Traffic Trace Info
DumpFile: 201306271400.dump
FileSize: 6349.89MB
Id: 201306271400
StartTime: Thu Jun 27 14:00:01 2013
EndTime: Thu Jun 27 14:15:00 2013
TotalTime: 899.85 seconds
TotalCapSize: 892.60MB CapLen: 96 bytes
# of packets: 89213468 (56027.27MB)
AvgRate: 522.11Mbps stddev:77.37M
IP flow (unique src/dst pair) Information
# of flows: 29128252 (avg. 3.06 pkts/flow)
Top 10 big flow size (bytes/total in %):
24.7% 10.1% 5.7% 1.8% 1.7% 1.5% 0.9% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 23006578
Top 10 bandwidth usage (bytes/total in %):
17.7% 9.3% 8.1% 5.9% 5.7% 5.1% 4.5% 3.1% 3.0% 2.9%
# of IPv6 addresses: 10822
Top 10 bandwidth usage (bytes/total in %):
89.5% 63.5% 26.0% 0.8% 0.8% 0.8% 0.7% 0.5% 0.4% 0.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201306271400.pktlen.png)
detailed numbers
[ 32- 63]: 36480248
[ 64- 127]: 11779462
[ 128- 255]: 1205799
[ 256- 511]: 2613562
[ 512- 1023]: 1369601
[ 1024- 2047]: 35764796
Protocol Breakdown
![[protocol breakdown chart]](201306271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 89213468 (100.00%) 58748847062 (100.00%) 658.52
ip 72342312 ( 81.09%) 35873755603 ( 61.06%) 495.89
tcp 34086334 ( 38.21%) 32307767260 ( 54.99%) 947.82
http(s) 21309257 ( 23.89%) 27578005802 ( 46.94%) 1294.18
http(c) 10786862 ( 12.09%) 3795239001 ( 6.46%) 351.84
squid 24367 ( 0.03%) 22120448 ( 0.04%) 907.80
smtp 70963 ( 0.08%) 18889136 ( 0.03%) 266.18
nntp 9 ( 0.00%) 540 ( 0.00%) 60.00
ftp 34024 ( 0.04%) 2265508 ( 0.00%) 66.59
pop3 4739 ( 0.01%) 2646392 ( 0.00%) 558.43
imap 5996 ( 0.01%) 2518586 ( 0.00%) 420.04
telnet 67850 ( 0.08%) 4996190 ( 0.01%) 73.64
ssh 18626 ( 0.02%) 5760963 ( 0.01%) 309.30
dns 3132 ( 0.00%) 367885 ( 0.00%) 117.46
bgp 512 ( 0.00%) 101328 ( 0.00%) 197.91
napster 29 ( 0.00%) 1943 ( 0.00%) 67.00
realaud 39 ( 0.00%) 5166 ( 0.00%) 132.46
rtsp 9 ( 0.00%) 540 ( 0.00%) 60.00
icecast 34409 ( 0.04%) 22624111 ( 0.04%) 657.51
other 1725439 ( 1.93%) 852219401 ( 1.45%) 493.91
udp 2358557 ( 2.64%) 783612438 ( 1.33%) 332.24
dns 871448 ( 0.98%) 266328896 ( 0.45%) 305.62
rip 26 ( 0.00%) 1716 ( 0.00%) 66.00
realaud 14 ( 0.00%) 1536 ( 0.00%) 109.71
halflif 2431 ( 0.00%) 162011 ( 0.00%) 66.64
starcra 17 ( 0.00%) 3434 ( 0.00%) 202.00
everque 3398 ( 0.00%) 2631865 ( 0.00%) 774.53
unreal 23 ( 0.00%) 3452 ( 0.00%) 150.09
quake 311 ( 0.00%) 19991 ( 0.00%) 64.28
cuseeme 3 ( 0.00%) 580 ( 0.00%) 193.33
other 1480484 ( 1.66%) 514257747 ( 0.88%) 347.36
icmp 35089916 ( 39.33%) 2199137132 ( 3.74%) 62.67
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 19023 ( 0.02%) 7302254 ( 0.01%) 383.86
ip6 717891 ( 0.80%) 554784009 ( 0.94%) 772.80
other 70407 ( 0.08%) 21133350 ( 0.04%) 300.16
frag 48469 ( 0.05%) 66450700 ( 0.11%) 1370.99
ip6 16871156 ( 18.91%) 22875091459 ( 38.94%) 1355.87
tcp6 16729552 ( 18.75%) 22791603959 ( 38.79%) 1362.36
http(s) 15898066 ( 17.82%) 22468662969 ( 38.25%) 1413.30
http(c) 480960 ( 0.54%) 42704668 ( 0.07%) 88.79
smtp 443 ( 0.00%) 222969 ( 0.00%) 503.32
ftp 24 ( 0.00%) 2147 ( 0.00%) 89.46
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 170 ( 0.00%) 37785 ( 0.00%) 222.26
bgp 98 ( 0.00%) 23668 ( 0.00%) 241.51
other 349719 ( 0.39%) 279937303 ( 0.48%) 800.46
udp6 77794 ( 0.09%) 22132414 ( 0.04%) 284.50
dns 75989 ( 0.09%) 21935850 ( 0.04%) 288.67
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
unreal 1 ( 0.00%) 173 ( 0.00%) 173.00
other 1803 ( 0.00%) 196284 ( 0.00%) 108.87
icmp6 13379 ( 0.01%) 1582022 ( 0.00%) 118.25
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 50401 ( 0.06%) 59768984 ( 0.10%) 1185.87
tcpdump file: 201306271400.dump.gz (1783.23 MB)