Traffic Trace Info
DumpFile: 201307061400.dump
FileSize: 3055.02MB
Id: 201307061400
StartTime: Sat Jul 6 14:00:01 2013
EndTime: Sat Jul 6 14:15:00 2013
TotalTime: 899.55 seconds
TotalCapSize: -1737.24MB CapLen: 96 bytes
# of packets: 45630076 (20815.98MB)
AvgRate: 194.17Mbps stddev:41.35M
IP flow (unique src/dst pair) Information
# of flows: 18872766 (avg. 2.42 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.6% 6.1% 5.2% 2.9% 2.8% 2.6% 2.2% 1.9% 1.5% 1.5%
IP address Information
# of IPv4 addresses: 15066225
Top 10 bandwidth usage (bytes/total in %):
19.9% 8.9% 7.5% 7.0% 6.9% 6.4% 6.0% 5.6% 4.7% 3.1%
# of IPv6 addresses: 8354
Top 10 bandwidth usage (bytes/total in %):
55.7% 53.9% 14.5% 2.3% 1.8% 1.7% 1.7% 1.7% 1.4% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201307061400.pktlen.png)
detailed numbers
[ 32- 63]: 21405742
[ 64- 127]: 8700490
[ 128- 255]: 893261
[ 256- 511]: 1103084
[ 512- 1023]: 899158
[ 1024- 2047]: 12628341
Protocol Breakdown
![[protocol breakdown chart]](201307061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 45630076 (100.00%) 21827140616 (100.00%) 478.35
ip 44515310 ( 97.56%) 20776047014 ( 95.18%) 466.72
tcp 20961431 ( 45.94%) 18211141067 ( 83.43%) 868.79
http(s) 11034587 ( 24.18%) 13983526651 ( 64.06%) 1267.25
http(c) 6951178 ( 15.23%) 3052846148 ( 13.99%) 439.18
squid 11118 ( 0.02%) 2727263 ( 0.01%) 245.30
smtp 68824 ( 0.15%) 13807170 ( 0.06%) 200.62
ftp 151774 ( 0.33%) 11218673 ( 0.05%) 73.92
pop3 2175 ( 0.00%) 392609 ( 0.00%) 180.51
imap 1752 ( 0.00%) 190197 ( 0.00%) 108.56
telnet 13862 ( 0.03%) 1014686 ( 0.00%) 73.20
ssh 1094815 ( 2.40%) 122885171 ( 0.56%) 112.24
dns 3693 ( 0.01%) 557025 ( 0.00%) 150.83
bgp 491 ( 0.00%) 94358 ( 0.00%) 192.18
napster 26 ( 0.00%) 4465 ( 0.00%) 171.73
icecast 731 ( 0.00%) 59257 ( 0.00%) 81.06
other 1626405 ( 3.56%) 1021817394 ( 4.68%) 628.27
udp 2226856 ( 4.88%) 896681858 ( 4.11%) 402.67
dns 1210615 ( 2.65%) 578232822 ( 2.65%) 477.64
rip 1 ( 0.00%) 79 ( 0.00%) 79.00
realaud 13 ( 0.00%) 1375 ( 0.00%) 105.77
halflif 23 ( 0.00%) 1689 ( 0.00%) 73.43
starcra 20 ( 0.00%) 2236 ( 0.00%) 111.80
everque 47 ( 0.00%) 7400 ( 0.00%) 157.45
unreal 30 ( 0.00%) 2549 ( 0.00%) 84.97
quake 25 ( 0.00%) 2031 ( 0.00%) 81.24
cuseeme 4 ( 0.00%) 352 ( 0.00%) 88.00
other 1012410 ( 2.22%) 313816036 ( 1.44%) 309.97
icmp 20877560 ( 45.75%) 1312941780 ( 6.02%) 62.89
ipip 185 ( 0.00%) 19240 ( 0.00%) 104.00
ipsec 8270 ( 0.02%) 3604196 ( 0.02%) 435.82
ip6 347385 ( 0.76%) 328402865 ( 1.50%) 945.36
other 93623 ( 0.21%) 23256008 ( 0.11%) 248.40
frag 316254 ( 0.69%) 431126352 ( 1.98%) 1363.23
ip6 1114764 ( 2.44%) 1051093482 ( 4.82%) 942.88
tcp6 1038392 ( 2.28%) 1030131834 ( 4.72%) 992.05
http(s) 796821 ( 1.75%) 1007226720 ( 4.61%) 1264.06
http(c) 226266 ( 0.50%) 20848192 ( 0.10%) 92.14
squid 152 ( 0.00%) 23112 ( 0.00%) 152.05
smtp 80 ( 0.00%) 11662 ( 0.00%) 145.78
ftp 25 ( 0.00%) 2209 ( 0.00%) 88.36
pop3 119 ( 0.00%) 62667 ( 0.00%) 526.61
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 139 ( 0.00%) 32177 ( 0.00%) 231.49
bgp 99 ( 0.00%) 24720 ( 0.00%) 249.70
other 14619 ( 0.03%) 1887925 ( 0.01%) 129.14
udp6 57877 ( 0.13%) 18400758 ( 0.08%) 317.93
dns 54195 ( 0.12%) 17793237 ( 0.08%) 328.32
realaud 1 ( 0.00%) 101 ( 0.00%) 101.00
quake 3 ( 0.00%) 303 ( 0.00%) 101.00
other 3678 ( 0.01%) 607117 ( 0.00%) 165.07
icmp6 17996 ( 0.04%) 2093338 ( 0.01%) 116.32
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 469 ( 0.00%) 463472 ( 0.00%) 988.21
tcpdump file: 201307061400.dump.gz (962.99 MB)