Traffic Trace Info
DumpFile: 201307071400.dump
FileSize: 3250.38MB
Id: 201307071400
StartTime: Sun Jul 7 14:00:00 2013
EndTime: Sun Jul 7 14:15:01 2013
TotalTime: 900.47 seconds
TotalCapSize: -1565.98MB CapLen: 96 bytes
# of packets: 47209081 (21826.16MB)
AvgRate: 203.34Mbps stddev:46.48M
IP flow (unique src/dst pair) Information
# of flows: 18979129 (avg. 2.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
18.1% 6.3% 2.4% 2.0% 1.8% 1.6% 1.6% 1.6% 1.5% 1.5%
IP address Information
# of IPv4 addresses: 15158688
Top 10 bandwidth usage (bytes/total in %):
13.9% 10.7% 8.2% 8.2% 7.1% 6.8% 4.0% 3.3% 3.2% 2.8%
# of IPv6 addresses: 8002
Top 10 bandwidth usage (bytes/total in %):
87.7% 79.1% 6.4% 4.3% 3.6% 1.9% 1.4% 0.9% 0.6% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201307071400.pktlen.png)
detailed numbers
[ 32- 63]: 22995006
[ 64- 127]: 8614635
[ 128- 255]: 624824
[ 256- 511]: 805232
[ 512- 1023]: 847332
[ 1024- 2047]: 13322052
Protocol Breakdown
![[protocol breakdown chart]](201307071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 47209081 (100.00%) 22886392584 (100.00%) 484.79
ip 43408186 ( 91.95%) 17640783361 ( 77.08%) 406.39
tcp 18480422 ( 39.15%) 15147727844 ( 66.19%) 819.66
http(s) 9256786 ( 19.61%) 11661882472 ( 50.96%) 1259.82
http(c) 7324510 ( 15.52%) 2474430157 ( 10.81%) 337.83
squid 108692 ( 0.23%) 11010559 ( 0.05%) 101.30
smtp 63980 ( 0.14%) 9943080 ( 0.04%) 155.41
ftp 143071 ( 0.30%) 10692070 ( 0.05%) 74.73
pop3 1434 ( 0.00%) 460249 ( 0.00%) 320.95
imap 1231 ( 0.00%) 154430 ( 0.00%) 125.45
telnet 66851 ( 0.14%) 4938160 ( 0.02%) 73.87
ssh 54860 ( 0.12%) 33399908 ( 0.15%) 608.82
dns 4143 ( 0.01%) 2392909 ( 0.01%) 577.58
bgp 495 ( 0.00%) 107183 ( 0.00%) 216.53
napster 24 ( 0.00%) 3102 ( 0.00%) 129.25
realaud 10 ( 0.00%) 1145 ( 0.00%) 114.50
rtsp 100 ( 0.00%) 6000 ( 0.00%) 60.00
icecast 22301 ( 0.05%) 17628612 ( 0.08%) 790.49
hotline 8 ( 0.00%) 865 ( 0.00%) 108.12
other 1431926 ( 3.03%) 920676943 ( 4.02%) 642.96
udp 2254717 ( 4.78%) 880041758 ( 3.85%) 390.31
dns 907762 ( 1.92%) 347934273 ( 1.52%) 383.29
realaud 15 ( 0.00%) 1550 ( 0.00%) 103.33
halflif 17 ( 0.00%) 1639 ( 0.00%) 96.41
starcra 13 ( 0.00%) 2736 ( 0.00%) 210.46
everque 38 ( 0.00%) 7071 ( 0.00%) 186.08
unreal 13 ( 0.00%) 997 ( 0.00%) 76.69
quake 16 ( 0.00%) 1314 ( 0.00%) 82.12
cuseeme 26 ( 0.00%) 1621 ( 0.00%) 62.35
other 1340065 ( 2.84%) 523550209 ( 2.29%) 390.69
icmp 20855376 ( 44.18%) 1304087293 ( 5.70%) 62.53
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 7984 ( 0.02%) 3556944 ( 0.02%) 445.51
ip6 1706855 ( 3.62%) 280764588 ( 1.23%) 164.49
other 102648 ( 0.22%) 24585774 ( 0.11%) 239.52
frag 150528 ( 0.32%) 205315932 ( 0.90%) 1363.97
ip6 3800893 ( 8.05%) 5245609103 ( 22.92%) 1380.10
tcp6 3732793 ( 7.91%) 5226387255 ( 22.84%) 1400.13
http(s) 563021 ( 1.19%) 706866099 ( 3.09%) 1255.49
http(c) 107119 ( 0.23%) 11451153 ( 0.05%) 106.90
squid 75 ( 0.00%) 16630 ( 0.00%) 221.73
smtp 160 ( 0.00%) 33479 ( 0.00%) 209.24
ftp 94 ( 0.00%) 11071 ( 0.00%) 117.78
pop3 124 ( 0.00%) 72144 ( 0.00%) 581.81
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 115 ( 0.00%) 29173 ( 0.00%) 253.68
bgp 99 ( 0.00%) 25255 ( 0.00%) 255.10
other 3061914 ( 6.49%) 4507869801 ( 19.70%) 1472.24
udp6 50264 ( 0.11%) 16254582 ( 0.07%) 323.38
dns 47648 ( 0.10%) 15972894 ( 0.07%) 335.23
realaud 1 ( 0.00%) 108 ( 0.00%) 108.00
other 2615 ( 0.01%) 281580 ( 0.00%) 107.68
icmp6 16766 ( 0.04%) 1946343 ( 0.01%) 116.09
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1039 ( 0.00%) 1016707 ( 0.00%) 978.54
tcpdump file: 201307071400.dump.gz (953.70 MB)