Traffic Trace Info
DumpFile: 201308011400.dump
FileSize: 4151.82MB
Id: 201308011400
StartTime: Thu Aug 1 14:00:01 2013
EndTime: Thu Aug 1 14:15:00 2013
TotalTime: 899.30 seconds
TotalCapSize: -847.79MB CapLen: 96 bytes
# of packets: 59218259 (28869.70MB)
AvgRate: 269.35Mbps stddev:35.51M
IP flow (unique src/dst pair) Information
# of flows: 21471507 (avg. 2.76 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 5.7% 4.9% 4.1% 2.9% 2.4% 2.3% 1.9% 1.5% 1.3%
IP address Information
# of IPv4 addresses: 17307071
Top 10 bandwidth usage (bytes/total in %):
12.6% 8.4% 7.6% 5.8% 5.2% 5.1% 5.1% 3.6% 3.2% 3.2%
# of IPv6 addresses: 12094
Top 10 bandwidth usage (bytes/total in %):
75.4% 31.1% 26.6% 6.0% 5.8% 5.8% 5.6% 1.9% 1.9% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201308011400.pktlen.png)
detailed numbers
[ 32- 63]: 24591063
[ 64- 127]: 13401140
[ 128- 255]: 993799
[ 256- 511]: 1079273
[ 512- 1023]: 1428280
[ 1024- 2047]: 17724704
Protocol Breakdown
![[protocol breakdown chart]](201308011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 59218259 (100.00%) 30272075908 (100.00%) 511.19
ip 53576504 ( 90.47%) 24706196912 ( 81.61%) 461.14
tcp 23103995 ( 39.01%) 20440439021 ( 67.52%) 884.71
http(s) 12410183 ( 20.96%) 15167639782 ( 50.10%) 1222.19
http(c) 7535802 ( 12.73%) 3383376078 ( 11.18%) 448.97
squid 131663 ( 0.22%) 10026256 ( 0.03%) 76.15
smtp 346752 ( 0.59%) 40250478 ( 0.13%) 116.08
nntp 5 ( 0.00%) 300 ( 0.00%) 60.00
ftp 34040 ( 0.06%) 10577110 ( 0.03%) 310.73
pop3 19573 ( 0.03%) 4964680 ( 0.02%) 253.65
imap 10733 ( 0.02%) 4695530 ( 0.02%) 437.49
telnet 3210 ( 0.01%) 1716124 ( 0.01%) 534.62
ssh 101920 ( 0.17%) 19878147 ( 0.07%) 195.04
dns 2634 ( 0.00%) 319739 ( 0.00%) 121.39
bgp 530 ( 0.00%) 116992 ( 0.00%) 220.74
napster 15 ( 0.00%) 1624 ( 0.00%) 108.27
realaud 6 ( 0.00%) 360 ( 0.00%) 60.00
rtsp 73999 ( 0.12%) 110231699 ( 0.36%) 1489.64
icecast 27300 ( 0.05%) 12752110 ( 0.04%) 467.11
hotline 19 ( 0.00%) 2320 ( 0.00%) 122.11
other 2405563 ( 4.06%) 1673886812 ( 5.53%) 695.84
udp 4538391 ( 7.66%) 2367348174 ( 7.82%) 521.63
dns 1610768 ( 2.72%) 745445443 ( 2.46%) 462.79
rip 33 ( 0.00%) 2331 ( 0.00%) 70.64
realaud 24 ( 0.00%) 2111 ( 0.00%) 87.96
halflif 32 ( 0.00%) 3112 ( 0.00%) 97.25
starcra 32 ( 0.00%) 2623 ( 0.00%) 81.97
everque 87 ( 0.00%) 10538 ( 0.00%) 121.13
unreal 58 ( 0.00%) 11133 ( 0.00%) 191.95
quake 29 ( 0.00%) 2575 ( 0.00%) 88.79
cuseeme 10 ( 0.00%) 750 ( 0.00%) 75.00
other 2925348 ( 4.94%) 1620865161 ( 5.35%) 554.08
icmp 22559763 ( 38.10%) 1410720773 ( 4.66%) 62.53
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 26185 ( 0.04%) 6414726 ( 0.02%) 244.98
ip6 3192555 ( 5.39%) 452857509 ( 1.50%) 141.85
other 155431 ( 0.26%) 28397549 ( 0.09%) 182.70
frag 566950 ( 0.96%) 730226142 ( 2.41%) 1287.99
ip6 5641755 ( 9.53%) 5565878996 ( 18.39%) 986.55
tcp6 5461886 ( 9.22%) 5492474388 ( 18.14%) 1005.60
http(s) 3712773 ( 6.27%) 5185233717 ( 17.13%) 1396.59
http(c) 1529666 ( 2.58%) 137637955 ( 0.45%) 89.98
smtp 638 ( 0.00%) 252249 ( 0.00%) 395.37
ftp 600 ( 0.00%) 75263 ( 0.00%) 125.44
pop3 380 ( 0.00%) 248867 ( 0.00%) 654.91
imap 236 ( 0.00%) 40316 ( 0.00%) 170.83
ssh 584 ( 0.00%) 94354 ( 0.00%) 161.57
dns 3226 ( 0.01%) 1936093 ( 0.01%) 600.15
bgp 94 ( 0.00%) 23541 ( 0.00%) 250.44
other 213689 ( 0.36%) 166932033 ( 0.55%) 781.19
udp6 104462 ( 0.18%) 23970334 ( 0.08%) 229.46
dns 102503 ( 0.17%) 23626860 ( 0.08%) 230.50
realaud 1 ( 0.00%) 109 ( 0.00%) 109.00
everque 4 ( 0.00%) 431 ( 0.00%) 107.75
quake 3 ( 0.00%) 338 ( 0.00%) 112.67
other 1951 ( 0.00%) 342596 ( 0.00%) 175.60
icmp6 36821 ( 0.06%) 4576224 ( 0.02%) 124.28
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 38556 ( 0.07%) 44853970 ( 0.15%) 1163.35
tcpdump file: 201308011400.dump.gz (1207.99 MB)