Traffic Trace Info
DumpFile: 201308121400.dump
FileSize: 2909.46MB
Id: 201308121400
StartTime: Mon Aug 12 14:00:01 2013
EndTime: Mon Aug 12 14:15:01 2013
TotalTime: 899.91 seconds
TotalCapSize: -1869.20MB CapLen: 96 bytes
# of packets: 44738756 (18995.02MB)
AvgRate: 177.10Mbps stddev:37.75M
IP flow (unique src/dst pair) Information
# of flows: 20979424 (avg. 2.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.2% 3.2% 2.8% 2.5% 2.3% 2.2% 2.1% 2.1% 2.0% 1.9%
IP address Information
# of IPv4 addresses: 17068761
Top 10 bandwidth usage (bytes/total in %):
14.3% 9.4% 8.7% 6.8% 6.4% 3.6% 3.3% 3.2% 3.2% 3.1%
# of IPv6 addresses: 12024
Top 10 bandwidth usage (bytes/total in %):
20.6% 20.6% 15.4% 12.9% 12.5% 7.8% 7.6% 6.9% 4.4% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201308121400.pktlen.png)
detailed numbers
[ 32- 63]: 24008061
[ 64- 127]: 6989705
[ 128- 255]: 632035
[ 256- 511]: 734365
[ 512- 1023]: 799139
[ 1024- 2047]: 11575451
Protocol Breakdown
![[protocol breakdown chart]](201308121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 44738756 (100.00%) 19917721133 (100.00%) 445.20
ip 42519095 ( 95.04%) 17964363290 ( 90.19%) 422.50
tcp 17201180 ( 38.45%) 14450015055 ( 72.55%) 840.06
http(s) 10398767 ( 23.24%) 12770582028 ( 64.12%) 1228.09
http(c) 5087914 ( 11.37%) 841051490 ( 4.22%) 165.30
squid 15049 ( 0.03%) 6641570 ( 0.03%) 441.33
smtp 68657 ( 0.15%) 27462601 ( 0.14%) 400.00
ftp 39284 ( 0.09%) 26508511 ( 0.13%) 674.79
pop3 6694 ( 0.01%) 2147597 ( 0.01%) 320.82
imap 1930 ( 0.00%) 340669 ( 0.00%) 176.51
telnet 7237 ( 0.02%) 1936244 ( 0.01%) 267.55
ssh 51536 ( 0.12%) 10390542 ( 0.05%) 201.62
dns 2587 ( 0.01%) 311147 ( 0.00%) 120.27
bgp 484 ( 0.00%) 90932 ( 0.00%) 187.88
napster 25 ( 0.00%) 2639 ( 0.00%) 105.56
realaud 9 ( 0.00%) 935 ( 0.00%) 103.89
icecast 626 ( 0.00%) 60579 ( 0.00%) 96.77
hotline 2 ( 0.00%) 120 ( 0.00%) 60.00
other 1520379 ( 3.40%) 762487451 ( 3.83%) 501.51
udp 2973856 ( 6.65%) 1707515906 ( 8.57%) 574.18
dns 1012426 ( 2.26%) 492216662 ( 2.47%) 486.18
rip 1 ( 0.00%) 81 ( 0.00%) 81.00
realaud 17 ( 0.00%) 7591 ( 0.00%) 446.53
halflif 24825 ( 0.06%) 13384769 ( 0.07%) 539.16
starcra 37 ( 0.00%) 3377 ( 0.00%) 91.27
everque 32 ( 0.00%) 5745 ( 0.00%) 179.53
unreal 8 ( 0.00%) 4207 ( 0.00%) 525.88
quake 5 ( 0.00%) 440 ( 0.00%) 88.00
cuseeme 5 ( 0.00%) 1607 ( 0.00%) 321.40
other 1930547 ( 4.32%) 1200187044 ( 6.03%) 621.68
icmp 21790784 ( 48.71%) 1360284082 ( 6.83%) 62.42
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 4594 ( 0.01%) 2600772 ( 0.01%) 566.12
ip6 451118 ( 1.01%) 424114671 ( 2.13%) 940.14
other 97378 ( 0.22%) 19813534 ( 0.10%) 203.47
frag 678107 ( 1.52%) 820019735 ( 4.12%) 1209.28
ip6 2219661 ( 4.96%) 1953357843 ( 9.81%) 880.03
tcp6 1849323 ( 4.13%) 1624665112 ( 8.16%) 878.52
http(s) 1173163 ( 2.62%) 1485817244 ( 7.46%) 1266.51
http(c) 433116 ( 0.97%) 37935537 ( 0.19%) 87.59
squid 36 ( 0.00%) 8164 ( 0.00%) 226.78
smtp 166 ( 0.00%) 56537 ( 0.00%) 340.58
ftp 1233 ( 0.00%) 126871 ( 0.00%) 102.90
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 747 ( 0.00%) 113475 ( 0.00%) 151.91
bgp 91 ( 0.00%) 23421 ( 0.00%) 257.37
other 240699 ( 0.54%) 100571413 ( 0.50%) 417.83
udp6 100738 ( 0.23%) 24679616 ( 0.12%) 244.99
dns 98115 ( 0.22%) 24371612 ( 0.12%) 248.40
realaud 2 ( 0.00%) 203 ( 0.00%) 101.50
halflif 1 ( 0.00%) 101 ( 0.00%) 101.00
starcra 1 ( 0.00%) 109 ( 0.00%) 109.00
everque 1 ( 0.00%) 90 ( 0.00%) 90.00
quake 4 ( 0.00%) 437 ( 0.00%) 109.25
other 2614 ( 0.01%) 307064 ( 0.00%) 117.47
icmp6 21019 ( 0.05%) 2698157 ( 0.01%) 128.37
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 248551 ( 0.56%) 301310878 ( 1.51%) 1212.27
tcpdump file: 201308121400.dump.gz (913.17 MB)