Traffic Trace Info
DumpFile: 201307121400.dump
FileSize: 4909.29MB
Id: 201307121400
StartTime: Fri Jul 12 14:00:01 2013
EndTime: Fri Jul 12 14:15:00 2013
TotalTime: 899.66 seconds
TotalCapSize: -206.79MB CapLen: 96 bytes
# of packets: 66851046 (47153.01MB)
AvgRate: 439.82Mbps stddev:64.51M
IP flow (unique src/dst pair) Information
# of flows: 19890709 (avg. 3.36 pkts/flow)
Top 10 big flow size (bytes/total in %):
17.9% 16.9% 2.0% 1.2% 0.8% 0.8% 0.8% 0.7% 0.7% 0.5%
IP address Information
# of IPv4 addresses: 15600290
Top 10 bandwidth usage (bytes/total in %):
10.3% 9.9% 8.6% 6.8% 6.1% 4.7% 3.6% 3.6% 2.4% 2.3%
# of IPv6 addresses: 10995
Top 10 bandwidth usage (bytes/total in %):
76.2% 39.7% 39.2% 2.6% 2.6% 1.8% 1.7% 1.6% 1.4% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201307121400.pktlen.png)
detailed numbers
[ 32- 63]: 23848057
[ 64- 127]: 9069300
[ 128- 255]: 837662
[ 256- 511]: 1580100
[ 512- 1023]: 850520
[ 1024- 2047]: 30665407
Protocol Breakdown
![[protocol breakdown chart]](201307121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 66851046 (100.00%) 49443512843 (100.00%) 739.61
ip 50295164 ( 75.23%) 26899858822 ( 54.41%) 534.84
tcp 26343813 ( 39.41%) 24396822499 ( 49.34%) 926.09
http(s) 16721053 ( 25.01%) 21791237361 ( 44.07%) 1303.22
http(c) 7651204 ( 11.45%) 1754006506 ( 3.55%) 229.25
squid 223568 ( 0.33%) 36019278 ( 0.07%) 161.11
smtp 47589 ( 0.07%) 12246863 ( 0.02%) 257.35
ftp 33145 ( 0.05%) 2614207 ( 0.01%) 78.87
pop3 3771 ( 0.01%) 2928593 ( 0.01%) 776.61
imap 5461 ( 0.01%) 2819887 ( 0.01%) 516.37
telnet 114413 ( 0.17%) 8448743 ( 0.02%) 73.84
ssh 16823 ( 0.03%) 5107482 ( 0.01%) 303.60
dns 1803 ( 0.00%) 239951 ( 0.00%) 133.08
bgp 578 ( 0.00%) 150466 ( 0.00%) 260.32
napster 8 ( 0.00%) 852 ( 0.00%) 106.50
realaud 9 ( 0.00%) 1034 ( 0.00%) 114.89
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 50026 ( 0.07%) 43250579 ( 0.09%) 864.56
hotline 2 ( 0.00%) 124 ( 0.00%) 62.00
other 1474358 ( 2.21%) 737750453 ( 1.49%) 500.39
udp 1988983 ( 2.98%) 767981853 ( 1.55%) 386.12
dns 791182 ( 1.18%) 197597171 ( 0.40%) 249.75
rip 1 ( 0.00%) 79 ( 0.00%) 79.00
realaud 4 ( 0.00%) 1465 ( 0.00%) 366.25
halflif 46 ( 0.00%) 7047 ( 0.00%) 153.20
starcra 5 ( 0.00%) 803 ( 0.00%) 160.60
everque 82 ( 0.00%) 9483 ( 0.00%) 115.65
unreal 24 ( 0.00%) 1912 ( 0.00%) 79.67
quake 8 ( 0.00%) 749 ( 0.00%) 93.62
cuseeme 3 ( 0.00%) 267 ( 0.00%) 89.00
other 1197096 ( 1.79%) 570194952 ( 1.15%) 476.32
icmp 21031363 ( 31.46%) 1337801779 ( 2.71%) 63.61
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 40189 ( 0.06%) 17785730 ( 0.04%) 442.55
ip6 796522 ( 1.19%) 355507648 ( 0.72%) 446.32
other 94110 ( 0.14%) 23940153 ( 0.05%) 254.38
frag 150303 ( 0.22%) 186670664 ( 0.38%) 1241.96
ip6 16555882 ( 24.77%) 22543654021 ( 45.59%) 1361.67
tcp6 16450927 ( 24.61%) 22511567903 ( 45.53%) 1368.41
http(s) 15815513 ( 23.66%) 22400816440 ( 45.31%) 1416.38
http(c) 446559 ( 0.67%) 45578106 ( 0.09%) 102.07
smtp 10684 ( 0.02%) 2397800 ( 0.00%) 224.43
ftp 1067 ( 0.00%) 112797 ( 0.00%) 105.71
pop3 21 ( 0.00%) 2188 ( 0.00%) 104.19
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 190 ( 0.00%) 53592 ( 0.00%) 282.06
bgp 292 ( 0.00%) 240688 ( 0.00%) 824.27
other 176529 ( 0.26%) 62353842 ( 0.13%) 353.22
udp6 80757 ( 0.12%) 27684165 ( 0.06%) 342.81
dns 78148 ( 0.12%) 27381836 ( 0.06%) 350.38
realaud 1 ( 0.00%) 109 ( 0.00%) 109.00
other 2608 ( 0.00%) 302220 ( 0.00%) 115.88
icmp6 22492 ( 0.03%) 2782155 ( 0.01%) 123.70
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1676 ( 0.00%) 1615718 ( 0.00%) 964.03
tcpdump file: 201307121400.dump.gz (1298.63 MB)