Traffic Trace Info
DumpFile: 201307011400.dump
FileSize: 5318.81MB
Id: 201307011400
StartTime: Mon Jul 1 14:00:00 2013
EndTime: Mon Jul 1 14:15:01 2013
TotalTime: 900.51 seconds
TotalCapSize: 7.44MB CapLen: 96 bytes
# of packets: 79650388 (40759.91MB)
AvgRate: 379.71Mbps stddev:61.18M
IP flow (unique src/dst pair) Information
# of flows: 29026094 (avg. 2.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.4% 2.7% 1.3% 1.2% 1.2% 1.1% 1.0% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 23027981
Top 10 bandwidth usage (bytes/total in %):
20.6% 13.9% 6.7% 5.8% 5.2% 3.8% 3.3% 3.1% 3.0% 1.9%
# of IPv6 addresses: 10722
Top 10 bandwidth usage (bytes/total in %):
41.0% 13.8% 13.6% 8.6% 6.1% 5.2% 4.7% 4.5% 4.4% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201307011400.pktlen.png)
detailed numbers
[ 32- 63]: 36788856
[ 64- 127]: 12740891
[ 128- 255]: 1166311
[ 256- 511]: 1800735
[ 512- 1023]: 1269136
[ 1024- 2047]: 25884459
Protocol Breakdown
![[protocol breakdown chart]](201307011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 79650388 (100.00%) 42739866618 (100.00%) 536.59
ip 75391515 ( 94.65%) 38575030818 ( 90.26%) 511.66
tcp 37998920 ( 47.71%) 34331040348 ( 80.33%) 903.47
http(s) 16885938 ( 21.20%) 21490672344 ( 50.28%) 1272.70
http(c) 13883744 ( 17.43%) 6181059005 ( 14.46%) 445.20
squid 169365 ( 0.21%) 190486999 ( 0.45%) 1124.71
smtp 105114 ( 0.13%) 20183022 ( 0.05%) 192.01
nntp 3 ( 0.00%) 180 ( 0.00%) 60.00
ftp 106237 ( 0.13%) 7379661 ( 0.02%) 69.46
pop3 4834 ( 0.01%) 1818667 ( 0.00%) 376.22
imap 2059 ( 0.00%) 294346 ( 0.00%) 142.96
telnet 1664 ( 0.00%) 118503 ( 0.00%) 71.22
ssh 82600 ( 0.10%) 61616858 ( 0.14%) 745.97
dns 3157 ( 0.00%) 430273 ( 0.00%) 136.29
bgp 563 ( 0.00%) 137785 ( 0.00%) 244.73
napster 16 ( 0.00%) 1769 ( 0.00%) 110.56
realaud 70 ( 0.00%) 8612 ( 0.00%) 123.03
rtsp 7406 ( 0.01%) 492738 ( 0.00%) 66.53
icecast 30268 ( 0.04%) 23771628 ( 0.06%) 785.37
hotline 2 ( 0.00%) 124 ( 0.00%) 62.00
other 6715879 ( 8.43%) 6352567774 ( 14.86%) 945.90
udp 3400768 ( 4.27%) 1763611644 ( 4.13%) 518.59
dns 1114996 ( 1.40%) 368845895 ( 0.86%) 330.80
rip 2 ( 0.00%) 145 ( 0.00%) 72.50
realaud 13 ( 0.00%) 1247 ( 0.00%) 95.92
halflif 1985 ( 0.00%) 120367 ( 0.00%) 60.64
starcra 55 ( 0.00%) 6182 ( 0.00%) 112.40
everque 77 ( 0.00%) 12594 ( 0.00%) 163.56
unreal 20 ( 0.00%) 1877 ( 0.00%) 93.85
quake 1768 ( 0.00%) 917379 ( 0.00%) 518.88
cuseeme 3 ( 0.00%) 276 ( 0.00%) 92.00
other 2279699 ( 2.86%) 1391373113 ( 3.26%) 610.33
icmp 33174263 ( 41.65%) 2065058042 ( 4.83%) 62.25
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 92203 ( 0.12%) 29287914 ( 0.07%) 317.65
ip6 632904 ( 0.79%) 363870725 ( 0.85%) 574.92
other 92272 ( 0.12%) 22142875 ( 0.05%) 239.97
frag 129724 ( 0.16%) 172145095 ( 0.40%) 1327.01
ip6 4258873 ( 5.35%) 4164835800 ( 9.74%) 977.92
tcp6 2698672 ( 3.39%) 2377855583 ( 5.56%) 881.12
http(s) 1893685 ( 2.38%) 2097030317 ( 4.91%) 1107.38
http(c) 406901 ( 0.51%) 38006203 ( 0.09%) 93.40
smtp 809 ( 0.00%) 310709 ( 0.00%) 384.07
ftp 289 ( 0.00%) 32871 ( 0.00%) 113.74
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 741 ( 0.00%) 457029 ( 0.00%) 616.77
bgp 102 ( 0.00%) 28139 ( 0.00%) 275.87
other 396073 ( 0.50%) 241977865 ( 0.57%) 610.94
udp6 88455 ( 0.11%) 25339260 ( 0.06%) 286.46
dns 86561 ( 0.11%) 25128793 ( 0.06%) 290.30
everque 2 ( 0.00%) 217 ( 0.00%) 108.50
quake 2 ( 0.00%) 214 ( 0.00%) 107.00
other 1890 ( 0.00%) 210036 ( 0.00%) 111.13
icmp6 16310 ( 0.02%) 1984182 ( 0.00%) 121.65
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1455406 ( 1.83%) 1759652695 ( 4.12%) 1209.05
tcpdump file: 201307011400.dump.gz (1702.87 MB)