Traffic Trace Info
DumpFile: 201308271400.dump
FileSize: 4656.41MB
Id: 201308271400
StartTime: Tue Aug 27 14:00:01 2013
EndTime: Tue Aug 27 14:15:01 2013
TotalTime: 899.73 seconds
TotalCapSize: -539.75MB CapLen: 96 bytes
# of packets: 72099118 (33232.02MB)
AvgRate: 309.87Mbps stddev:50.72M
IP flow (unique src/dst pair) Information
# of flows: 29391614 (avg. 2.45 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.3% 5.4% 5.0% 4.2% 2.6% 1.6% 1.4% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 23356244
Top 10 bandwidth usage (bytes/total in %):
13.9% 9.8% 6.8% 6.7% 6.3% 5.8% 5.3% 4.5% 4.0% 2.8%
# of IPv6 addresses: 13137
Top 10 bandwidth usage (bytes/total in %):
21.8% 19.0% 14.4% 11.7% 11.2% 4.8% 4.5% 3.3% 2.7% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201308271400.pktlen.png)
detailed numbers
[ 32- 63]: 39076262
[ 64- 127]: 9539297
[ 128- 255]: 729500
[ 256- 511]: 1198174
[ 512- 1023]: 1098378
[ 1024- 2047]: 20457507
Protocol Breakdown
![[protocol breakdown chart]](201308271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 72099118 (100.00%) 34846300010 (100.00%) 483.31
ip 69718882 ( 96.70%) 33058430542 ( 94.87%) 474.17
tcp 32070222 ( 44.48%) 29599532556 ( 84.94%) 922.96
http(s) 16498559 ( 22.88%) 22083904071 ( 63.38%) 1338.54
http(c) 10147616 ( 14.07%) 2741039239 ( 7.87%) 270.12
squid 117511 ( 0.16%) 13417365 ( 0.04%) 114.18
smtp 63995 ( 0.09%) 13887736 ( 0.04%) 217.01
nntp 8 ( 0.00%) 480 ( 0.00%) 60.00
ftp 55937 ( 0.08%) 38594436 ( 0.11%) 689.96
pop3 5561 ( 0.01%) 2484757 ( 0.01%) 446.82
imap 5648 ( 0.01%) 4503761 ( 0.01%) 797.41
telnet 2651 ( 0.00%) 1661490 ( 0.00%) 626.74
ssh 82443 ( 0.11%) 14307371 ( 0.04%) 173.54
dns 4525 ( 0.01%) 1805188 ( 0.01%) 398.94
bgp 3782 ( 0.01%) 2290943 ( 0.01%) 605.75
napster 9 ( 0.00%) 915 ( 0.00%) 101.67
realaud 1 ( 0.00%) 60 ( 0.00%) 60.00
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 37118 ( 0.05%) 25901553 ( 0.07%) 697.82
hotline 4 ( 0.00%) 240 ( 0.00%) 60.00
other 5044852 ( 7.00%) 4655732831 ( 13.36%) 922.87
udp 2254114 ( 3.13%) 903897111 ( 2.59%) 401.00
dns 912768 ( 1.27%) 357063514 ( 1.02%) 391.19
rip 1 ( 0.00%) 81 ( 0.00%) 81.00
realaud 9 ( 0.00%) 1144 ( 0.00%) 127.11
halflif 10 ( 0.00%) 1023 ( 0.00%) 102.30
starcra 3 ( 0.00%) 569 ( 0.00%) 189.67
everque 59 ( 0.00%) 11504 ( 0.00%) 194.98
unreal 1 ( 0.00%) 77 ( 0.00%) 77.00
quake 12 ( 0.00%) 2467 ( 0.00%) 205.58
cuseeme 6 ( 0.00%) 460 ( 0.00%) 76.67
other 1340665 ( 1.86%) 546353695 ( 1.57%) 407.52
icmp 34887786 ( 48.39%) 2171359790 ( 6.23%) 62.24
ipip 186 ( 0.00%) 19350 ( 0.00%) 104.03
ipsec 14198 ( 0.02%) 5973564 ( 0.02%) 420.73
ip6 392342 ( 0.54%) 352166941 ( 1.01%) 897.60
other 100034 ( 0.14%) 25481230 ( 0.07%) 254.73
frag 271418 ( 0.38%) 335335381 ( 0.96%) 1235.49
ip6 2380236 ( 3.30%) 1787869468 ( 5.13%) 751.13
tcp6 2226957 ( 3.09%) 1753191473 ( 5.03%) 787.26
http(s) 1256907 ( 1.74%) 1624513932 ( 4.66%) 1292.47
http(c) 899973 ( 1.25%) 78621533 ( 0.23%) 87.36
smtp 853 ( 0.00%) 283955 ( 0.00%) 332.89
ftp 67 ( 0.00%) 8324 ( 0.00%) 124.24
pop3 191 ( 0.00%) 144010 ( 0.00%) 753.98
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 422 ( 0.00%) 69686 ( 0.00%) 165.13
bgp 94 ( 0.00%) 24972 ( 0.00%) 265.66
other 68378 ( 0.09%) 49512611 ( 0.14%) 724.10
udp6 109434 ( 0.15%) 26094123 ( 0.07%) 238.45
dns 105805 ( 0.15%) 25629822 ( 0.07%) 242.24
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
starcra 1 ( 0.00%) 116 ( 0.00%) 116.00
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
unreal 1 ( 0.00%) 110 ( 0.00%) 110.00
cuseeme 2 ( 0.00%) 223 ( 0.00%) 111.50
other 3623 ( 0.01%) 463638 ( 0.00%) 127.97
icmp6 39533 ( 0.05%) 4888990 ( 0.01%) 123.67
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 4281 ( 0.01%) 3690666 ( 0.01%) 862.10
tcpdump file: 201308271400.dump.gz (1491.65 MB)