Traffic Trace Info
DumpFile: 201307041400.dump
FileSize: 4769.90MB
Id: 201307041400
StartTime: Thu Jul 4 14:00:01 2013
EndTime: Thu Jul 4 14:15:00 2013
TotalTime: 899.82 seconds
TotalCapSize: -362.64MB CapLen: 96 bytes
# of packets: 67929894 (40650.49MB)
AvgRate: 379.05Mbps stddev:65.69M
IP flow (unique src/dst pair) Information
# of flows: 18882163 (avg. 3.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.5% 3.4% 2.1% 1.8% 1.6% 1.4% 1.3% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 15000651
Top 10 bandwidth usage (bytes/total in %):
7.6% 6.3% 6.2% 5.8% 4.5% 4.2% 4.0% 3.8% 3.4% 3.3%
# of IPv6 addresses: 10988
Top 10 bandwidth usage (bytes/total in %):
14.8% 9.3% 5.0% 4.2% 3.3% 3.2% 3.1% 2.8% 2.7% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201307041400.pktlen.png)
detailed numbers
[ 32- 63]: 23828176
[ 64- 127]: 14378034
[ 128- 255]: 1264091
[ 256- 511]: 1201490
[ 512- 1023]: 1226535
[ 1024- 2047]: 26031568
Protocol Breakdown
![[protocol breakdown chart]](201307041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 67929894 (100.00%) 42625130962 (100.00%) 627.49
ip 62296567 ( 91.71%) 38355349878 ( 89.98%) 615.69
tcp 36960913 ( 54.41%) 34826430215 ( 81.70%) 942.25
http(s) 21077973 ( 31.03%) 27246242077 ( 63.92%) 1292.64
http(c) 11534287 ( 16.98%) 3624989682 ( 8.50%) 314.28
squid 90261 ( 0.13%) 14880245 ( 0.03%) 164.86
smtp 72677 ( 0.11%) 21266307 ( 0.05%) 292.61
nntp 7 ( 0.00%) 420 ( 0.00%) 60.00
ftp 72465 ( 0.11%) 5212767 ( 0.01%) 71.93
pop3 26699 ( 0.04%) 3807085 ( 0.01%) 142.59
imap 2509 ( 0.00%) 295822 ( 0.00%) 117.90
telnet 24784 ( 0.04%) 1801754 ( 0.00%) 72.70
ssh 140138 ( 0.21%) 120159429 ( 0.28%) 857.44
dns 3286 ( 0.00%) 437301 ( 0.00%) 133.08
bgp 548 ( 0.00%) 142667 ( 0.00%) 260.34
napster 46 ( 0.00%) 7664 ( 0.00%) 166.61
realaud 7 ( 0.00%) 432 ( 0.00%) 61.71
rtsp 45 ( 0.00%) 5740 ( 0.00%) 127.56
icecast 15369 ( 0.02%) 13606951 ( 0.03%) 885.35
hotline 9 ( 0.00%) 1243 ( 0.00%) 138.11
other 3899731 ( 5.74%) 3773568309 ( 8.85%) 967.65
udp 3248030 ( 4.78%) 1382890198 ( 3.24%) 425.76
dns 1269835 ( 1.87%) 405586323 ( 0.95%) 319.40
rip 25 ( 0.00%) 1674 ( 0.00%) 66.96
realaud 41 ( 0.00%) 3341 ( 0.00%) 81.49
halflif 943 ( 0.00%) 82393 ( 0.00%) 87.37
starcra 7 ( 0.00%) 1044 ( 0.00%) 149.14
everque 51 ( 0.00%) 8278 ( 0.00%) 162.31
unreal 28 ( 0.00%) 7178 ( 0.00%) 256.36
quake 14 ( 0.00%) 1121 ( 0.00%) 80.07
cuseeme 6 ( 0.00%) 583 ( 0.00%) 97.17
other 1970973 ( 2.90%) 970668475 ( 2.28%) 492.48
icmp 20864061 ( 30.71%) 1317446441 ( 3.09%) 63.14
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 42643 ( 0.06%) 13788394 ( 0.03%) 323.34
ip6 1083322 ( 1.59%) 789926082 ( 1.85%) 729.17
other 97414 ( 0.14%) 24849388 ( 0.06%) 255.09
frag 174211 ( 0.26%) 199300648 ( 0.47%) 1144.02
ip6 5633327 ( 8.29%) 4269781084 ( 10.02%) 757.95
tcp6 5508048 ( 8.11%) 4217741261 ( 9.89%) 765.74
http(s) 2834309 ( 4.17%) 3503980618 ( 8.22%) 1236.27
http(c) 403470 ( 0.59%) 42941906 ( 0.10%) 106.43
squid 4 ( 0.00%) 376 ( 0.00%) 94.00
smtp 189 ( 0.00%) 93374 ( 0.00%) 494.04
ftp 253 ( 0.00%) 25920 ( 0.00%) 102.45
pop3 78 ( 0.00%) 9006 ( 0.00%) 115.46
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 903 ( 0.00%) 640199 ( 0.00%) 708.97
bgp 93 ( 0.00%) 27948 ( 0.00%) 300.52
other 2268677 ( 3.34%) 670009464 ( 1.57%) 295.33
udp6 87880 ( 0.13%) 27299745 ( 0.06%) 310.65
dns 85491 ( 0.13%) 27043866 ( 0.06%) 316.34
quake 1 ( 0.00%) 117 ( 0.00%) 117.00
cuseeme 1 ( 0.00%) 107 ( 0.00%) 107.00
other 2387 ( 0.00%) 255655 ( 0.00%) 107.10
icmp6 16026 ( 0.02%) 1946018 ( 0.00%) 121.43
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 21343 ( 0.03%) 22789980 ( 0.05%) 1067.80
tcpdump file: 201307041400.dump.gz (1443.27 MB)