Traffic Trace Info
DumpFile: 201307231400.dump
FileSize: 3991.56MB
Id: 201307231400
StartTime: Tue Jul 23 14:00:00 2013
EndTime: Tue Jul 23 14:15:01 2013
TotalTime: 900.54 seconds
TotalCapSize: -1003.48MB CapLen: 96 bytes
# of packets: 58918906 (31750.04MB)
AvgRate: 295.80Mbps stddev:43.26M
IP flow (unique src/dst pair) Information
# of flows: 19645737 (avg. 3.00 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 2.2% 1.6% 1.4% 1.4% 1.3% 1.0% 1.0% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 15764687
Top 10 bandwidth usage (bytes/total in %):
10.7% 7.3% 6.4% 5.0% 4.1% 4.0% 3.0% 2.8% 2.8% 2.4%
# of IPv6 addresses: 12433
Top 10 bandwidth usage (bytes/total in %):
15.1% 15.0% 11.8% 11.8% 11.4% 3.3% 3.2% 3.2% 2.8% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201307231400.pktlen.png)
detailed numbers
[ 32- 63]: 25217537
[ 64- 127]: 10362288
[ 128- 255]: 1095096
[ 256- 511]: 1180605
[ 512- 1023]: 1072315
[ 1024- 2047]: 19991065
Protocol Breakdown
![[protocol breakdown chart]](201307231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 58918906 (100.00%) 33292324719 (100.00%) 565.05
ip 54503146 ( 92.51%) 29730817398 ( 89.30%) 545.49
tcp 29379859 ( 49.86%) 26144577423 ( 78.53%) 889.88
http(s) 16500355 ( 28.01%) 21323711281 ( 64.05%) 1292.32
http(c) 9608476 ( 16.31%) 2556561452 ( 7.68%) 266.07
squid 74037 ( 0.13%) 58830555 ( 0.18%) 794.61
smtp 85461 ( 0.15%) 32980639 ( 0.10%) 385.91
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 19466 ( 0.03%) 1898586 ( 0.01%) 97.53
pop3 92246 ( 0.16%) 125032862 ( 0.38%) 1355.43
imap 2108 ( 0.00%) 295091 ( 0.00%) 139.99
telnet 2359 ( 0.00%) 1639819 ( 0.00%) 695.13
ssh 425734 ( 0.72%) 144854401 ( 0.44%) 340.25
dns 3996 ( 0.01%) 485273 ( 0.00%) 121.44
bgp 531 ( 0.00%) 123964 ( 0.00%) 233.45
napster 42 ( 0.00%) 4872 ( 0.00%) 116.00
realaud 25 ( 0.00%) 3670 ( 0.00%) 146.80
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 41149 ( 0.07%) 35164737 ( 0.11%) 854.57
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 2523843 ( 4.28%) 1862988361 ( 5.60%) 738.16
udp 3957095 ( 6.72%) 1757473035 ( 5.28%) 444.13
dns 1485721 ( 2.52%) 545281212 ( 1.64%) 367.01
rip 5 ( 0.00%) 375 ( 0.00%) 75.00
realaud 34 ( 0.00%) 4479 ( 0.00%) 131.74
halflif 44 ( 0.00%) 3581 ( 0.00%) 81.39
starcra 12 ( 0.00%) 1806 ( 0.00%) 150.50
everque 41 ( 0.00%) 6649 ( 0.00%) 162.17
unreal 36 ( 0.00%) 11275 ( 0.00%) 313.19
quake 37 ( 0.00%) 3227 ( 0.00%) 87.22
cuseeme 8 ( 0.00%) 728 ( 0.00%) 91.00
other 2469705 ( 4.19%) 1211773765 ( 3.64%) 490.66
icmp 20292894 ( 34.44%) 1280466745 ( 3.85%) 63.10
ipip 185 ( 0.00%) 19240 ( 0.00%) 104.00
ipsec 18243 ( 0.03%) 8407274 ( 0.03%) 460.85
ip6 645684 ( 1.10%) 468448276 ( 1.41%) 725.51
other 209186 ( 0.36%) 71425405 ( 0.21%) 341.44
frag 604046 ( 1.03%) 760704168 ( 2.28%) 1259.35
ip6 4415760 ( 7.49%) 3561507321 ( 10.70%) 806.54
tcp6 4303323 ( 7.30%) 3529666291 ( 10.60%) 820.22
http(s) 2194069 ( 3.72%) 2843076130 ( 8.54%) 1295.80
http(c) 946881 ( 1.61%) 85660157 ( 0.26%) 90.47
smtp 132 ( 0.00%) 22953 ( 0.00%) 173.89
ftp 11827 ( 0.02%) 1329509 ( 0.00%) 112.41
pop3 82 ( 0.00%) 9373 ( 0.00%) 114.30
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 200 ( 0.00%) 48462 ( 0.00%) 242.31
bgp 115 ( 0.00%) 33700 ( 0.00%) 293.04
other 1149945 ( 1.95%) 599473557 ( 1.80%) 521.31
udp6 81757 ( 0.14%) 27056950 ( 0.08%) 330.94
dns 79143 ( 0.13%) 26722318 ( 0.08%) 337.65
halflif 1 ( 0.00%) 93 ( 0.00%) 93.00
starcra 2 ( 0.00%) 218 ( 0.00%) 109.00
other 2611 ( 0.00%) 334321 ( 0.00%) 128.04
icmp6 29252 ( 0.05%) 3472882 ( 0.01%) 118.72
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1398 ( 0.00%) 1307118 ( 0.00%) 934.99
tcpdump file: 201307231400.dump.gz (1249.67 MB)