Traffic Trace Info
DumpFile: 201308041400.dump
FileSize: 2241.03MB
Id: 201308041400
StartTime: Sun Aug 4 14:00:01 2013
EndTime: Sun Aug 4 14:15:01 2013
TotalTime: 900.00 seconds
TotalCapSize: 1694.76MB CapLen: 96 bytes
# of packets: 35799655 (10794.44MB)
AvgRate: 100.62Mbps stddev:22.56M
IP flow (unique src/dst pair) Information
# of flows: 20538488 (avg. 1.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 2.3% 1.7% 1.6% 1.5% 1.5% 1.3% 1.2% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 16701200
Top 10 bandwidth usage (bytes/total in %):
12.1% 7.7% 5.7% 4.4% 4.3% 3.7% 3.6% 2.9% 2.6% 2.6%
# of IPv6 addresses: 10008
Top 10 bandwidth usage (bytes/total in %):
14.0% 14.0% 11.8% 11.7% 8.9% 8.9% 8.9% 8.9% 6.8% 6.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201308041400.pktlen.png)
detailed numbers
[ 32- 63]: 23113031
[ 64- 127]: 5321099
[ 128- 255]: 530644
[ 256- 511]: 370005
[ 512- 1023]: 398773
[ 1024- 2047]: 6066103
Protocol Breakdown
![[protocol breakdown chart]](201308041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35799655 (100.00%) 11318786649 (100.00%) 316.17
ip 34880969 ( 97.43%) 10355951887 ( 91.49%) 296.89
tcp 9941686 ( 27.77%) 7873730123 ( 69.56%) 791.99
http(s) 4534887 ( 12.67%) 5512540946 ( 48.70%) 1215.59
http(c) 2984263 ( 8.34%) 510218321 ( 4.51%) 170.97
squid 18117 ( 0.05%) 12934373 ( 0.11%) 713.94
smtp 66982 ( 0.19%) 19214002 ( 0.17%) 286.85
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 13338 ( 0.04%) 867847 ( 0.01%) 65.07
pop3 1638 ( 0.00%) 419994 ( 0.00%) 256.41
imap 2216 ( 0.01%) 292572 ( 0.00%) 132.03
telnet 2431 ( 0.01%) 1647416 ( 0.01%) 677.67
ssh 160903 ( 0.45%) 37284974 ( 0.33%) 231.72
dns 2436 ( 0.01%) 298976 ( 0.00%) 122.73
bgp 510 ( 0.00%) 93911 ( 0.00%) 184.14
napster 13 ( 0.00%) 1526 ( 0.00%) 117.38
realaud 7 ( 0.00%) 801 ( 0.00%) 114.43
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 16278 ( 0.05%) 1076881 ( 0.01%) 66.16
hotline 6 ( 0.00%) 731 ( 0.00%) 121.83
other 2137654 ( 5.97%) 1776836418 ( 15.70%) 831.21
udp 2582528 ( 7.21%) 1007450970 ( 8.90%) 390.10
dns 983825 ( 2.75%) 210065638 ( 1.86%) 213.52
rip 5 ( 0.00%) 430 ( 0.00%) 86.00
realaud 43 ( 0.00%) 3669 ( 0.00%) 85.33
halflif 14 ( 0.00%) 1090 ( 0.00%) 77.86
starcra 65 ( 0.00%) 11781 ( 0.00%) 181.25
everque 43 ( 0.00%) 6676 ( 0.00%) 155.26
unreal 82 ( 0.00%) 10780 ( 0.00%) 131.46
quake 50 ( 0.00%) 3550 ( 0.00%) 71.00
cuseeme 4 ( 0.00%) 332 ( 0.00%) 83.00
other 1596389 ( 4.46%) 797051057 ( 7.04%) 499.28
icmp 22013760 ( 61.49%) 1391771062 ( 12.30%) 63.22
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 3783 ( 0.01%) 2467802 ( 0.02%) 652.34
ip6 187468 ( 0.52%) 53954604 ( 0.48%) 287.81
other 151560 ( 0.42%) 26558166 ( 0.23%) 175.23
frag 486097 ( 1.36%) 624738994 ( 5.52%) 1285.21
ip6 918686 ( 2.57%) 962834762 ( 8.51%) 1048.06
tcp6 805956 ( 2.25%) 938215308 ( 8.29%) 1164.10
http(s) 620160 ( 1.73%) 799811795 ( 7.07%) 1289.69
http(c) 80253 ( 0.22%) 10335830 ( 0.09%) 128.79
smtp 93 ( 0.00%) 10735 ( 0.00%) 115.43
ftp 28 ( 0.00%) 2537 ( 0.00%) 90.61
pop3 182 ( 0.00%) 154659 ( 0.00%) 849.77
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 302 ( 0.00%) 44828 ( 0.00%) 148.44
bgp 91 ( 0.00%) 22218 ( 0.00%) 244.15
other 104775 ( 0.29%) 127820256 ( 1.13%) 1219.95
udp6 87528 ( 0.24%) 21080660 ( 0.19%) 240.84
dns 84972 ( 0.24%) 20789036 ( 0.18%) 244.66
everque 2 ( 0.00%) 208 ( 0.00%) 104.00
quake 1 ( 0.00%) 118 ( 0.00%) 118.00
cuseeme 1 ( 0.00%) 94 ( 0.00%) 94.00
other 2552 ( 0.01%) 291204 ( 0.00%) 114.11
icmp6 24661 ( 0.07%) 3026569 ( 0.03%) 122.73
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 510 ( 0.00%) 508009 ( 0.00%) 996.10
tcpdump file: 201308041400.dump.gz (716.16 MB)