Traffic Trace Info
DumpFile: 201308281400.dump
FileSize: 3699.53MB
Id: 201308281400
StartTime: Wed Aug 28 14:00:00 2013
EndTime: Wed Aug 28 14:15:00 2013
TotalTime: 899.62 seconds
TotalCapSize: -1287.42MB CapLen: 96 bytes
# of packets: 58388685 (19788.91MB)
AvgRate: 184.54Mbps stddev:35.40M
IP flow (unique src/dst pair) Information
# of flows: 29010986 (avg. 2.01 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 2.1% 1.8% 1.7% 1.6% 1.4% 1.3% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 23125768
Top 10 bandwidth usage (bytes/total in %):
16.6% 11.5% 7.7% 5.3% 3.9% 3.3% 2.6% 2.4% 2.4% 2.3%
# of IPv6 addresses: 12143
Top 10 bandwidth usage (bytes/total in %):
11.8% 10.2% 9.8% 7.7% 5.9% 5.5% 5.4% 3.2% 3.1% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201308281400.pktlen.png)
detailed numbers
[ 32- 63]: 37003425
[ 64- 127]: 7344962
[ 128- 255]: 834683
[ 256- 511]: 849783
[ 512- 1023]: 850917
[ 1024- 2047]: 11504915
Protocol Breakdown
![[protocol breakdown chart]](201308281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 58388685 (100.00%) 20750178914 (100.00%) 355.38
ip 56074877 ( 96.04%) 18308768365 ( 88.23%) 326.51
tcp 17810461 ( 30.50%) 14645988327 ( 70.58%) 822.33
http(s) 9139951 ( 15.65%) 11468958580 ( 55.27%) 1254.82
http(c) 6321125 ( 10.83%) 1551749222 ( 7.48%) 245.49
squid 71841 ( 0.12%) 57098418 ( 0.28%) 794.79
smtp 71019 ( 0.12%) 15739506 ( 0.08%) 221.62
nntp 5 ( 0.00%) 300 ( 0.00%) 60.00
ftp 45383 ( 0.08%) 28636024 ( 0.14%) 630.99
pop3 6727 ( 0.01%) 4739026 ( 0.02%) 704.48
imap 3462 ( 0.01%) 887724 ( 0.00%) 256.42
telnet 59485 ( 0.10%) 5862177 ( 0.03%) 98.55
ssh 196271 ( 0.34%) 198212464 ( 0.96%) 1009.89
dns 2518 ( 0.00%) 529001 ( 0.00%) 210.09
bgp 544 ( 0.00%) 130225 ( 0.00%) 239.38
napster 26 ( 0.00%) 2533 ( 0.00%) 97.42
realaud 18 ( 0.00%) 1146 ( 0.00%) 63.67
rtsp 640 ( 0.00%) 345348 ( 0.00%) 539.61
icecast 20682 ( 0.04%) 2550156 ( 0.01%) 123.30
other 1870758 ( 3.20%) 1310546117 ( 6.32%) 700.54
udp 2814249 ( 4.82%) 1317942305 ( 6.35%) 468.31
dns 1077684 ( 1.85%) 459555151 ( 2.21%) 426.43
rip 11 ( 0.00%) 952 ( 0.00%) 86.55
realaud 18 ( 0.00%) 1637 ( 0.00%) 90.94
halflif 1923 ( 0.00%) 210877 ( 0.00%) 109.66
starcra 4 ( 0.00%) 450 ( 0.00%) 112.50
everque 30 ( 0.00%) 5158 ( 0.00%) 171.93
unreal 5 ( 0.00%) 392 ( 0.00%) 78.40
quake 21 ( 0.00%) 1905 ( 0.00%) 90.71
cuseeme 6 ( 0.00%) 506 ( 0.00%) 84.33
other 1723879 ( 2.95%) 854355645 ( 4.12%) 495.60
icmp 35085971 ( 60.09%) 2180961637 ( 10.51%) 62.16
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 17520 ( 0.03%) 9054248 ( 0.04%) 516.79
ip6 241904 ( 0.41%) 127781736 ( 0.62%) 528.23
sctp 2 ( 0.00%) 206 ( 0.00%) 103.00
other 104586 ( 0.18%) 27020746 ( 0.13%) 258.36
frag 654634 ( 1.12%) 821129054 ( 3.96%) 1254.33
ip6 2313808 ( 3.96%) 2441410549 ( 11.77%) 1055.15
tcp6 2186063 ( 3.74%) 2409421453 ( 11.61%) 1102.17
http(s) 1788414 ( 3.06%) 2335462689 ( 11.26%) 1305.88
http(c) 335143 ( 0.57%) 30406228 ( 0.15%) 90.73
squid 35 ( 0.00%) 8090 ( 0.00%) 231.14
smtp 155 ( 0.00%) 48240 ( 0.00%) 311.23
ftp 1113 ( 0.00%) 137156 ( 0.00%) 123.23
pop3 140 ( 0.00%) 86491 ( 0.00%) 617.79
ssh 72 ( 0.00%) 12450 ( 0.00%) 172.92
dns 1157 ( 0.00%) 329061 ( 0.00%) 284.41
bgp 97 ( 0.00%) 24698 ( 0.00%) 254.62
other 59737 ( 0.10%) 42906350 ( 0.21%) 718.25
udp6 109295 ( 0.19%) 27619733 ( 0.13%) 252.71
dns 106194 ( 0.18%) 27283754 ( 0.13%) 256.92
realaud 1 ( 0.00%) 99 ( 0.00%) 99.00
halflif 2 ( 0.00%) 193 ( 0.00%) 96.50
everque 3 ( 0.00%) 353 ( 0.00%) 117.67
unreal 1 ( 0.00%) 92 ( 0.00%) 92.00
quake 5 ( 0.00%) 525 ( 0.00%) 105.00
other 3089 ( 0.01%) 334717 ( 0.00%) 108.36
icmp6 16218 ( 0.03%) 2127828 ( 0.01%) 131.20
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2202 ( 0.00%) 2237455 ( 0.01%) 1016.10
tcpdump file: 201308281400.dump.gz (1216.73 MB)