Traffic Trace Info
DumpFile: 201308241400.dump
FileSize: 3530.71MB
Id: 201308241400
StartTime: Sat Aug 24 14:00:01 2013
EndTime: Sat Aug 24 14:15:01 2013
TotalTime: 899.90 seconds
TotalCapSize: -1435.73MB CapLen: 96 bytes
# of packets: 57045034 (17995.44MB)
AvgRate: 167.78Mbps stddev:31.47M
IP flow (unique src/dst pair) Information
# of flows: 30009559 (avg. 1.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.7% 3.1% 2.3% 1.6% 1.5% 1.3% 1.3% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 24090296
Top 10 bandwidth usage (bytes/total in %):
24.2% 12.3% 11.4% 6.3% 4.3% 4.0% 3.8% 3.4% 3.3% 2.9%
# of IPv6 addresses: 10574
Top 10 bandwidth usage (bytes/total in %):
37.7% 23.8% 23.2% 14.5% 3.9% 3.9% 3.3% 3.0% 3.0% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201308241400.pktlen.png)
detailed numbers
[ 32- 63]: 36522124
[ 64- 127]: 8039822
[ 128- 255]: 868455
[ 256- 511]: 590210
[ 512- 1023]: 649351
[ 1024- 2047]: 10375072
Protocol Breakdown
![[protocol breakdown chart]](201308241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 57045034 (100.00%) 18869584551 (100.00%) 330.78
ip 55879055 ( 97.96%) 18044111614 ( 95.63%) 322.91
tcp 14958529 ( 26.22%) 12335993831 ( 65.38%) 824.68
http(s) 7747571 ( 13.58%) 10273074203 ( 54.44%) 1325.97
http(c) 5108572 ( 8.96%) 639952608 ( 3.39%) 125.27
squid 594695 ( 1.04%) 613693283 ( 3.25%) 1031.95
smtp 73698 ( 0.13%) 11234236 ( 0.06%) 152.44
nntp 43 ( 0.00%) 2580 ( 0.00%) 60.00
ftp 8195 ( 0.01%) 546792 ( 0.00%) 66.72
pop3 2267 ( 0.00%) 1126577 ( 0.01%) 496.95
imap 3453 ( 0.01%) 366304 ( 0.00%) 106.08
telnet 34768 ( 0.06%) 3850136 ( 0.02%) 110.74
ssh 66749 ( 0.12%) 21671457 ( 0.11%) 324.67
dns 2479 ( 0.00%) 388592 ( 0.00%) 156.75
bgp 595 ( 0.00%) 165920 ( 0.00%) 278.86
napster 6 ( 0.00%) 404 ( 0.00%) 67.33
realaud 20 ( 0.00%) 3617 ( 0.00%) 180.85
rtsp 48 ( 0.00%) 13210 ( 0.00%) 275.21
icecast 7498 ( 0.01%) 547309 ( 0.00%) 72.99
other 1307872 ( 2.29%) 769356603 ( 4.08%) 588.25
udp 5045063 ( 8.84%) 3184568112 ( 16.88%) 631.22
dns 824862 ( 1.45%) 355313206 ( 1.88%) 430.75
rip 3 ( 0.00%) 242 ( 0.00%) 80.67
realaud 16 ( 0.00%) 1336 ( 0.00%) 83.50
halflif 2409 ( 0.00%) 2670336 ( 0.01%) 1108.48
starcra 7 ( 0.00%) 590 ( 0.00%) 84.29
everque 34 ( 0.00%) 5634 ( 0.00%) 165.71
unreal 12 ( 0.00%) 1289 ( 0.00%) 107.42
quake 18 ( 0.00%) 1811 ( 0.00%) 100.61
cuseeme 3 ( 0.00%) 251 ( 0.00%) 83.67
other 4186670 ( 7.34%) 2824038118 ( 14.97%) 674.53
icmp 35377122 ( 62.02%) 2186803570 ( 11.59%) 61.81
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 3512 ( 0.01%) 2367844 ( 0.01%) 674.22
ip6 395035 ( 0.69%) 312320735 ( 1.66%) 790.62
sctp 2 ( 0.00%) 206 ( 0.00%) 103.00
other 99607 ( 0.17%) 22038046 ( 0.12%) 221.25
frag 816398 ( 1.43%) 999065785 ( 5.29%) 1223.75
ip6 1165979 ( 2.04%) 825472937 ( 4.37%) 707.97
tcp6 1030731 ( 1.81%) 792855570 ( 4.20%) 769.22
http(s) 357945 ( 0.63%) 430166132 ( 2.28%) 1201.77
http(c) 195161 ( 0.34%) 17564766 ( 0.09%) 90.00
smtp 167 ( 0.00%) 67266 ( 0.00%) 402.79
ftp 65 ( 0.00%) 5872 ( 0.00%) 90.34
pop3 141 ( 0.00%) 88505 ( 0.00%) 627.70
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 382 ( 0.00%) 86173 ( 0.00%) 225.58
bgp 106 ( 0.00%) 23978 ( 0.00%) 226.21
other 476692 ( 0.84%) 344840428 ( 1.83%) 723.40
udp6 113973 ( 0.20%) 23274076 ( 0.12%) 204.21
dns 111310 ( 0.20%) 22979752 ( 0.12%) 206.45
realaud 2 ( 0.00%) 184 ( 0.00%) 92.00
halflif 2 ( 0.00%) 192 ( 0.00%) 96.00
starcra 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 5 ( 0.00%) 502 ( 0.00%) 100.40
unreal 1 ( 0.00%) 93 ( 0.00%) 93.00
quake 5 ( 0.00%) 514 ( 0.00%) 102.80
other 2647 ( 0.00%) 292732 ( 0.00%) 110.59
icmp6 14262 ( 0.03%) 1864339 ( 0.01%) 130.72
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6983 ( 0.01%) 7474872 ( 0.04%) 1070.44
tcpdump file: 201308241400.dump.gz (1174.30 MB)