Traffic Trace Info
DumpFile: 201307251400.dump
FileSize: 3576.72MB
Id: 201307251400
StartTime: Thu Jul 25 14:00:00 2013
EndTime: Thu Jul 25 14:15:01 2013
TotalTime: 900.15 seconds
TotalCapSize: -1343.37MB CapLen: 96 bytes
# of packets: 54007120 (27268.97MB)
AvgRate: 254.13Mbps stddev:38.11M
IP flow (unique src/dst pair) Information
# of flows: 20690082 (avg. 2.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.2% 3.8% 3.1% 3.0% 1.3% 1.2% 1.1% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 16628600
Top 10 bandwidth usage (bytes/total in %):
13.3% 11.8% 9.0% 5.0% 4.5% 4.4% 4.1% 4.1% 3.4% 3.4%
# of IPv6 addresses: 12993
Top 10 bandwidth usage (bytes/total in %):
15.7% 11.5% 10.2% 7.8% 7.8% 7.2% 3.7% 3.7% 3.1% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201307251400.pktlen.png)
detailed numbers
[ 32- 63]: 25226465
[ 64- 127]: 8417868
[ 128- 255]: 1297630
[ 256- 511]: 1085541
[ 512- 1023]: 1124170
[ 1024- 2047]: 16855446
Protocol Breakdown
![[protocol breakdown chart]](201307251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 54007120 (100.00%) 28593589759 (100.00%) 529.44
ip 51316457 ( 95.02%) 26645608096 ( 93.19%) 519.24
tcp 25812874 ( 47.80%) 23339337742 ( 81.62%) 904.17
http(s) 15196293 ( 28.14%) 19251699779 ( 67.33%) 1266.87
http(c) 8812584 ( 16.32%) 3184824699 ( 11.14%) 361.40
squid 163274 ( 0.30%) 30494372 ( 0.11%) 186.77
smtp 87913 ( 0.16%) 29726316 ( 0.10%) 338.13
nntp 9 ( 0.00%) 540 ( 0.00%) 60.00
ftp 30401 ( 0.06%) 2008087 ( 0.01%) 66.05
pop3 4354 ( 0.01%) 2552060 ( 0.01%) 586.14
imap 6032 ( 0.01%) 1297447 ( 0.00%) 215.09
telnet 17419 ( 0.03%) 2729712 ( 0.01%) 156.71
ssh 118648 ( 0.22%) 16278150 ( 0.06%) 137.20
dns 2760 ( 0.01%) 425211 ( 0.00%) 154.06
bgp 532 ( 0.00%) 110505 ( 0.00%) 207.72
napster 38 ( 0.00%) 4134 ( 0.00%) 108.79
realaud 14 ( 0.00%) 1209 ( 0.00%) 86.36
rtsp 10 ( 0.00%) 600 ( 0.00%) 60.00
icecast 54236 ( 0.10%) 36531974 ( 0.13%) 673.57
hotline 6 ( 0.00%) 729 ( 0.00%) 121.50
other 1318278 ( 2.44%) 780647838 ( 2.73%) 592.17
udp 3521477 ( 6.52%) 1739904862 ( 6.08%) 494.08
dns 1196761 ( 2.22%) 471440646 ( 1.65%) 393.93
rip 28 ( 0.00%) 1888 ( 0.00%) 67.43
realaud 9 ( 0.00%) 779 ( 0.00%) 86.56
halflif 11 ( 0.00%) 968 ( 0.00%) 88.00
starcra 8 ( 0.00%) 1533 ( 0.00%) 191.62
everque 73 ( 0.00%) 9081 ( 0.00%) 124.40
unreal 9 ( 0.00%) 1096 ( 0.00%) 121.78
quake 4584 ( 0.01%) 2650505 ( 0.01%) 578.21
cuseeme 3 ( 0.00%) 263 ( 0.00%) 87.67
other 2318979 ( 4.29%) 1265646317 ( 4.43%) 545.78
icmp 21201758 ( 39.26%) 1335678909 ( 4.67%) 63.00
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 22316 ( 0.04%) 5112116 ( 0.02%) 229.08
ip6 490067 ( 0.91%) 122609459 ( 0.43%) 250.19
sctp 2 ( 0.00%) 206 ( 0.00%) 103.00
other 267778 ( 0.50%) 102945532 ( 0.36%) 384.44
frag 760223 ( 1.41%) 941288869 ( 3.29%) 1238.17
ip6 2690663 ( 4.98%) 1947981663 ( 6.81%) 723.98
tcp6 2477744 ( 4.59%) 1853314758 ( 6.48%) 747.98
http(s) 1372436 ( 2.54%) 1533473584 ( 5.36%) 1117.34
http(c) 566357 ( 1.05%) 58242471 ( 0.20%) 102.84
squid 32 ( 0.00%) 7868 ( 0.00%) 245.88
smtp 148 ( 0.00%) 66151 ( 0.00%) 446.97
ftp 55 ( 0.00%) 5215 ( 0.00%) 94.82
pop3 169 ( 0.00%) 134777 ( 0.00%) 797.50
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 345 ( 0.00%) 52759 ( 0.00%) 152.92
bgp 110 ( 0.00%) 30249 ( 0.00%) 274.99
other 538020 ( 1.00%) 261289234 ( 0.91%) 485.65
udp6 121940 ( 0.23%) 30552102 ( 0.11%) 250.55
dns 120189 ( 0.22%) 30344982 ( 0.11%) 252.48
realaud 2 ( 0.00%) 199 ( 0.00%) 99.50
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
everque 4 ( 0.00%) 402 ( 0.00%) 100.50
unreal 3 ( 0.00%) 300 ( 0.00%) 100.00
cuseeme 1 ( 0.00%) 112 ( 0.00%) 112.00
other 1740 ( 0.00%) 206002 ( 0.00%) 118.39
icmp6 42418 ( 0.08%) 5283334 ( 0.02%) 124.55
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 48531 ( 0.09%) 58827389 ( 0.21%) 1212.16
tcpdump file: 201307251400.dump.gz (1143.83 MB)