Traffic Trace Info
DumpFile: 201307021400.dump
FileSize: 4896.55MB
Id: 201307021400
StartTime: Tue Jul 2 14:00:01 2013
EndTime: Tue Jul 2 14:15:00 2013
TotalTime: 899.68 seconds
TotalCapSize: -309.48MB CapLen: 96 bytes
# of packets: 72746321 (36489.66MB)
AvgRate: 340.29Mbps stddev:44.88M
IP flow (unique src/dst pair) Information
# of flows: 26608275 (avg. 2.73 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.8% 1.5% 1.3% 1.1% 1.0% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 20936846
Top 10 bandwidth usage (bytes/total in %):
11.1% 7.2% 7.0% 5.4% 4.4% 3.3% 2.6% 2.3% 2.2% 2.2%
# of IPv6 addresses: 12512
Top 10 bandwidth usage (bytes/total in %):
10.3% 6.8% 5.7% 5.3% 4.1% 4.0% 2.8% 2.7% 2.7% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201307021400.pktlen.png)
detailed numbers
[ 32- 63]: 33672165
[ 64- 127]: 12456572
[ 128- 255]: 1129908
[ 256- 511]: 1469566
[ 512- 1023]: 1222038
[ 1024- 2047]: 22796072
Protocol Breakdown
![[protocol breakdown chart]](201307021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 72746321 (100.00%) 38262177331 (100.00%) 525.97
ip 66019710 ( 90.75%) 32891734980 ( 85.96%) 498.21
tcp 32369528 ( 44.50%) 29120471630 ( 76.11%) 899.63
http(s) 18400278 ( 25.29%) 23473916467 ( 61.35%) 1275.74
http(c) 10629757 ( 14.61%) 3143845666 ( 8.22%) 295.76
squid 14752 ( 0.02%) 8154443 ( 0.02%) 552.77
smtp 70616 ( 0.10%) 22785361 ( 0.06%) 322.67
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 98106 ( 0.13%) 6710046 ( 0.02%) 68.40
pop3 7407 ( 0.01%) 4435313 ( 0.01%) 598.80
imap 2037 ( 0.00%) 310819 ( 0.00%) 152.59
telnet 30912 ( 0.04%) 2269977 ( 0.01%) 73.43
ssh 28143 ( 0.04%) 5987523 ( 0.02%) 212.75
dns 4725 ( 0.01%) 650006 ( 0.00%) 137.57
bgp 538 ( 0.00%) 119962 ( 0.00%) 222.98
napster 48 ( 0.00%) 3374 ( 0.00%) 70.29
realaud 41 ( 0.00%) 4405 ( 0.00%) 107.44
rtsp 408 ( 0.00%) 578403 ( 0.00%) 1417.65
icecast 74905 ( 0.10%) 60553184 ( 0.16%) 808.40
hotline 12 ( 0.00%) 2596 ( 0.00%) 216.33
other 3006841 ( 4.13%) 2390143965 ( 6.25%) 794.90
udp 3206838 ( 4.41%) 1393223858 ( 3.64%) 434.45
dns 1246710 ( 1.71%) 406261557 ( 1.06%) 325.87
rip 3 ( 0.00%) 237 ( 0.00%) 79.00
realaud 13 ( 0.00%) 1134 ( 0.00%) 87.23
halflif 1173 ( 0.00%) 102303 ( 0.00%) 87.21
starcra 19 ( 0.00%) 1392 ( 0.00%) 73.26
everque 95 ( 0.00%) 16134 ( 0.00%) 169.83
unreal 19 ( 0.00%) 1563 ( 0.00%) 82.26
quake 38 ( 0.00%) 3114 ( 0.00%) 81.95
cuseeme 5 ( 0.00%) 387 ( 0.00%) 77.40
other 1936027 ( 2.66%) 981860743 ( 2.57%) 507.15
icmp 29538382 ( 40.60%) 1837920990 ( 4.80%) 62.22
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 26220 ( 0.04%) 9768584 ( 0.03%) 372.56
ip6 794238 ( 1.09%) 508929345 ( 1.33%) 640.78
other 84320 ( 0.12%) 21401413 ( 0.06%) 253.81
frag 242323 ( 0.33%) 256523581 ( 0.67%) 1058.60
ip6 6726611 ( 9.25%) 5370442351 ( 14.04%) 798.39
tcp6 6568213 ( 9.03%) 5291752628 ( 13.83%) 805.66
http(s) 3861309 ( 5.31%) 5019998721 ( 13.12%) 1300.08
http(c) 644587 ( 0.89%) 56601126 ( 0.15%) 87.81
smtp 97 ( 0.00%) 18257 ( 0.00%) 188.22
ftp 15123 ( 0.02%) 1662616 ( 0.00%) 109.94
pop3 48 ( 0.00%) 41459 ( 0.00%) 863.73
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 368 ( 0.00%) 201888 ( 0.00%) 548.61
bgp 91 ( 0.00%) 21269 ( 0.00%) 233.73
other 2046518 ( 2.81%) 213194842 ( 0.56%) 104.17
udp6 111081 ( 0.15%) 40067653 ( 0.10%) 360.71
dns 105656 ( 0.15%) 36311466 ( 0.09%) 343.68
everque 1 ( 0.00%) 113 ( 0.00%) 113.00
other 5424 ( 0.01%) 3756074 ( 0.01%) 692.49
icmp6 16521 ( 0.02%) 1989218 ( 0.01%) 120.41
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 30766 ( 0.04%) 36628772 ( 0.10%) 1190.56
tcpdump file: 201307021400.dump.gz (1568.56 MB)