Traffic Trace Info
DumpFile: 201307171400.dump
FileSize: 3790.18MB
Id: 201307171400
StartTime: Wed Jul 17 14:00:01 2013
EndTime: Wed Jul 17 14:15:01 2013
TotalTime: 900.00 seconds
TotalCapSize: -1155.16MB CapLen: 96 bytes
# of packets: 55661325 (30866.31MB)
AvgRate: 287.69Mbps stddev:48.32M
IP flow (unique src/dst pair) Information
# of flows: 18698114 (avg. 2.98 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.9% 1.6% 1.4% 1.4% 1.3% 1.3% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 14950822
Top 10 bandwidth usage (bytes/total in %):
9.2% 6.7% 6.1% 6.0% 4.3% 4.1% 3.7% 2.8% 2.3% 2.2%
# of IPv6 addresses: 10817
Top 10 bandwidth usage (bytes/total in %):
7.6% 5.2% 4.9% 4.6% 4.6% 4.0% 3.6% 2.9% 2.5% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201307171400.pktlen.png)
detailed numbers
[ 32- 63]: 23987948
[ 64- 127]: 8708403
[ 128- 255]: 954120
[ 256- 511]: 1404541
[ 512- 1023]: 1254419
[ 1024- 2047]: 19351894
Protocol Breakdown
![[protocol breakdown chart]](201307171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 55661325 (100.00%) 32365674884 (100.00%) 581.48
ip 52589397 ( 94.48%) 29104120265 ( 89.92%) 553.42
tcp 29442450 ( 52.90%) 26448446923 ( 81.72%) 898.31
http(s) 17379585 ( 31.22%) 22024504269 ( 68.05%) 1267.26
http(c) 9595235 ( 17.24%) 3028641582 ( 9.36%) 315.64
squid 293578 ( 0.53%) 135320555 ( 0.42%) 460.94
smtp 77010 ( 0.14%) 16504844 ( 0.05%) 214.32
ftp 30564 ( 0.05%) 2515936 ( 0.01%) 82.32
pop3 6277 ( 0.01%) 3569395 ( 0.01%) 568.65
imap 2442 ( 0.00%) 457895 ( 0.00%) 187.51
telnet 10166 ( 0.02%) 2203679 ( 0.01%) 216.77
ssh 20542 ( 0.04%) 7075037 ( 0.02%) 344.42
dns 2763 ( 0.00%) 421729 ( 0.00%) 152.63
bgp 547 ( 0.00%) 132782 ( 0.00%) 242.75
napster 31 ( 0.00%) 1922 ( 0.00%) 62.00
realaud 28 ( 0.00%) 6706 ( 0.00%) 239.50
rtsp 22057 ( 0.04%) 32807980 ( 0.10%) 1487.42
icecast 175664 ( 0.32%) 153790562 ( 0.48%) 875.48
other 1825961 ( 3.28%) 1040492050 ( 3.21%) 569.83
udp 2262608 ( 4.06%) 755140546 ( 2.33%) 333.75
dns 1065582 ( 1.91%) 312881967 ( 0.97%) 293.63
rip 3 ( 0.00%) 237 ( 0.00%) 79.00
realaud 13 ( 0.00%) 1071 ( 0.00%) 82.38
halflif 27 ( 0.00%) 2502 ( 0.00%) 92.67
starcra 18 ( 0.00%) 1789 ( 0.00%) 99.39
everque 40 ( 0.00%) 6323 ( 0.00%) 158.07
unreal 89 ( 0.00%) 9645 ( 0.00%) 108.37
quake 26 ( 0.00%) 2821 ( 0.00%) 108.50
cuseeme 3 ( 0.00%) 252 ( 0.00%) 84.00
other 1194967 ( 2.15%) 441349689 ( 1.36%) 369.34
icmp 19856851 ( 35.67%) 1258091997 ( 3.89%) 63.36
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 5319 ( 0.01%) 2751102 ( 0.01%) 517.22
ip6 924406 ( 1.66%) 615810563 ( 1.90%) 666.17
other 97579 ( 0.18%) 23859974 ( 0.07%) 244.52
frag 211743 ( 0.38%) 272509863 ( 0.84%) 1286.98
ip6 3071928 ( 5.52%) 3261554619 ( 10.08%) 1061.73
tcp6 2926336 ( 5.26%) 3196659231 ( 9.88%) 1092.38
http(s) 2359773 ( 4.24%) 2954685161 ( 9.13%) 1252.11
http(c) 244226 ( 0.44%) 23912961 ( 0.07%) 97.91
smtp 260 ( 0.00%) 74531 ( 0.00%) 286.66
ftp 474 ( 0.00%) 50402 ( 0.00%) 106.33
pop3 16 ( 0.00%) 3426 ( 0.00%) 214.12
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 930 ( 0.00%) 636167 ( 0.00%) 684.05
bgp 94 ( 0.00%) 23035 ( 0.00%) 245.05
other 320491 ( 0.58%) 217261098 ( 0.67%) 677.90
udp6 97432 ( 0.18%) 40358342 ( 0.12%) 414.22
dns 74734 ( 0.13%) 25269580 ( 0.08%) 338.13
starcra 1 ( 0.00%) 91 ( 0.00%) 91.00
quake 1 ( 0.00%) 97 ( 0.00%) 97.00
other 22696 ( 0.04%) 15088574 ( 0.05%) 664.81
icmp6 28765 ( 0.05%) 3447603 ( 0.01%) 119.85
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 19365 ( 0.03%) 21085363 ( 0.07%) 1088.84
tcpdump file: 201307171400.dump.gz (1194.88 MB)