%) 930.18
http(s) 17110265 ( 27.34%) 22277715803 ( 68.73%) 1302.01
http(c) 8857355 ( 14.15%) 3013795093 ( 9.30%) 340.26
squid 28185 ( 0.05%) 11045038 ( 0.03%) 391.88
smtp 78941 ( 0.13%) 30596682 ( 0.09%) 387.59
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 83472 ( 0.13%) 5897939 ( 0.02%) 70.66
pop3 8823 ( 0.01%) 8753949 ( 0.03%) 992.17
imap 5110 ( 0.01%) 623083 ( 0.00%) 121.93
telnet 2289 ( 0.00%) 423246 ( 0.00%) 184.90
ssh 565745 ( 0.90%) 80626830 ( 0.25%) 142.51
dns 8018 ( 0.01%) 3891859 ( 0.01%) 485.39
bgp 499 ( 0.00%) 96331 ( 0.00%) 193.05
napster 4 ( 0.00%) 246 ( 0.00%) 61.50
realaud 22 ( 0.00%) 2111 ( 0.00%) 95.95
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 791 ( 0.00%) 55387 ( 0.00%) 70.02
hotline 5 ( 0.00%) 3217 ( 0.00%) 643.40
other 2522393 ( 4.03%) 1794542562 ( 5.54%) 711.44
udp 2565453 ( 4.10%) 753707938 ( 2.33%) 293.79
dns 1262802 ( 2.02%) 421210124 ( 1.30%) 333.55
realaud 11 ( 0.00%) 941 ( 0.00%) 85.55
halflif 97 ( 0.00%) 6400 ( 0.00%) 65.98
starcra 10 ( 0.00%) 1782 ( 0.00%) 178.20
everque 71 ( 0.00%) 8839 ( 0.00%) 124.49
unreal 88 ( 0.00%) 10602 ( 0.00%) 120.48
quake 121 ( 0.00%) 8566 ( 0.00%) 70.79
cuseeme 6 ( 0.00%) 826 ( 0.00%) 137.67
other 1300427 ( 2.08%) 330500964 ( 1.02%) 254.15
icmp 27722740 ( 44.29%) 1723744784 ( 5.32%) 62.18
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 51706 ( 0.08%) 20651372 ( 0.06%) 399.40
ip6 902371 ( 1.44%) 883808283 ( 2.73%) 979.43
other 71798 ( 0.11%) 19166476 ( 0.06%) 266.95
frag 165077 ( 0.26%) 224706942 ( 0.69%) 1361.23
ip6 2004405 ( 3.20%) 1784217204 ( 5.50%) 890.15
tcp6 1893563 ( 3.03%) 1752515925 ( 5.41%) 925.51
http(s) 1474839 ( 2.36%) 1632439011 ( 5.04%) 1106.86
http(c) 301338 ( 0.48%) 27751146 ( 0.09%) 92.09
smtp 185 ( 0.00%) 108339 ( 0.00%) 585.62
ftp 25 ( 0.00%) 2209 ( 0.00%) 88.36
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 387 ( 0.00%) 190525 ( 0.00%) 492.31
bgp 88 ( 0.00%) 17936 ( 0.00%) 203.82
other 116629 ( 0.19%) 91994309 ( 0.28%) 788.78
udp6 90376 ( 0.14%) 27562932 ( 0.09%) 304.98
dns 88726 ( 0.14%) 27378218 ( 0.08%) 308.57
realaud 1 ( 0.00%) 108 ( 0.00%) 108.00
halflif 1 ( 0.00%) 118 ( 0.00%) 118.00
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
other 1647 ( 0.00%) 184382 ( 0.00%) 111.95
icmp6 18682 ( 0.03%) 2294986 ( 0.01%) 122.84
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1754 ( 0.00%) 1839281 ( 0.01%) 1048.62
tcpdump file: 201306281400.dump.gz (1376.47 MB)