Traffic Trace Info
DumpFile: 201307141400.dump
FileSize: 3119.88MB
Id: 201307141400
StartTime: Sun Jul 14 14:00:01 2013
EndTime: Sun Jul 14 14:15:01 2013
TotalTime: 899.61 seconds
TotalCapSize: -1729.25MB CapLen: 96 bytes
# of packets: 49356147 (19201.36MB)
AvgRate: 179.04Mbps stddev:27.77M
IP flow (unique src/dst pair) Information
# of flows: 19743570 (avg. 2.50 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.0% 5.7% 3.6% 2.7% 2.7% 2.7% 2.5% 1.9% 1.9% 1.7%
IP address Information
# of IPv4 addresses: 15606835
Top 10 bandwidth usage (bytes/total in %):
21.9% 20.3% 15.8% 10.0% 8.9% 6.3% 4.0% 4.0% 3.1% 3.1%
# of IPv6 addresses: 7759
Top 10 bandwidth usage (bytes/total in %):
32.1% 32.1% 17.6% 11.8% 11.7% 11.7% 9.3% 6.1% 5.0% 5.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201307141400.pktlen.png)
detailed numbers
[ 32- 63]: 28590641
[ 64- 127]: 7021312
[ 128- 255]: 1014550
[ 256- 511]: 419928
[ 512- 1023]: 555100
[ 1024- 2047]: 11754616
Protocol Breakdown
![[protocol breakdown chart]](201307141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 49356147 (100.00%) 20134085398 (100.00%) 407.93
ip 47591748 ( 96.43%) 18450025130 ( 91.64%) 387.67
tcp 13532359 ( 27.42%) 11926736116 ( 59.24%) 881.35
http(s) 7812892 ( 15.83%) 10411018142 ( 51.71%) 1332.54
http(c) 3935678 ( 7.97%) 373834346 ( 1.86%) 94.99
squid 12244 ( 0.02%) 3924010 ( 0.02%) 320.48
smtp 34204 ( 0.07%) 5779434 ( 0.03%) 168.97
ftp 11580 ( 0.02%) 1269942 ( 0.01%) 109.67
pop3 1368 ( 0.00%) 1038338 ( 0.01%) 759.02
imap 1485 ( 0.00%) 161538 ( 0.00%) 108.78
telnet 60560 ( 0.12%) 4067012 ( 0.02%) 67.16
ssh 57730 ( 0.12%) 11155892 ( 0.06%) 193.24
dns 6101 ( 0.01%) 3444793 ( 0.02%) 564.63
bgp 557 ( 0.00%) 124352 ( 0.00%) 223.25
napster 33 ( 0.00%) 2052 ( 0.00%) 62.18
realaud 51 ( 0.00%) 4160 ( 0.00%) 81.57
rtsp 14 ( 0.00%) 11329 ( 0.00%) 809.21
icecast 167425 ( 0.34%) 149263659 ( 0.74%) 891.53
hotline 2 ( 0.00%) 132 ( 0.00%) 66.00
other 1430435 ( 2.90%) 961636985 ( 4.78%) 672.27
udp 5809245 ( 11.77%) 4524382420 ( 22.47%) 778.82
dns 4657010 ( 9.44%) 4052466792 ( 20.13%) 870.19
rip 16 ( 0.00%) 1339 ( 0.00%) 83.69
realaud 22 ( 0.00%) 1836 ( 0.00%) 83.45
halflif 54 ( 0.00%) 4257 ( 0.00%) 78.83
starcra 20 ( 0.00%) 2031 ( 0.00%) 101.55
everque 75 ( 0.00%) 9561 ( 0.00%) 127.48
unreal 33 ( 0.00%) 3582 ( 0.00%) 108.55
quake 120 ( 0.00%) 9250 ( 0.00%) 77.08
cuseeme 18 ( 0.00%) 1485 ( 0.00%) 82.50
other 1150877 ( 2.33%) 470870605 ( 2.34%) 409.14
icmp 27453961 ( 55.62%) 1702006311 ( 8.45%) 61.99
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 3991 ( 0.01%) 2439066 ( 0.01%) 611.14
ip6 701074 ( 1.42%) 272157073 ( 1.35%) 388.20
other 90933 ( 0.18%) 22284874 ( 0.11%) 245.07
frag 2859237 ( 5.79%) 3898057388 ( 19.36%) 1363.32
ip6 1764399 ( 3.57%) 1684060268 ( 8.36%) 954.47
tcp6 1612437 ( 3.27%) 1570159778 ( 7.80%) 973.78
http(s) 674368 ( 1.37%) 855136631 ( 4.25%) 1268.06
http(c) 169292 ( 0.34%) 15840882 ( 0.08%) 93.57
squid 35 ( 0.00%) 8090 ( 0.00%) 231.14
smtp 1450 ( 0.00%) 410012 ( 0.00%) 282.77
ftp 25 ( 0.00%) 2209 ( 0.00%) 88.36
ssh 639673 ( 1.30%) 540187080 ( 2.68%) 844.47
dns 339 ( 0.00%) 161667 ( 0.00%) 476.89
bgp 105 ( 0.00%) 31502 ( 0.00%) 300.02
other 127150 ( 0.26%) 158381705 ( 0.79%) 1245.63
udp6 111937 ( 0.23%) 99742024 ( 0.50%) 891.06
dns 44156 ( 0.09%) 15210457 ( 0.08%) 344.47
halflif 1 ( 0.00%) 108 ( 0.00%) 108.00
other 67780 ( 0.14%) 84531459 ( 0.42%) 1247.14
icmp6 30278 ( 0.06%) 3724623 ( 0.02%) 123.01
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 9717 ( 0.02%) 10429763 ( 0.05%) 1073.35
tcpdump file: 201307141400.dump.gz (907.35 MB)