Traffic Trace Info
DumpFile: 201307221400.dump
FileSize: 3787.94MB
Id: 201307221400
StartTime: Mon Jul 22 14:00:01 2013
EndTime: Mon Jul 22 14:15:01 2013
TotalTime: 900.15 seconds
TotalCapSize: -1168.54MB CapLen: 96 bytes
# of packets: 56391380 (30065.32MB)
AvgRate: 280.18Mbps stddev:45.09M
IP flow (unique src/dst pair) Information
# of flows: 19472773 (avg. 2.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.5% 2.4% 1.5% 1.3% 1.3% 1.2% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 15628778
Top 10 bandwidth usage (bytes/total in %):
11.6% 6.7% 4.6% 4.2% 4.1% 3.4% 2.8% 2.8% 2.8% 2.6%
# of IPv6 addresses: 10439
Top 10 bandwidth usage (bytes/total in %):
14.1% 14.1% 13.4% 4.8% 3.6% 2.8% 2.7% 2.5% 2.1% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201307221400.pktlen.png)
detailed numbers
[ 32- 63]: 24524952
[ 64- 127]: 9428520
[ 128- 255]: 1010656
[ 256- 511]: 1293682
[ 512- 1023]: 1151665
[ 1024- 2047]: 18981905
Protocol Breakdown
![[protocol breakdown chart]](201307221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 56391380 (100.00%) 31525775148 (100.00%) 559.05
ip 53596502 ( 95.04%) 28816483685 ( 91.41%) 537.66
tcp 27879428 ( 49.44%) 24852552444 ( 78.83%) 891.43
http(s) 15726147 ( 27.89%) 19864293659 ( 63.01%) 1263.14
http(c) 10037150 ( 17.80%) 3840758788 ( 12.18%) 382.65
squid 40243 ( 0.07%) 16893795 ( 0.05%) 419.79
smtp 101555 ( 0.18%) 38656412 ( 0.12%) 380.65
ftp 51453 ( 0.09%) 3742168 ( 0.01%) 72.73
pop3 3722 ( 0.01%) 2244209 ( 0.01%) 602.96
imap 1911 ( 0.00%) 349730 ( 0.00%) 183.01
telnet 4053 ( 0.01%) 1892015 ( 0.01%) 466.82
ssh 225565 ( 0.40%) 98937062 ( 0.31%) 438.62
dns 6195 ( 0.01%) 2478387 ( 0.01%) 400.06
bgp 487 ( 0.00%) 89812 ( 0.00%) 184.42
napster 46 ( 0.00%) 15971 ( 0.00%) 347.20
realaud 3 ( 0.00%) 855 ( 0.00%) 285.00
rtsp 5298 ( 0.01%) 7613182 ( 0.02%) 1436.99
icecast 51532 ( 0.09%) 36829090 ( 0.12%) 714.68
hotline 5 ( 0.00%) 665 ( 0.00%) 133.00
other 1624060 ( 2.88%) 937756464 ( 2.97%) 577.41
udp 4032542 ( 7.15%) 1810278259 ( 5.74%) 448.92
dns 1506158 ( 2.67%) 458189865 ( 1.45%) 304.21
rip 2 ( 0.00%) 167 ( 0.00%) 83.50
realaud 29 ( 0.00%) 2633 ( 0.00%) 90.79
halflif 17 ( 0.00%) 2426 ( 0.00%) 142.71
starcra 22 ( 0.00%) 2331 ( 0.00%) 105.95
everque 61 ( 0.00%) 9813 ( 0.00%) 160.87
unreal 18 ( 0.00%) 1763 ( 0.00%) 97.94
quake 49 ( 0.00%) 3574 ( 0.00%) 72.94
cuseeme 7 ( 0.00%) 568 ( 0.00%) 81.14
other 2524928 ( 4.48%) 1351793995 ( 4.29%) 535.38
icmp 20630269 ( 36.58%) 1305934268 ( 4.14%) 63.30
ipip 184 ( 0.00%) 19172 ( 0.00%) 104.20
ipsec 16608 ( 0.03%) 6336404 ( 0.02%) 381.53
ip6 864509 ( 1.53%) 807097435 ( 2.56%) 933.59
sctp 2 ( 0.00%) 206 ( 0.00%) 103.00
other 172960 ( 0.31%) 34265497 ( 0.11%) 198.11
frag 545517 ( 0.97%) 686232162 ( 2.18%) 1257.95
ip6 2794878 ( 4.96%) 2709291463 ( 8.59%) 969.38
tcp6 2671850 ( 4.74%) 2660021080 ( 8.44%) 995.57
http(s) 2085196 ( 3.70%) 2586361358 ( 8.20%) 1240.34
http(c) 526686 ( 0.93%) 50936547 ( 0.16%) 96.71
squid 19 ( 0.00%) 2839 ( 0.00%) 149.42
smtp 246 ( 0.00%) 137664 ( 0.00%) 559.61
ftp 76 ( 0.00%) 7068 ( 0.00%) 93.00
pop3 210 ( 0.00%) 171368 ( 0.00%) 816.04
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 806 ( 0.00%) 532263 ( 0.00%) 660.38
bgp 106 ( 0.00%) 23907 ( 0.00%) 225.54
other 58433 ( 0.10%) 21835616 ( 0.07%) 373.69
udp6 75899 ( 0.13%) 24825665 ( 0.08%) 327.09
dns 73503 ( 0.13%) 24522535 ( 0.08%) 333.63
halflif 2 ( 0.00%) 211 ( 0.00%) 105.50
everque 1 ( 0.00%) 97 ( 0.00%) 97.00
unreal 1 ( 0.00%) 99 ( 0.00%) 99.00
other 2392 ( 0.00%) 302723 ( 0.00%) 126.56
icmp6 27236 ( 0.05%) 3246445 ( 0.01%) 119.20
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 19863 ( 0.04%) 21194193 ( 0.07%) 1067.02
tcpdump file: 201307221400.dump.gz (1207.52 MB)