Traffic Trace Info
DumpFile: 201307051400.dump
FileSize: 4841.38MB
Id: 201307051400
StartTime: Fri Jul 5 14:00:00 2013
EndTime: Fri Jul 5 14:15:00 2013
TotalTime: 900.06 seconds
TotalCapSize: -307.91MB CapLen: 96 bytes
# of packets: 69027912 (38834.09MB)
AvgRate: 361.92Mbps stddev:55.39M
IP flow (unique src/dst pair) Information
# of flows: 19102600 (avg. 3.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 3.9% 3.5% 3.4% 1.8% 1.6% 1.3% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 15168807
Top 10 bandwidth usage (bytes/total in %):
11.4% 5.7% 5.5% 5.0% 4.7% 4.7% 4.5% 4.1% 4.0% 3.9%
# of IPv6 addresses: 10941
Top 10 bandwidth usage (bytes/total in %):
15.9% 9.6% 9.3% 6.6% 6.4% 6.1% 5.0% 4.4% 4.2% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201307051400.pktlen.png)
detailed numbers
[ 32- 63]: 27150389
[ 64- 127]: 13599241
[ 128- 255]: 1090589
[ 256- 511]: 1245660
[ 512- 1023]: 1116601
[ 1024- 2047]: 24825432
Protocol Breakdown
![[protocol breakdown chart]](201307051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 69027912 (100.00%) 40720490807 (100.00%) 589.91
ip 62350502 ( 90.33%) 36087369478 ( 88.62%) 578.78
tcp 34535010 ( 50.03%) 31889333009 ( 78.31%) 923.39
http(s) 20522409 ( 29.73%) 26611486373 ( 65.35%) 1296.70
http(c) 11242208 ( 16.29%) 3372441024 ( 8.28%) 299.98
squid 17688 ( 0.03%) 3767520 ( 0.01%) 213.00
smtp 124671 ( 0.18%) 17850964 ( 0.04%) 143.18
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 79324 ( 0.11%) 5515738 ( 0.01%) 69.53
pop3 24418 ( 0.04%) 21358844 ( 0.05%) 874.72
imap 2592 ( 0.00%) 405839 ( 0.00%) 156.57
telnet 30785 ( 0.04%) 2262744 ( 0.01%) 73.50
ssh 39584 ( 0.06%) 16713508 ( 0.04%) 422.23
dns 7644 ( 0.01%) 3708003 ( 0.01%) 485.09
bgp 489 ( 0.00%) 88441 ( 0.00%) 180.86
napster 64 ( 0.00%) 10074 ( 0.00%) 157.41
realaud 314 ( 0.00%) 75616 ( 0.00%) 240.82
rtsp 40 ( 0.00%) 5440 ( 0.00%) 136.00
icecast 830 ( 0.00%) 67267 ( 0.00%) 81.04
hotline 1 ( 0.00%) 66 ( 0.00%) 66.00
other 2441947 ( 3.54%) 1833575428 ( 4.50%) 750.87
udp 2911618 ( 4.22%) 1285682004 ( 3.16%) 441.57
dns 1227471 ( 1.78%) 453012114 ( 1.11%) 369.06
rip 1 ( 0.00%) 79 ( 0.00%) 79.00
realaud 11 ( 0.00%) 1292 ( 0.00%) 117.45
halflif 27 ( 0.00%) 4475 ( 0.00%) 165.74
starcra 11 ( 0.00%) 1087 ( 0.00%) 98.82
everque 73 ( 0.00%) 10569 ( 0.00%) 144.78
unreal 23 ( 0.00%) 4763 ( 0.00%) 207.09
quake 15 ( 0.00%) 2113 ( 0.00%) 140.87
cuseeme 5 ( 0.00%) 476 ( 0.00%) 95.20
other 1676605 ( 2.43%) 824945023 ( 2.03%) 492.03
icmp 23291258 ( 33.74%) 1477035186 ( 3.63%) 63.42
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 21134 ( 0.03%) 7540552 ( 0.02%) 356.80
ip6 1500461 ( 2.17%) 1405720339 ( 3.45%) 936.86
other 90837 ( 0.13%) 22039228 ( 0.05%) 242.62
frag 347513 ( 0.50%) 464933243 ( 1.14%) 1337.89
ip6 6677408 ( 9.67%) 4633121209 ( 11.38%) 693.85
tcp6 6571450 ( 9.52%) 4601650465 ( 11.30%) 700.25
http(s) 3051560 ( 4.42%) 3936980534 ( 9.67%) 1290.15
http(c) 2588872 ( 3.75%) 229668462 ( 0.56%) 88.71
squid 76 ( 0.00%) 16724 ( 0.00%) 220.05
smtp 330 ( 0.00%) 203428 ( 0.00%) 616.45
ftp 25 ( 0.00%) 2209 ( 0.00%) 88.36
pop3 162 ( 0.00%) 96908 ( 0.00%) 598.20
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 367 ( 0.00%) 113747 ( 0.00%) 309.94
bgp 94 ( 0.00%) 21083 ( 0.00%) 224.29
other 929892 ( 1.35%) 434534920 ( 1.07%) 467.30
udp6 84288 ( 0.12%) 27841513 ( 0.07%) 330.31
dns 82020 ( 0.12%) 27592321 ( 0.07%) 336.41
everque 1 ( 0.00%) 173 ( 0.00%) 173.00
quake 1 ( 0.00%) 110 ( 0.00%) 110.00
other 2266 ( 0.00%) 248909 ( 0.00%) 109.85
icmp6 20380 ( 0.03%) 2411132 ( 0.01%) 118.31
pim6 29 ( 0.00%) 3944 ( 0.00%) 136.00
other6 1261 ( 0.00%) 1214155 ( 0.00%) 962.85
tcpdump file: 201307051400.dump.gz (1416.31 MB)