Traffic Trace Info
DumpFile: 201308171400.dump
FileSize: 2856.93MB
Id: 201308171400
StartTime: Sat Aug 17 14:00:00 2013
EndTime: Sat Aug 17 14:15:01 2013
TotalTime: 900.35 seconds
TotalCapSize: -1909.84MB CapLen: 96 bytes
# of packets: 43959100 (19304.89MB)
AvgRate: 179.88Mbps stddev:86.50M
IP flow (unique src/dst pair) Information
# of flows: 20202864 (avg. 2.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 2.4% 2.2% 2.2% 2.2% 1.9% 1.9% 1.9% 1.8% 1.7%
IP address Information
# of IPv4 addresses: 16479461
Top 10 bandwidth usage (bytes/total in %):
32.8% 6.8% 6.2% 4.7% 4.7% 4.2% 3.4% 3.1% 2.6% 2.4%
# of IPv6 addresses: 10362
Top 10 bandwidth usage (bytes/total in %):
43.9% 13.4% 10.4% 8.8% 8.2% 6.4% 5.8% 5.5% 5.1% 5.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201308171400.pktlen.png)
detailed numbers
[ 32- 63]: 24265811
[ 64- 127]: 6028912
[ 128- 255]: 564877
[ 256- 511]: 625282
[ 512- 1023]: 515441
[ 1024- 2047]: 11958777
Protocol Breakdown
![[protocol breakdown chart]](201308171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 43959100 (100.00%) 20242640755 (100.00%) 460.49
ip 42293188 ( 96.21%) 18874619901 ( 93.24%) 446.28
tcp 16269307 ( 37.01%) 15162844919 ( 74.91%) 931.99
http(s) 5793052 ( 13.18%) 7582170053 ( 37.46%) 1308.84
http(c) 3823429 ( 8.70%) 730884538 ( 3.61%) 191.16
squid 41454 ( 0.09%) 9070945 ( 0.04%) 218.82
smtp 44804 ( 0.10%) 7742066 ( 0.04%) 172.80
nntp 61 ( 0.00%) 3660 ( 0.00%) 60.00
ftp 13097 ( 0.03%) 1285977 ( 0.01%) 98.19
pop3 1070 ( 0.00%) 354934 ( 0.00%) 331.71
imap 5387 ( 0.01%) 2856213 ( 0.01%) 530.20
telnet 5120 ( 0.01%) 1832001 ( 0.01%) 357.81
ssh 217543 ( 0.49%) 112536741 ( 0.56%) 517.31
dns 1917 ( 0.00%) 365471 ( 0.00%) 190.65
bgp 515 ( 0.00%) 99108 ( 0.00%) 192.44
napster 3 ( 0.00%) 184 ( 0.00%) 61.33
realaud 62 ( 0.00%) 7170 ( 0.00%) 115.65
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 298 ( 0.00%) 31585 ( 0.00%) 105.99
hotline 12 ( 0.00%) 1498 ( 0.00%) 124.83
other 6321482 ( 14.38%) 6713602715 ( 33.17%) 1062.03
udp 2599334 ( 5.91%) 1371495526 ( 6.78%) 527.63
dns 790727 ( 1.80%) 371028691 ( 1.83%) 469.22
rip 7 ( 0.00%) 610 ( 0.00%) 87.14
realaud 81 ( 0.00%) 13196 ( 0.00%) 162.91
halflif 59 ( 0.00%) 15464 ( 0.00%) 262.10
starcra 9 ( 0.00%) 915 ( 0.00%) 101.67
everque 34 ( 0.00%) 11472 ( 0.00%) 337.41
unreal 5 ( 0.00%) 2865 ( 0.00%) 573.00
quake 2426 ( 0.01%) 1061157 ( 0.01%) 437.41
cuseeme 3 ( 0.00%) 231 ( 0.00%) 77.00
other 1800870 ( 4.10%) 998546741 ( 4.93%) 554.48
icmp 22623402 ( 51.46%) 1428459583 ( 7.06%) 63.14
ipip 186 ( 0.00%) 19380 ( 0.00%) 104.19
ipsec 3639 ( 0.01%) 2318870 ( 0.01%) 637.23
ip6 702256 ( 1.60%) 890083952 ( 4.40%) 1267.46
other 95064 ( 0.22%) 19397671 ( 0.10%) 204.05
frag 650118 ( 1.48%) 805358405 ( 3.98%) 1238.79
ip6 1665912 ( 3.79%) 1368020854 ( 6.76%) 821.18
tcp6 1060739 ( 2.41%) 742309617 ( 3.67%) 699.80
http(s) 435022 ( 0.99%) 549585995 ( 2.71%) 1263.35
http(c) 188778 ( 0.43%) 15974909 ( 0.08%) 84.62
smtp 208 ( 0.00%) 231099 ( 0.00%) 1111.05
ftp 57 ( 0.00%) 5214 ( 0.00%) 91.47
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 334 ( 0.00%) 47645 ( 0.00%) 142.65
bgp 93 ( 0.00%) 22071 ( 0.00%) 237.32
other 436175 ( 0.99%) 176430234 ( 0.87%) 404.49
udp6 86632 ( 0.20%) 21186454 ( 0.10%) 244.56
dns 84042 ( 0.19%) 20873650 ( 0.10%) 248.37
starcra 1 ( 0.00%) 116 ( 0.00%) 116.00
everque 1 ( 0.00%) 104 ( 0.00%) 104.00
unreal 1 ( 0.00%) 109 ( 0.00%) 109.00
quake 3 ( 0.00%) 378 ( 0.00%) 126.00
other 2584 ( 0.01%) 312097 ( 0.00%) 120.78
icmp6 21918 ( 0.05%) 2717668 ( 0.01%) 123.99
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 496592 ( 1.13%) 601802899 ( 2.97%) 1211.87
tcpdump file: 201308171400.dump.gz (867.45 MB)