Traffic Trace Info
DumpFile: 201307151400.dump
FileSize: 3267.14MB
Id: 201307151400
StartTime: Mon Jul 15 14:00:01 2013
EndTime: Mon Jul 15 14:15:00 2013
TotalTime: 899.38 seconds
TotalCapSize: -1587.10MB CapLen: 96 bytes
# of packets: 49691074 (24257.98MB)
AvgRate: 226.23Mbps stddev:35.46M
IP flow (unique src/dst pair) Information
# of flows: 19529311 (avg. 2.54 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 2.6% 1.9% 1.9% 1.6% 1.2% 1.1% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 15703264
Top 10 bandwidth usage (bytes/total in %):
14.4% 9.4% 6.4% 5.3% 5.0% 4.5% 4.5% 4.5% 4.1% 3.8%
# of IPv6 addresses: 9983
Top 10 bandwidth usage (bytes/total in %):
13.3% 4.4% 3.7% 3.7% 3.0% 3.0% 2.8% 2.5% 2.5% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201307151400.pktlen.png)
detailed numbers
[ 32- 63]: 23498508
[ 64- 127]: 8747266
[ 128- 255]: 772760
[ 256- 511]: 583709
[ 512- 1023]: 1206397
[ 1024- 2047]: 14882434
Protocol Breakdown
![[protocol breakdown chart]](201307151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 49691074 (100.00%) 25436337742 (100.00%) 511.89
ip 47965578 ( 96.53%) 23969647695 ( 94.23%) 499.73
tcp 21499610 ( 43.27%) 20335884359 ( 79.95%) 945.87
http(s) 12562038 ( 25.28%) 16601624285 ( 65.27%) 1321.57
http(c) 6355072 ( 12.79%) 2180159940 ( 8.57%) 343.06
squid 351232 ( 0.71%) 104459242 ( 0.41%) 297.41
smtp 45617 ( 0.09%) 16066606 ( 0.06%) 352.21
ftp 23946 ( 0.05%) 2188647 ( 0.01%) 91.40
pop3 4249 ( 0.01%) 3332572 ( 0.01%) 784.32
imap 1009 ( 0.00%) 352511 ( 0.00%) 349.37
telnet 1343 ( 0.00%) 88707 ( 0.00%) 66.05
ssh 29380 ( 0.06%) 6319868 ( 0.02%) 215.11
dns 7416 ( 0.01%) 613704 ( 0.00%) 82.75
bgp 492 ( 0.00%) 80195 ( 0.00%) 163.00
napster 58 ( 0.00%) 13547 ( 0.00%) 233.57
realaud 20 ( 0.00%) 4764 ( 0.00%) 238.20
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 193115 ( 0.39%) 167086711 ( 0.66%) 865.22
hotline 11962 ( 0.02%) 10378648 ( 0.04%) 867.63
other 1912660 ( 3.85%) 1243114352 ( 4.89%) 649.94
udp 5599167 ( 11.27%) 2101405428 ( 8.26%) 375.31
dns 2505405 ( 5.04%) 358660313 ( 1.41%) 143.15
rip 13 ( 0.00%) 1092 ( 0.00%) 84.00
realaud 28 ( 0.00%) 2438 ( 0.00%) 87.07
halflif 40 ( 0.00%) 4289 ( 0.00%) 107.22
starcra 84 ( 0.00%) 17043 ( 0.00%) 202.89
everque 92 ( 0.00%) 12170 ( 0.00%) 132.28
unreal 28 ( 0.00%) 4785 ( 0.00%) 170.89
quake 45 ( 0.00%) 3869 ( 0.00%) 85.98
cuseeme 32 ( 0.00%) 2541 ( 0.00%) 79.41
other 3078699 ( 6.20%) 1737065291 ( 6.83%) 564.22
icmp 20236306 ( 40.72%) 1266574125 ( 4.98%) 62.59
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 3771 ( 0.01%) 2389518 ( 0.01%) 633.66
ip6 538772 ( 1.08%) 242045972 ( 0.95%) 449.25
sctp 2 ( 0.00%) 206 ( 0.00%) 103.00
other 87765 ( 0.18%) 21328817 ( 0.08%) 243.02
frag 191028 ( 0.38%) 232665156 ( 0.91%) 1217.96
ip6 1725496 ( 3.47%) 1466690047 ( 5.77%) 850.01
tcp6 1622455 ( 3.27%) 1429741687 ( 5.62%) 881.22
http(s) 1286803 ( 2.59%) 1390258562 ( 5.47%) 1080.40
http(c) 253853 ( 0.51%) 31121028 ( 0.12%) 122.59
squid 32 ( 0.00%) 7868 ( 0.00%) 245.88
smtp 162 ( 0.00%) 80392 ( 0.00%) 496.25
ftp 25 ( 0.00%) 2209 ( 0.00%) 88.36
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 642 ( 0.00%) 494697 ( 0.00%) 770.56
bgp 91 ( 0.00%) 23475 ( 0.00%) 257.97
other 80775 ( 0.16%) 7741006 ( 0.03%) 95.83
udp6 66424 ( 0.13%) 22769717 ( 0.09%) 342.79
dns 64235 ( 0.13%) 22526147 ( 0.09%) 350.68
halflif 1 ( 0.00%) 163 ( 0.00%) 163.00
starcra 1 ( 0.00%) 104 ( 0.00%) 104.00
other 2187 ( 0.00%) 243303 ( 0.00%) 111.25
icmp6 26333 ( 0.05%) 3248166 ( 0.01%) 123.35
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 10253 ( 0.02%) 10926261 ( 0.04%) 1065.66
tcpdump file: 201307151400.dump.gz (1029.60 MB)