Traffic Trace Info
DumpFile: 201308031400.dump
FileSize: 2596.80MB
Id: 201308031400
StartTime: Sat Aug 3 14:00:01 2013
EndTime: Sat Aug 3 14:15:01 2013
TotalTime: 899.89 seconds
TotalCapSize: 1975.08MB CapLen: 96 bytes
# of packets: 40744729 (16740.41MB)
AvgRate: 156.06Mbps stddev:29.39M
IP flow (unique src/dst pair) Information
# of flows: 20788581 (avg. 1.96 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 3.9% 3.7% 2.5% 2.5% 2.3% 2.0% 1.3% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 16869528
Top 10 bandwidth usage (bytes/total in %):
11.2% 7.4% 7.3% 6.3% 6.0% 4.5% 4.3% 4.0% 3.3% 3.1%
# of IPv6 addresses: 10522
Top 10 bandwidth usage (bytes/total in %):
21.7% 17.8% 17.5% 10.5% 9.2% 8.3% 8.3% 8.3% 8.3% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201308031400.pktlen.png)
detailed numbers
[ 32- 63]: 23450540
[ 64- 127]: 5257571
[ 128- 255]: 600880
[ 256- 511]: 619371
[ 512- 1023]: 886199
[ 1024- 2047]: 9930168
Protocol Breakdown
![[protocol breakdown chart]](201308031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40744729 (100.00%) 17553595221 (100.00%) 430.82
ip 39368915 ( 96.62%) 16422037233 ( 93.55%) 417.13
tcp 14319014 ( 35.14%) 13512601943 ( 76.98%) 943.68
http(s) 8471390 ( 20.79%) 11003386663 ( 62.68%) 1298.89
http(c) 4131240 ( 10.14%) 1270587230 ( 7.24%) 307.56
squid 65882 ( 0.16%) 56592590 ( 0.32%) 859.00
smtp 62823 ( 0.15%) 10162617 ( 0.06%) 161.77
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 5692 ( 0.01%) 391899 ( 0.00%) 68.85
pop3 1388 ( 0.00%) 358892 ( 0.00%) 258.57
imap 2793 ( 0.01%) 750310 ( 0.00%) 268.64
telnet 2367 ( 0.01%) 1643020 ( 0.01%) 694.14
ssh 44991 ( 0.11%) 17948851 ( 0.10%) 398.94
dns 3564 ( 0.01%) 1789282 ( 0.01%) 502.04
bgp 488 ( 0.00%) 92418 ( 0.00%) 189.38
napster 22 ( 0.00%) 6712 ( 0.00%) 305.09
icecast 66961 ( 0.16%) 45159570 ( 0.26%) 674.42
hotline 5 ( 0.00%) 660 ( 0.00%) 132.00
other 1459407 ( 3.58%) 1103731169 ( 6.29%) 756.29
udp 3085721 ( 7.57%) 1117996511 ( 6.37%) 362.31
dns 1442672 ( 3.54%) 473970175 ( 2.70%) 328.54
rip 3 ( 0.00%) 420 ( 0.00%) 140.00
realaud 23 ( 0.00%) 2045 ( 0.00%) 88.91
halflif 34 ( 0.00%) 3218 ( 0.00%) 94.65
starcra 19 ( 0.00%) 1484 ( 0.00%) 78.11
everque 68 ( 0.00%) 8836 ( 0.00%) 129.94
unreal 6 ( 0.00%) 472 ( 0.00%) 78.67
quake 26 ( 0.00%) 2181 ( 0.00%) 83.88
cuseeme 4 ( 0.00%) 361 ( 0.00%) 90.25
other 1642548 ( 4.03%) 643955854 ( 3.67%) 392.05
icmp 21354231 ( 52.41%) 1342129178 ( 7.65%) 62.85
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 12674 ( 0.03%) 5362116 ( 0.03%) 423.08
ip6 430481 ( 1.06%) 410472329 ( 2.34%) 953.52
other 166609 ( 0.41%) 33455886 ( 0.19%) 200.80
frag 191885 ( 0.47%) 247464641 ( 1.41%) 1289.65
ip6 1375814 ( 3.38%) 1131557988 ( 6.45%) 822.46
tcp6 1142551 ( 2.80%) 982525055 ( 5.60%) 859.94
http(s) 534578 ( 1.31%) 639908417 ( 3.65%) 1197.03
http(c) 173272 ( 0.43%) 19276397 ( 0.11%) 111.25
smtp 124 ( 0.00%) 54308 ( 0.00%) 437.97
ftp 25 ( 0.00%) 2209 ( 0.00%) 88.36
pop3 179 ( 0.00%) 155157 ( 0.00%) 866.80
ssh 80 ( 0.00%) 14066 ( 0.00%) 175.82
dns 452 ( 0.00%) 95376 ( 0.00%) 211.01
bgp 94 ( 0.00%) 26678 ( 0.00%) 283.81
other 433747 ( 1.06%) 322992447 ( 1.84%) 744.66
udp6 111594 ( 0.27%) 41603522 ( 0.24%) 372.81
dns 89431 ( 0.22%) 22599281 ( 0.13%) 252.70
halflif 2 ( 0.00%) 222 ( 0.00%) 111.00
everque 1 ( 0.00%) 105 ( 0.00%) 105.00
unreal 2 ( 0.00%) 216 ( 0.00%) 108.00
quake 1 ( 0.00%) 109 ( 0.00%) 109.00
other 22157 ( 0.05%) 19003589 ( 0.11%) 857.68
icmp6 29531 ( 0.07%) 3694866 ( 0.02%) 125.12
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 92108 ( 0.23%) 103730465 ( 0.59%) 1126.18
tcpdump file: 201308031400.dump.gz (820.11 MB)