Traffic Trace Info
DumpFile: 201308221400.dump
FileSize: 4560.97MB
Id: 201308221400
StartTime: Thu Aug 22 14:00:01 2013
EndTime: Thu Aug 22 14:15:01 2013
TotalTime: 899.86 seconds
TotalCapSize: -594.89MB CapLen: 96 bytes
# of packets: 69458650 (29238.04MB)
AvgRate: 272.63Mbps stddev:68.34M
IP flow (unique src/dst pair) Information
# of flows: 30470553 (avg. 2.28 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.0% 6.0% 5.9% 5.5% 2.6% 1.8% 1.4% 1.3% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 24447787
Top 10 bandwidth usage (bytes/total in %):
12.9% 11.6% 9.9% 8.2% 7.3% 6.7% 6.4% 6.0% 5.9% 4.1%
# of IPv6 addresses: 12236
Top 10 bandwidth usage (bytes/total in %):
39.7% 39.7% 26.1% 4.2% 3.1% 3.1% 2.8% 2.8% 2.4% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201308221400.pktlen.png)
detailed numbers
[ 32- 63]: 37838203
[ 64- 127]: 11191369
[ 128- 255]: 762187
[ 256- 511]: 975881
[ 512- 1023]: 1056781
[ 1024- 2047]: 17634229
Protocol Breakdown
![[protocol breakdown chart]](201308221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 69458650 (100.00%) 30658303837 (100.00%) 441.39
ip 66229188 ( 95.35%) 28620859471 ( 93.35%) 432.15
tcp 27182714 ( 39.14%) 24484465465 ( 79.86%) 900.74
http(s) 14871965 ( 21.41%) 18340483659 ( 59.82%) 1233.23
http(c) 9812012 ( 14.13%) 4566726707 ( 14.90%) 465.42
squid 25548 ( 0.04%) 5317956 ( 0.02%) 208.16
smtp 106941 ( 0.15%) 79837927 ( 0.26%) 746.56
nntp 41 ( 0.00%) 2460 ( 0.00%) 60.00
ftp 75819 ( 0.11%) 47159566 ( 0.15%) 622.00
pop3 15738 ( 0.02%) 12873151 ( 0.04%) 817.97
imap 6482 ( 0.01%) 3397012 ( 0.01%) 524.07
telnet 3165 ( 0.00%) 1694884 ( 0.01%) 535.51
ssh 169869 ( 0.24%) 20516216 ( 0.07%) 120.78
dns 4209 ( 0.01%) 534400 ( 0.00%) 126.97
bgp 675 ( 0.00%) 253297 ( 0.00%) 375.25
napster 45 ( 0.00%) 4537 ( 0.00%) 100.82
realaud 20 ( 0.00%) 3654 ( 0.00%) 182.70
rtsp 5 ( 0.00%) 300 ( 0.00%) 60.00
icecast 21961 ( 0.03%) 2267284 ( 0.01%) 103.24
hotline 3 ( 0.00%) 180 ( 0.00%) 60.00
other 2068168 ( 2.98%) 1403389395 ( 4.58%) 678.57
udp 2554359 ( 3.68%) 1354161178 ( 4.42%) 530.14
dns 1097794 ( 1.58%) 482279740 ( 1.57%) 439.32
rip 17 ( 0.00%) 1137 ( 0.00%) 66.88
realaud 18 ( 0.00%) 1681 ( 0.00%) 93.39
halflif 3434 ( 0.00%) 299424 ( 0.00%) 87.19
starcra 18 ( 0.00%) 2096 ( 0.00%) 116.44
everque 168 ( 0.00%) 21288 ( 0.00%) 126.71
unreal 11 ( 0.00%) 2062 ( 0.00%) 187.45
quake 12 ( 0.00%) 1527 ( 0.00%) 127.25
cuseeme 16 ( 0.00%) 1360 ( 0.00%) 85.00
other 1441272 ( 2.08%) 866348680 ( 2.83%) 601.10
icmp 35858858 ( 51.63%) 2212391850 ( 7.22%) 61.70
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 19762 ( 0.03%) 7141692 ( 0.02%) 361.39
ip6 521783 ( 0.75%) 543389600 ( 1.77%) 1041.41
other 91528 ( 0.13%) 19290526 ( 0.06%) 210.76
frag 579104 ( 0.83%) 733726398 ( 2.39%) 1267.00
ip6 3229462 ( 4.65%) 2037444366 ( 6.65%) 630.89
tcp6 3049798 ( 4.39%) 1941045752 ( 6.33%) 636.45
http(s) 834659 ( 1.20%) 1008723703 ( 3.29%) 1208.55
http(c) 964032 ( 1.39%) 81605827 ( 0.27%) 84.65
smtp 225 ( 0.00%) 26994 ( 0.00%) 119.97
ftp 41 ( 0.00%) 3751 ( 0.00%) 91.49
pop3 122 ( 0.00%) 71712 ( 0.00%) 587.80
ssh 577 ( 0.00%) 88607 ( 0.00%) 153.56
dns 342 ( 0.00%) 49036 ( 0.00%) 143.38
bgp 103 ( 0.00%) 23154 ( 0.00%) 224.80
other 1249697 ( 1.80%) 850452968 ( 2.77%) 680.53
udp6 104310 ( 0.15%) 24605229 ( 0.08%) 235.89
dns 101466 ( 0.15%) 24290602 ( 0.08%) 239.40
halflif 1 ( 0.00%) 109 ( 0.00%) 109.00
unreal 1 ( 0.00%) 105 ( 0.00%) 105.00
quake 1 ( 0.00%) 117 ( 0.00%) 117.00
cuseeme 1 ( 0.00%) 105 ( 0.00%) 105.00
other 2840 ( 0.00%) 314191 ( 0.00%) 110.63
icmp6 17326 ( 0.02%) 2229459 ( 0.01%) 128.68
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 57997 ( 0.08%) 69559710 ( 0.23%) 1199.37
tcpdump file: 201308221400.dump.gz (1456.44 MB)