Traffic Trace Info
DumpFile: 201307301400.dump
FileSize: 3721.75MB
Id: 201307301400
StartTime: Tue Jul 30 14:00:01 2013
EndTime: Tue Jul 30 14:15:01 2013
TotalTime: 899.89 seconds
TotalCapSize: -1218.78MB CapLen: 96 bytes
# of packets: 55346306 (26604.07MB)
AvgRate: 248.02Mbps stddev:42.10M
IP flow (unique src/dst pair) Information
# of flows: 20843677 (avg. 2.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 4.0% 4.0% 3.0% 2.8% 2.5% 2.3% 2.1% 1.6% 1.4%
IP address Information
# of IPv4 addresses: 16863058
Top 10 bandwidth usage (bytes/total in %):
19.3% 7.4% 5.0% 4.5% 4.3% 4.3% 3.4% 3.2% 3.0% 3.0%
# of IPv6 addresses: 12345
Top 10 bandwidth usage (bytes/total in %):
16.7% 9.1% 9.1% 7.9% 6.4% 6.4% 6.3% 4.9% 4.8% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201307301400.pktlen.png)
detailed numbers
[ 32- 63]: 24437085
[ 64- 127]: 10599409
[ 128- 255]: 1057572
[ 256- 511]: 1044793
[ 512- 1023]: 1148780
[ 1024- 2047]: 17058667
Protocol Breakdown
![[protocol breakdown chart]](201307301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 55346306 (100.00%) 27896385599 (100.00%) 504.03
ip 52794646 ( 95.39%) 26078313690 ( 93.48%) 493.96
tcp 25719239 ( 46.47%) 22248262820 ( 79.75%) 865.04
http(s) 11033052 ( 19.93%) 13452131877 ( 48.22%) 1219.26
http(c) 7536671 ( 13.62%) 2440633022 ( 8.75%) 323.83
squid 120884 ( 0.22%) 66814875 ( 0.24%) 552.72
smtp 73276 ( 0.13%) 16615698 ( 0.06%) 226.75
nntp 7 ( 0.00%) 456 ( 0.00%) 65.14
ftp 15727 ( 0.03%) 1277699 ( 0.00%) 81.24
pop3 6509 ( 0.01%) 3806253 ( 0.01%) 584.77
imap 8320 ( 0.02%) 7020411 ( 0.03%) 843.80
telnet 4370 ( 0.01%) 1787105 ( 0.01%) 408.95
ssh 5213480 ( 9.42%) 5049927774 ( 18.10%) 968.63
dns 2311 ( 0.00%) 299448 ( 0.00%) 129.58
bgp 527 ( 0.00%) 115608 ( 0.00%) 219.37
napster 20 ( 0.00%) 5606 ( 0.00%) 280.30
realaud 19 ( 0.00%) 2819 ( 0.00%) 148.37
rtsp 13209 ( 0.02%) 19730621 ( 0.07%) 1493.73
icecast 42450 ( 0.08%) 8456150 ( 0.03%) 199.20
hotline 20 ( 0.00%) 2931 ( 0.00%) 146.55
other 1648387 ( 2.98%) 1179634467 ( 4.23%) 715.63
udp 3724582 ( 6.73%) 2210377103 ( 7.92%) 593.46
dns 1467827 ( 2.65%) 674936729 ( 2.42%) 459.82
rip 1 ( 0.00%) 90 ( 0.00%) 90.00
realaud 15 ( 0.00%) 1190 ( 0.00%) 79.33
halflif 54 ( 0.00%) 5542 ( 0.00%) 102.63
starcra 8 ( 0.00%) 702 ( 0.00%) 87.75
everque 37 ( 0.00%) 5718 ( 0.00%) 154.54
unreal 24 ( 0.00%) 1707 ( 0.00%) 71.12
quake 8 ( 0.00%) 751 ( 0.00%) 93.88
cuseeme 8 ( 0.00%) 667 ( 0.00%) 83.38
other 2254649 ( 4.07%) 1535124677 ( 5.50%) 680.87
icmp 22845692 ( 41.28%) 1451375814 ( 5.20%) 63.53
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 7949 ( 0.01%) 3077586 ( 0.01%) 387.17
ip6 323391 ( 0.58%) 132501960 ( 0.47%) 409.73
sctp 2 ( 0.00%) 206 ( 0.00%) 103.00
other 173607 ( 0.31%) 32699041 ( 0.12%) 188.35
frag 688845 ( 1.24%) 892543650 ( 3.20%) 1295.71
ip6 2551660 ( 4.61%) 1818071909 ( 6.52%) 712.51
tcp6 2404377 ( 4.34%) 1785960478 ( 6.40%) 742.80
http(s) 1130662 ( 2.04%) 1246310672 ( 4.47%) 1102.28
http(c) 612915 ( 1.11%) 59727168 ( 0.21%) 97.45
squid 3 ( 0.00%) 242 ( 0.00%) 80.67
smtp 3034 ( 0.01%) 2524540 ( 0.01%) 832.08
ftp 62 ( 0.00%) 5382 ( 0.00%) 86.81
pop3 80 ( 0.00%) 9187 ( 0.00%) 114.84
ssh 15833 ( 0.03%) 2449288 ( 0.01%) 154.70
dns 512 ( 0.00%) 107246 ( 0.00%) 209.46
bgp 100 ( 0.00%) 32015 ( 0.00%) 320.15
other 641176 ( 1.16%) 474794738 ( 1.70%) 740.51
udp6 110500 ( 0.20%) 25491302 ( 0.09%) 230.69
dns 108557 ( 0.20%) 25267272 ( 0.09%) 232.76
realaud 2 ( 0.00%) 214 ( 0.00%) 107.00
starcra 2 ( 0.00%) 205 ( 0.00%) 102.50
unreal 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 1 ( 0.00%) 115 ( 0.00%) 115.00
other 1937 ( 0.00%) 223389 ( 0.00%) 115.33
icmp6 34426 ( 0.06%) 4325025 ( 0.02%) 125.63
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2327 ( 0.00%) 2291024 ( 0.01%) 984.54
tcpdump file: 201307301400.dump.gz (1166.05 MB)