Traffic Trace Info
DumpFile: 201307211400.dump
FileSize: 2518.83MB
Id: 201307211400
StartTime: Sun Jul 21 14:00:01 2013
EndTime: Sun Jul 21 14:15:00 2013
TotalTime: 899.29 seconds
TotalCapSize: 1924.71MB CapLen: 96 bytes
# of packets: 38935681 (14625.59MB)
AvgRate: 136.43Mbps stddev:25.79M
IP flow (unique src/dst pair) Information
# of flows: 18321799 (avg. 2.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 3.1% 2.7% 2.1% 1.7% 1.5% 1.4% 1.4% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 14707540
Top 10 bandwidth usage (bytes/total in %):
22.0% 8.8% 4.4% 3.7% 3.6% 3.0% 2.9% 2.5% 2.3% 2.2%
# of IPv6 addresses: 8114
Top 10 bandwidth usage (bytes/total in %):
30.0% 30.0% 26.0% 26.0% 9.7% 2.9% 2.9% 2.6% 2.6% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201307211400.pktlen.png)
detailed numbers
[ 32- 63]: 22179304
[ 64- 127]: 6267341
[ 128- 255]: 543151
[ 256- 511]: 634423
[ 512- 1023]: 521176
[ 1024- 2047]: 8790286
Protocol Breakdown
![[protocol breakdown chart]](201307211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38935681 (100.00%) 15336046818 (100.00%) 393.88
ip 37442095 ( 96.16%) 13745915167 ( 89.63%) 367.12
tcp 13638770 ( 35.03%) 10944849465 ( 71.37%) 802.48
http(s) 6392932 ( 16.42%) 8222844170 ( 53.62%) 1286.24
http(c) 4565493 ( 11.73%) 949108625 ( 6.19%) 207.89
squid 23458 ( 0.06%) 7935745 ( 0.05%) 338.30
smtp 90400 ( 0.23%) 11084725 ( 0.07%) 122.62
ftp 24037 ( 0.06%) 1744201 ( 0.01%) 72.56
pop3 1723 ( 0.00%) 797704 ( 0.01%) 462.97
imap 4464 ( 0.01%) 3404414 ( 0.02%) 762.64
telnet 3157 ( 0.01%) 1698870 ( 0.01%) 538.13
ssh 545496 ( 1.40%) 198416836 ( 1.29%) 363.74
dns 4230 ( 0.01%) 2378905 ( 0.02%) 562.39
bgp 529 ( 0.00%) 141219 ( 0.00%) 266.95
napster 71 ( 0.00%) 6513 ( 0.00%) 91.73
icecast 10445 ( 0.03%) 7830567 ( 0.05%) 749.70
hotline 8 ( 0.00%) 855 ( 0.00%) 106.88
other 1972327 ( 5.07%) 1537456116 ( 10.03%) 779.51
udp 3215212 ( 8.26%) 1381168713 ( 9.01%) 429.57
dns 1362256 ( 3.50%) 563940142 ( 3.68%) 413.98
rip 5 ( 0.00%) 375 ( 0.00%) 75.00
realaud 15 ( 0.00%) 2176 ( 0.00%) 145.07
halflif 71 ( 0.00%) 9494 ( 0.00%) 133.72
starcra 12 ( 0.00%) 1686 ( 0.00%) 140.50
everque 2055 ( 0.01%) 1813984 ( 0.01%) 882.72
unreal 3 ( 0.00%) 491 ( 0.00%) 163.67
quake 13 ( 0.00%) 1029 ( 0.00%) 79.15
cuseeme 3 ( 0.00%) 238 ( 0.00%) 79.33
other 1850055 ( 4.75%) 815279429 ( 5.32%) 440.68
icmp 20211181 ( 51.91%) 1285284172 ( 8.38%) 63.59
ipip 185 ( 0.00%) 19240 ( 0.00%) 104.00
ipsec 7018 ( 0.02%) 2862152 ( 0.02%) 407.83
ip6 271918 ( 0.70%) 109126928 ( 0.71%) 401.32
sctp 2 ( 0.00%) 206 ( 0.00%) 103.00
other 97809 ( 0.25%) 22604291 ( 0.15%) 231.11
frag 378940 ( 0.97%) 479290820 ( 3.13%) 1264.82
ip6 1493586 ( 3.84%) 1590131651 ( 10.37%) 1064.64
tcp6 1290655 ( 3.31%) 1491252800 ( 9.72%) 1155.42
http(s) 753859 ( 1.94%) 985898001 ( 6.43%) 1307.80
http(c) 113237 ( 0.29%) 11843344 ( 0.08%) 104.59
smtp 990 ( 0.00%) 341210 ( 0.00%) 344.66
ftp 25 ( 0.00%) 2209 ( 0.00%) 88.36
pop3 78 ( 0.00%) 9006 ( 0.00%) 115.46
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 174 ( 0.00%) 47477 ( 0.00%) 272.86
bgp 106 ( 0.00%) 26228 ( 0.00%) 247.43
other 422114 ( 1.08%) 493072875 ( 3.22%) 1168.10
udp6 137078 ( 0.35%) 49763834 ( 0.32%) 363.03
dns 49903 ( 0.13%) 16833173 ( 0.11%) 337.32
realaud 1 ( 0.00%) 98 ( 0.00%) 98.00
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
other 87173 ( 0.22%) 32930457 ( 0.21%) 377.76
icmp6 27936 ( 0.07%) 3153683 ( 0.02%) 112.89
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 37886 ( 0.10%) 45957118 ( 0.30%) 1213.04
tcpdump file: 201307211400.dump.gz (795.48 MB)